Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CE84B1A9AAE11EFB7809876762E951A.roa
File: 7CE84B1A9AAE11EFB7809876762E951A.roa (raw, json)
Hash identifier: 3z5YrvGQ7D9lgmg2zn/4Ldq/0Z3+mFo0gF4uqKviEHw=
Subject key identifier: 42:A4:20:C3:DB:FE:EE:0A:6B:45:CE:4C:E9:B4:99:D2:63:31:7C:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CE84B1A9AAE11EFB7809876762E951A.roa
Signing time: Mon 04 Nov 2024 13:12:48 +0000
ROA not before: Mon 04 Nov 2024 13:12:45 +0000
ROA not after: Tue 03 Dec 2024 13:12:45 +0000
asID: 141883
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52652 (0xcdac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:12:45 2024 GMT
Not After : Dec 3 13:12:45 2024 GMT
Subject: CN=6728c850-e95f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:b3:01:cd:1e:cb:31:09:ec:f2:16:35:eb:
84:b1:4d:24:6b:74:48:fe:d4:e7:21:16:88:28:f1:
e8:4b:26:88:48:66:24:00:3a:09:bd:0b:51:2f:35:
f7:b9:d5:56:6c:0f:17:37:8a:fe:e1:9d:f1:40:bb:
5d:39:0a:24:6c:82:26:1a:24:7b:0a:b2:d7:cd:2b:
e8:96:5e:c3:8d:ff:02:97:74:7b:2f:26:39:27:7c:
29:f9:cb:b0:30:76:88:93:89:20:a4:98:c3:59:f5:
44:24:ef:08:79:4d:b5:c0:b1:fa:e9:40:32:9a:7b:
ba:21:52:a2:61:04:cf:c2:fd:b0:3d:90:fc:7f:9f:
12:5d:c3:b6:80:d6:12:5a:d1:e1:2b:ad:fe:fb:d4:
0c:68:7e:5a:b1:7a:3a:08:b7:47:b1:be:de:f0:70:
81:e1:0b:ac:5b:0a:96:3d:21:22:61:18:fc:b7:fb:
f8:76:f5:6b:94:3f:d4:c6:e2:eb:44:b9:f3:03:d0:
be:d3:88:4d:b0:1e:b3:a4:e1:51:a6:32:cf:ab:f7:
a6:1b:6d:8a:67:21:82:50:46:56:1d:f1:4d:99:15:
a7:30:9f:e5:14:59:61:32:87:4a:ea:2e:53:cb:46:
22:a5:88:e4:ad:d2:f0:c9:80:ec:f4:ee:67:5c:6d:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:20:C3:DB:FE:EE:0A:6B:45:CE:4C:E9:B4:99:D2:63:31:7C:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CE84B1A9AAE11EFB7809876762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
46:f2:f3:df:e1:b2:f8:ff:14:18:9d:95:2d:36:2b:35:5e:70:
14:29:d6:68:2b:4a:c6:a4:74:42:07:d0:7a:16:c8:ee:85:aa:
c5:f8:b4:d9:1d:2a:86:66:a4:f9:1f:c2:69:b0:1b:50:7e:de:
4e:51:37:3c:c9:6e:a7:e2:eb:65:b0:c9:e8:62:70:c2:ee:c6:
a4:83:16:69:41:66:7a:f3:23:af:1c:91:e1:df:dd:b4:cf:30:
ec:1b:2d:9d:76:17:2b:5d:4c:98:aa:56:7f:a7:a9:9d:c3:44:
91:74:f7:ca:ef:bf:c4:30:e8:71:b4:36:dc:17:e3:05:e5:cf:
da:12:13:a8:a9:d0:1d:c2:30:5a:68:6e:06:82:29:d9:7e:3c:
07:95:4c:9a:f7:7e:6b:5c:8b:e1:98:26:eb:a7:ea:ba:1a:a1:
05:8f:c9:67:64:c8:5d:a5:96:23:96:da:ba:09:6b:0e:37:43:
0e:12:1a:7e:3c:55:df:1c:0f:e0:29:c7:00:3c:1d:b3:2d:48:
4f:54:86:d9:b6:26:87:1e:01:45:e7:dc:83:6c:f9:54:81:39:
05:c3:72:1a:7a:65:4c:10:0a:63:a5:f1:b2:6d:3e:75:96:f3:
a5:af:4e:99:eb:18:8f:26:dc:b2:32:9e:02:6a:44:cb:11:a8:
15:4f:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:37 2024 by rpki-client on console-ams.rpki-client.org