Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81C39F3C96A711EF80942F8E762E951A.roa
File: 81C39F3C96A711EF80942F8E762E951A.roa (raw, json)
Hash identifier: yzRSYjL+qRKgU/C2dPHsfLohwYbTyjyoyhWUY/f0N10=
Subject key identifier: E4:B6:75:9F:7B:50:F1:69:18:7A:D4:4C:8D:04:26:AF:2C:11:B3:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CA17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81C39F3C96A711EF80942F8E762E951A.roa
Signing time: Wed 30 Oct 2024 10:12:45 +0000
ROA not before: Wed 30 Oct 2024 10:12:41 +0000
ROA not after: Sun 01 Dec 2024 10:12:41 +0000
asID: 271916
IP address blocks: 45.207.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51735 (0xca17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 10:12:41 2024 GMT
Not After : Dec 1 10:12:41 2024 GMT
Subject: CN=6722069d-3856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:90:e1:12:26:ca:a0:64:2d:1d:71:0f:29:
17:94:0e:da:0e:8f:31:08:32:56:08:c8:4d:7a:90:
95:a9:2e:aa:50:41:9a:bd:1c:ca:d9:bc:67:38:60:
4c:82:77:54:88:4e:4b:d7:0f:1d:cb:4c:46:80:d8:
10:36:f2:2f:95:53:da:fa:2c:ef:42:02:5b:98:16:
81:65:23:4e:b0:ba:35:95:c7:50:67:e4:96:15:49:
42:54:52:4b:2f:4a:f1:ea:d1:4a:05:a6:5f:4f:dc:
37:ee:b3:c5:78:c9:b2:db:a5:2d:64:97:ca:1e:90:
04:37:6d:2f:0e:18:34:67:1c:88:03:08:6f:f9:f2:
4e:d9:2e:25:8b:37:3e:07:7b:1d:eb:63:9b:2c:96:
ce:e4:b9:62:67:f5:47:05:0f:4c:f2:89:0d:be:85:
93:71:f2:a6:9c:54:60:46:fc:de:46:d6:e1:27:0b:
33:a3:73:82:23:0a:18:55:37:cf:76:af:68:aa:a2:
66:1c:98:8f:54:0a:dc:5c:65:85:83:79:1e:6e:1b:
e5:cf:2c:5b:54:c1:10:17:63:eb:2a:8c:a6:b0:e9:
a5:7e:d0:c7:06:aa:4f:34:2b:69:aa:1d:9d:1a:c4:
ad:5c:ab:de:9d:54:95:68:39:2c:af:08:59:cf:b3:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B6:75:9F:7B:50:F1:69:18:7A:D4:4C:8D:04:26:AF:2C:11:B3:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81C39F3C96A711EF80942F8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:33:a0:7e:1d:37:ff:31:8d:ce:67:17:f1:65:58:cf:03:44:
50:37:7c:bc:dc:33:77:9f:73:3a:39:e6:71:53:5b:ad:27:07:
82:3b:9c:13:f8:b1:b5:4f:69:02:5a:98:ce:c1:9b:1d:31:72:
29:1b:d8:50:7a:ff:84:ad:9b:92:89:70:e2:08:3e:03:23:50:
33:87:5d:55:03:9f:d2:18:5f:85:c6:e8:e2:3b:16:81:7d:1c:
c6:b1:d7:e1:51:3e:5c:e1:26:6b:94:c4:b5:f8:ea:bb:a5:d0:
4d:55:69:9d:ff:66:33:45:53:35:70:9a:40:36:a7:a0:b5:c3:
c6:b9:6a:c5:97:36:4a:99:3e:a4:d5:e9:52:f2:3a:d3:d2:73:
0a:d9:56:4d:bd:50:6b:91:c3:55:9c:ef:64:78:53:d0:b0:b2:
cc:de:56:3b:00:b7:39:d8:8a:48:af:5e:b4:49:85:e0:9a:5a:
28:fa:a8:1f:ed:0f:15:6c:3f:44:22:75:d6:73:66:1e:e5:a5:
7a:9a:09:73:bf:8e:ee:6e:b2:34:88:5f:a2:39:cf:db:d5:b5:
7e:2e:ba:9a:44:bf:31:b4:87:1b:fc:ca:72:1d:8c:af:19:da:
e3:f0:71:af:66:82:66:49:28:c6:56:f3:65:08:99:37:e7:da:
8a:39:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:38 2024 by rpki-client on console-ams.rpki-client.org