Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87937948992F11EFB444E083762E951A.roa
File: 87937948992F11EFB444E083762E951A.roa (raw, json)
Hash identifier: O+s7718/J5dqXKrMfWo7hdpf79aCDDVDUpIzR8AZABQ=
Subject key identifier: 21:1C:99:83:19:E7:3C:04:1A:82:69:F3:63:8E:69:A6:38:7F:68:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CC88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87937948992F11EFB444E083762E951A.roa
Signing time: Sat 02 Nov 2024 15:31:29 +0000
ROA not before: Sat 02 Nov 2024 15:31:25 +0000
ROA not after: Wed 04 Dec 2024 15:31:25 +0000
asID: 42831
IP address blocks: 45.198.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52360 (0xcc88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 2 15:31:25 2024 GMT
Not After : Dec 4 15:31:25 2024 GMT
Subject: CN=672645d1-d86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:0f:27:4f:9e:94:2e:5d:b6:40:6f:d5:94:
90:c9:b1:72:55:1c:b4:de:12:71:10:20:5b:bc:68:
00:79:bf:c3:eb:b5:c8:ef:0f:f0:2a:21:08:51:a8:
46:4e:7f:e3:14:85:bb:06:8d:3f:05:a9:26:c5:2b:
ac:5a:5d:51:81:8f:e4:21:ea:80:fa:4c:9c:8c:78:
01:f7:04:57:a3:f2:c8:ba:3c:e0:89:75:e5:c4:56:
5c:ae:86:b1:cf:5c:71:81:a3:3a:c9:3c:94:72:9a:
9d:6a:00:7b:90:19:15:3a:43:dc:00:f7:93:b4:ff:
c9:39:a9:6b:53:c2:d2:d0:5a:06:f7:63:54:28:ff:
f1:5d:d8:00:24:cf:f9:ca:d7:44:51:67:8a:d9:99:
7f:23:11:78:61:71:03:eb:3d:72:ce:74:90:c9:b9:
19:1b:f1:67:6f:e0:d9:0c:23:41:93:74:7e:95:08:
ca:84:a5:4b:62:ba:f5:99:df:6e:39:c7:f7:69:35:
c4:1e:a1:f4:5f:31:05:48:35:f0:1e:d1:fa:c8:e1:
58:85:af:b8:99:f1:cb:36:d1:bf:e2:a4:95:c7:fd:
a7:b9:5a:c0:de:8c:f5:04:6a:13:e4:cd:ab:2d:71:
57:89:54:4d:33:03:8b:df:83:4d:3b:cb:cc:5c:c0:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1C:99:83:19:E7:3C:04:1A:82:69:F3:63:8E:69:A6:38:7F:68:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87937948992F11EFB444E083762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
94:8e:8d:9b:ea:0c:43:60:e4:87:27:c6:a5:1e:8a:1f:77:2d:
9b:89:1f:a9:42:70:32:c3:3d:d5:1f:33:5c:21:f2:4b:ac:21:
ec:41:48:54:e7:89:e2:33:88:24:c1:20:94:a6:54:c6:22:6c:
2b:4f:e2:05:ca:61:af:f3:8b:5b:cb:17:76:3a:fb:a9:ad:09:
3e:88:92:08:07:50:ac:0f:c9:f0:f5:31:40:fe:f8:dd:86:54:
5d:5d:1e:8c:17:00:a6:13:74:e8:1b:ab:b7:be:7b:84:03:4e:
be:ba:32:7f:61:a5:24:8f:46:64:f3:c1:85:b4:e0:56:20:d8:
09:d5:74:17:d6:45:47:60:08:b2:17:2f:3f:ca:18:03:d7:95:
ed:0b:26:ed:70:f0:77:62:0f:5a:fd:62:ad:96:89:0b:a2:49:
fc:79:42:fb:55:7e:ac:5e:32:01:94:19:f8:83:1d:dd:9c:36:
4a:de:25:9f:5d:08:8e:c3:dd:d4:87:31:5b:ec:c4:71:95:fd:
dd:e8:60:27:eb:20:04:5c:1a:d2:6b:25:96:44:f0:ef:bd:03:
07:b2:f0:87:a0:a4:e0:94:14:00:a7:5d:a0:d6:65:cc:54:c2:
ae:8f:fa:77:df:47:8f:aa:e6:df:c8:c9:37:ed:6c:17:ae:fe:
1e:79:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org