Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/821328DC91E211EFACCD2080762E951A.roa
File: 821328DC91E211EFACCD2080762E951A.roa (raw, json)
Hash identifier: aW76in+ig+8Bd9HwAhb1Zw48AMkDtGr5uPHZxUOfthE=
Subject key identifier: 66:12:FE:F0:85:41:CD:87:2F:BD:F6:3E:A4:AC:FC:F1:74:0D:D9:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C842
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/821328DC91E211EFACCD2080762E951A.roa
Signing time: Thu 24 Oct 2024 08:32:30 +0000
ROA not before: Thu 24 Oct 2024 08:32:27 +0000
ROA not after: Sat 30 Nov 2024 08:32:27 +0000
asID: 14315
IP address blocks: 45.202.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51266 (0xc842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 24 08:32:27 2024 GMT
Not After : Nov 30 08:32:27 2024 GMT
Subject: CN=671a061e-f57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:78:59:6e:d4:a8:ae:ee:de:95:54:71:96:
4c:4a:6c:43:62:38:86:86:e5:bb:b7:cb:49:94:73:
29:aa:da:05:f3:7d:78:e4:5b:f9:f9:63:22:2e:cd:
04:34:5c:11:0e:6c:af:16:41:2a:2e:bc:ef:0a:7d:
bc:4f:29:f4:c5:37:ec:6c:f0:53:3c:61:a3:1b:c6:
6f:47:4f:8a:f1:5a:aa:7f:a6:50:0e:ea:53:ea:c1:
25:4e:8d:47:ab:1f:53:06:fa:51:ef:ca:a6:df:24:
0b:be:e5:c4:95:39:c0:b1:67:33:52:51:73:d7:03:
db:27:64:12:01:73:8d:9a:d3:64:32:54:4e:f1:1c:
9b:1d:a6:df:0a:42:f2:71:75:9e:09:e3:00:3d:36:
f6:62:ab:95:ca:47:bf:d6:17:e4:c3:2d:0c:0b:33:
d7:dc:ba:da:6d:b2:7e:75:aa:9d:5a:73:55:a2:31:
97:03:c1:fc:0d:d5:c5:f9:61:5c:d1:e4:6d:90:8b:
20:62:68:5e:f3:ec:07:32:fc:d1:14:71:65:f9:1f:
29:61:57:41:85:a9:30:59:58:cf:33:cf:ef:55:e6:
d9:a6:de:ce:36:10:79:09:f2:de:aa:b5:87:44:09:
06:cc:aa:3c:ee:01:02:35:c1:e2:f3:fd:df:65:a1:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:12:FE:F0:85:41:CD:87:2F:BD:F6:3E:A4:AC:FC:F1:74:0D:D9:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/821328DC91E211EFACCD2080762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.197.0/24
Signature Algorithm: sha256WithRSAEncryption
55:31:3e:08:8c:d3:e2:8c:50:6f:6b:79:b8:7d:d0:3c:bf:21:
7f:c7:ca:18:ac:56:62:11:31:9b:d3:31:47:55:ef:01:f6:7b:
8e:06:e8:6e:93:99:26:27:b2:ee:a1:d9:0f:49:70:48:25:36:
ee:81:41:9d:ec:52:22:38:f1:17:23:15:cf:1b:c4:df:4a:55:
4e:53:01:f2:82:2a:5f:ef:f1:a4:17:3c:6f:57:e2:eb:9f:36:
d0:3e:a1:1c:e6:cd:af:2c:c7:f1:c2:16:15:90:f8:ca:7f:a6:
26:ec:4c:c8:6e:98:cc:79:4b:76:89:e8:51:1b:55:78:be:56:
66:27:ab:1a:cd:23:b5:09:31:2f:46:fd:69:dd:21:69:02:13:
bf:3f:62:c8:9f:eb:ab:71:16:02:46:b5:89:83:8e:fa:4a:4e:
0d:89:6b:f1:3e:ff:97:57:89:73:8e:87:72:f5:85:f9:e9:67:
66:1a:ff:a0:71:47:66:aa:97:15:c6:a6:21:7f:9d:3c:81:9d:
60:62:4d:71:c1:4f:07:ef:87:dd:bc:ac:58:e4:a6:04:41:1e:
42:d6:6f:d9:c3:e9:95:5c:11:8a:1a:82:65:6a:ad:37:ee:e5:
0f:4d:77:31:aa:7c:3b:d6:8d:10:26:4c:03:05:1c:c8:54:b0:
ab:76:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org