Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8366C9DCB6CC11EF95E2F3B6762E951A.roa
File: 8366C9DCB6CC11EF95E2F3B6762E951A.roa (raw, json)
Hash identifier: KuUC/VLi1xguIs08L7QfUvVBNcivxIH8UkjT+hL92Cw=
Subject key identifier: 8B:BA:41:E8:5F:7A:01:0C:F1:2F:88:12:B1:32:89:78:74:11:1A:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: E1FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8366C9DCB6CC11EF95E2F3B6762E951A.roa
Signing time: Tue 10 Dec 2024 07:58:17 +0000
ROA not before: Tue 10 Dec 2024 07:58:13 +0000
ROA not after: Sun 12 Jan 2025 07:58:13 +0000
asID: 54252
IP address blocks: 45.199.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57853 (0xe1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 10 07:58:13 2024 GMT
Not After : Jan 12 07:58:13 2025 GMT
Subject: CN=6757f498-ff66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:d6:8c:a7:96:bf:9b:e2:c8:19:73:4d:5b:
a9:d6:c2:1b:a5:4e:28:e5:1c:ff:d2:ad:ea:72:80:
42:e5:0e:34:0f:f5:60:95:86:58:26:61:d4:02:a1:
4c:34:e4:10:bc:53:c9:14:22:8d:70:33:74:04:d2:
3d:5a:58:51:fe:d8:ba:af:a7:f4:38:0b:cd:c8:16:
4b:06:d4:d0:b3:40:e8:c8:c6:26:4f:52:72:d5:e5:
f3:37:11:d2:32:e9:c5:18:a1:9f:29:35:16:d6:cb:
66:70:5e:de:d4:79:8b:d9:aa:79:ca:c6:a1:2d:00:
6f:cc:e2:ab:c2:4f:92:51:c9:94:5b:49:09:e9:c0:
4c:39:1c:5c:64:f8:19:53:54:d7:f9:05:0b:3b:61:
76:14:68:da:10:5f:80:de:2a:1d:fb:99:80:ef:7e:
d9:e5:47:6b:1b:39:40:f2:9f:29:4a:fa:19:15:43:
d2:1d:b6:21:f4:6b:d1:c2:9c:34:20:b8:fd:c5:90:
2a:55:63:15:72:ad:8b:21:f7:55:ed:b1:9f:9d:b8:
17:68:10:a7:93:e4:a5:f2:fa:b1:0e:25:19:88:4d:
63:b8:c0:b5:ad:e3:db:3b:1e:65:65:d7:ec:ce:5b:
c0:ef:20:76:7a:66:04:bd:63:a4:c0:9d:10:68:71:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BA:41:E8:5F:7A:01:0C:F1:2F:88:12:B1:32:89:78:74:11:1A:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8366C9DCB6CC11EF95E2F3B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.142.0/24
Signature Algorithm: sha256WithRSAEncryption
69:07:73:8c:e8:68:32:5f:c1:1d:a6:f3:5d:33:7f:3a:cd:bf:
50:2e:65:89:fa:89:a7:50:d3:d2:7e:bf:d4:ea:c1:0c:6f:dd:
27:bb:b3:e3:a8:cc:7e:c4:dc:14:c0:20:3d:77:a0:ce:49:3a:
1f:25:27:e2:c4:02:7b:27:1a:dc:4f:f3:6c:e0:22:0f:5c:06:
d9:44:a1:9f:5e:a7:34:23:50:9d:27:0c:f5:09:9e:6c:65:d7:
eb:af:ae:0c:6d:d5:f9:db:7a:99:23:68:8e:ce:b5:f9:44:0b:
7f:0d:14:ef:7c:dd:5c:45:a3:8c:ae:d1:fe:d6:e6:cf:9e:c0:
e9:92:6f:82:4a:83:15:7f:0a:d9:f3:75:c1:22:41:fb:92:93:
89:2d:4c:86:57:df:84:16:8d:35:71:25:21:e0:c3:89:6a:ba:
fd:94:1d:0b:39:4f:60:a2:ad:a6:9d:c0:7d:2a:c3:51:35:06:
54:f3:8d:de:c5:7e:5a:60:bb:0d:41:be:52:3a:e5:8e:a5:3d:
7d:68:66:36:cb:4d:a8:82:fa:40:98:2b:75:db:0d:c9:bc:d1:
b2:af:23:b9:ea:b3:47:25:20:81:c5:91:4b:1b:77:66:ed:79:
3e:9a:5c:74:8d:e8:00:12:fe:7c:26:33:00:bd:03:70:5b:a0:
f9:87:d1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 10:24:24 2024 by rpki-client on console-ams.rpki-client.org