Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D9A47AC24A211EFB6B21FFA7CDC24C2.roa
File: 7D9A47AC24A211EFB6B21FFA7CDC24C2.roa (raw, json)
Hash identifier: Qoc+gSTFaJ7cnBrCg+UwqWS2wz0cnE/k7pIC4PzI4IA=
Subject key identifier: CA:B6:05:65:9F:6C:46:CE:9D:91:93:6D:C9:60:50:98:55:C9:3E:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8FD2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D9A47AC24A211EFB6B21FFA7CDC24C2.roa
Signing time: Fri 07 Jun 2024 07:49:38 +0000
ROA not before: Fri 07 Jun 2024 07:49:35 +0000
ROA not after: Wed 04 Jun 2025 07:49:35 +0000
asID: 137577
IP address blocks: 45.195.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36818 (0x8fd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 07:49:35 2024 GMT
Not After : Jun 4 07:49:35 2025 GMT
Subject: CN=6662bb92-a350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:fc:ac:d1:d5:09:d9:20:8e:27:1a:9d:89:
b0:1e:bb:01:53:52:2d:df:ca:eb:04:7d:ac:a1:0f:
89:75:70:f2:b7:d1:50:36:d1:ce:c5:64:dd:d7:33:
33:2c:4d:62:5c:10:78:48:8f:cf:57:9f:46:c8:00:
7b:28:db:e0:85:01:c2:f1:c8:98:06:05:a3:63:1b:
68:92:0d:87:9c:9e:f7:e4:a2:9d:45:e3:f9:0a:1c:
7f:a8:ad:70:2c:74:2f:3b:a4:14:ef:8e:01:31:73:
bb:9b:8f:cd:59:8c:60:76:4e:49:3c:9f:15:47:f8:
fa:e9:ea:29:23:94:1e:46:38:fc:f8:46:61:8f:05:
46:4b:99:8f:a0:30:7f:3b:fa:00:95:1d:d6:56:5c:
3b:6f:78:a5:a6:da:44:40:27:1a:a1:3a:17:66:82:
ae:18:8b:13:5c:1c:a7:a5:1c:51:99:fd:6b:92:2c:
85:3d:d2:22:2e:8a:44:80:21:4b:86:57:4b:40:a8:
2d:bc:55:ba:c1:e9:3e:93:23:13:12:64:21:ed:a9:
fa:23:1d:44:d4:40:22:18:f4:7e:4b:fd:d7:1a:c3:
b0:15:c3:08:16:c1:4e:e4:e7:d9:9d:48:f9:f8:5c:
d4:2f:bc:04:c2:76:8b:3e:46:5e:70:34:ef:20:31:
f1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:05:65:9F:6C:46:CE:9D:91:93:6D:C9:60:50:98:55:C9:3E:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D9A47AC24A211EFB6B21FFA7CDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.50.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:02:53:50:28:3f:8a:a5:dc:c4:93:a0:b1:96:11:35:44:0b:
f7:b6:49:f6:4f:ee:93:40:7c:b4:72:98:d2:f9:93:04:f0:45:
3f:ef:93:22:a7:0a:ed:f7:aa:65:14:50:1c:a2:6f:87:81:2a:
5a:72:a3:9d:57:72:52:80:58:7b:99:e2:7b:5e:f5:e3:6f:93:
7e:29:61:35:34:75:1a:13:be:dc:a0:f0:6d:6b:a0:55:e0:00:
c5:40:68:4a:c6:76:52:9f:f0:ec:32:bd:31:b9:99:3b:4e:b3:
91:c6:05:3e:63:d5:f7:f5:32:6c:eb:ff:1e:9d:6a:b2:d4:f8:
2d:7f:75:dc:97:3f:11:66:d7:fa:dc:3a:a1:00:44:0b:46:9c:
90:23:e7:55:66:d9:87:c0:08:6a:7d:e0:13:c3:0c:f5:da:cf:
8d:c4:eb:af:e8:5c:9b:57:69:2b:22:9a:9a:85:6e:be:8b:d7:
d0:31:87:a2:b9:ec:3e:3f:1f:1a:08:ab:91:91:9e:fb:3a:50:
f7:bc:a2:a5:3d:83:2c:5b:c5:27:cf:17:88:37:a5:61:26:eb:
23:a1:75:97:b8:47:e5:01:b5:3e:86:6d:30:79:85:93:51:44:
6f:69:1c:10:85:55:4f:53:79:8b:bc:23:b9:d7:19:64:29:9e:
4f:50:41:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:37 2024 by rpki-client on console-ams.rpki-client.org