Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8428502EA19C11EF9858FF46762E951A.roa
File: 8428502EA19C11EF9858FF46762E951A.roa (raw, json)
Hash identifier: q+ojBNtNguD37cY9jgojUk/svo0aN+cEeNbwE0n+GQU=
Subject key identifier: FC:61:8C:5D:2A:E3:AE:77:22:11:8B:20:63:DA:78:61:68:92:0E:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D25A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8428502EA19C11EF9858FF46762E951A.roa
Signing time: Wed 13 Nov 2024 08:51:48 +0000
ROA not before: Wed 13 Nov 2024 08:51:44 +0000
ROA not after: Sat 23 Nov 2024 08:51:44 +0000
asID: 142062
IP address blocks: 45.204.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53850 (0xd25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 08:51:44 2024 GMT
Not After : Nov 23 08:51:44 2024 GMT
Subject: CN=673468a3-5394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:05:8f:62:3a:c6:a8:60:11:a0:75:1d:c8:
c9:02:84:16:a0:b2:f3:03:cd:72:bd:ae:33:64:c0:
60:31:04:a0:a0:a6:e3:08:87:e5:24:32:f1:96:a2:
da:82:96:27:95:e0:f0:7c:a5:16:3d:e1:0e:16:96:
35:13:83:e4:e6:85:a4:f8:14:98:90:b5:ce:b0:fa:
33:f3:c2:6d:69:7a:d9:43:f2:c5:e9:5d:57:b1:cd:
dc:fd:63:ff:8b:c5:9c:8b:f5:16:a8:aa:de:88:8f:
bd:4d:1b:45:4f:e0:12:af:e0:8a:b2:d8:de:4c:9d:
59:b7:7f:76:9b:58:44:73:e6:bf:2a:6d:d7:fc:f0:
65:b7:31:d8:62:2c:2b:08:23:24:1f:b2:99:a7:d7:
4a:8a:9d:2b:23:02:ed:9b:44:70:cf:4a:c1:60:28:
99:ed:da:e2:74:52:b5:64:ac:26:47:82:12:e6:03:
14:69:71:5f:90:89:e0:2a:fc:43:c7:6f:6c:e3:79:
fd:05:d1:97:06:9d:b7:91:35:95:88:46:f7:38:d8:
94:58:14:d2:9b:5b:b4:4e:3e:80:3e:3b:dd:91:ae:
ce:37:e7:5c:0e:41:1b:6f:86:fc:a7:d8:a8:93:8e:
5e:fc:18:16:1e:72:6a:ea:13:6b:4b:59:7f:13:a6:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:61:8C:5D:2A:E3:AE:77:22:11:8B:20:63:DA:78:61:68:92:0E:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8428502EA19C11EF9858FF46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.88.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:16:0b:1d:db:a2:bd:38:55:de:f9:cb:78:d8:ab:02:77:7b:
d4:54:85:49:af:80:be:97:d1:dd:94:b3:c8:8d:5e:54:5e:04:
97:37:43:ab:bb:d9:01:5c:2a:d8:a5:66:0c:c8:84:18:77:1b:
7d:79:43:3d:27:70:ae:af:c3:c0:b4:48:9e:0f:fe:9a:b5:34:
b6:a2:b7:b4:3c:3e:97:05:88:71:aa:54:71:76:30:84:cb:a5:
3b:19:33:35:c9:f9:73:c9:ab:bc:d1:3e:5d:6e:f1:fa:00:0f:
5f:ab:eb:96:06:b0:b3:f1:ee:4f:53:23:85:ec:97:fc:76:e9:
f9:a2:23:1c:be:c2:40:7b:8f:a5:70:f3:2e:e9:5d:cc:38:1a:
15:c6:90:34:ba:c8:ee:d0:7b:27:ad:3b:a4:72:d2:b9:90:6c:
ff:fd:18:ea:9b:63:f7:cf:41:0e:7e:27:34:95:ee:cf:86:2e:
56:f2:8d:52:1e:63:f7:f6:5e:db:df:95:30:09:4c:50:c5:36:
41:77:df:3a:60:de:e6:fd:a0:7b:78:a9:ff:7a:cc:cf:2b:63:
ff:66:1d:12:38:42:24:d1:65:32:d1:8f:38:8e:2a:71:33:e8:
27:e9:ab:6c:74:00:8d:75:37:4c:87:39:3a:fd:2f:bf:1f:c2:
b7:d3:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org