Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87C5EA208F8B11EF8849C246762E951A.roa
File: 87C5EA208F8B11EF8849C246762E951A.roa (raw, json)
Hash identifier: Dq4YCaWIQSmLngY6urc/YzBLZF6CDEoa5KPavJGNHIw=
Subject key identifier: F7:C6:AE:33:1D:00:82:E1:A5:BB:1C:5A:64:94:F4:A9:42:09:52:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C75F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87C5EA208F8B11EF8849C246762E951A.roa
Signing time: Mon 21 Oct 2024 09:04:51 +0000
ROA not before: Mon 21 Oct 2024 09:04:48 +0000
ROA not after: Mon 25 Nov 2024 09:04:48 +0000
asID: 401366
IP address blocks: 45.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51039 (0xc75f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 09:04:48 2024 GMT
Not After : Nov 25 09:04:48 2024 GMT
Subject: CN=67161933-e85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:af:05:74:e5:7d:c7:a4:af:1c:53:33:1f:
42:31:60:56:d8:4b:8c:d7:4d:53:07:7a:c5:0e:8a:
5a:67:a1:c0:94:2c:f3:f8:84:0f:12:46:7a:ef:cf:
f4:bc:86:e7:c3:ee:d9:99:4e:42:9c:33:fd:e0:ce:
4a:31:9d:49:1d:27:b8:d7:8f:76:80:37:d4:2b:8c:
d0:94:49:5f:80:83:14:d5:8f:ea:c8:8f:0c:50:8f:
63:3c:36:5d:ac:7a:d9:e1:a6:a1:44:f6:5e:f2:35:
36:eb:65:9e:ef:93:56:77:b2:32:4c:eb:0e:32:7e:
6e:ef:f9:ca:c2:d4:d6:e3:87:d4:46:4e:18:25:2d:
d6:0f:bd:88:81:16:a4:35:cb:c7:e5:af:52:42:db:
61:03:a9:47:eb:e7:c8:00:29:d3:3c:43:d5:5e:6a:
67:06:7f:02:4b:0d:ad:cc:da:15:31:67:f3:3a:f4:
20:f8:7a:6d:de:b1:92:df:a6:19:df:37:5e:d4:64:
b4:d7:f3:0b:28:82:d2:53:9b:d9:08:fc:64:a0:43:
d4:30:d2:4c:57:73:67:42:72:5b:d6:67:d1:b1:2d:
80:4d:1e:69:d2:97:c4:ad:ed:47:58:7f:36:75:f2:
35:a7:c0:24:6d:78:e8:f0:e2:a3:8d:e5:66:2f:8e:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C6:AE:33:1D:00:82:E1:A5:BB:1C:5A:64:94:F4:A9:42:09:52:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87C5EA208F8B11EF8849C246762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
48:78:d3:44:d0:86:b5:11:9f:14:3d:af:9d:e2:50:fb:31:07:
f2:36:ff:38:f2:4e:d9:18:59:ae:24:d9:15:32:35:57:19:56:
f2:9b:14:f8:b5:11:b3:36:5f:3c:01:9c:11:be:62:2c:63:44:
7e:80:6f:92:15:31:6a:90:58:70:3b:b1:2f:cd:3c:02:e4:24:
8a:23:47:e6:4d:51:75:47:bc:b7:f7:9e:ec:6c:82:05:50:8b:
7c:db:ea:60:30:74:4c:38:a3:7c:50:e0:9b:4e:2d:f5:c7:83:
eb:8e:45:55:21:d6:9f:5a:9a:8a:04:72:cf:67:e0:32:98:a9:
2a:2c:86:6f:3a:ef:17:ad:03:4f:cb:21:51:bf:59:dd:27:9f:
84:55:a4:07:ee:c0:b4:3f:30:14:9c:ba:fc:e1:23:f3:85:15:
dc:94:33:1f:46:ff:81:f8:80:e9:21:53:b7:50:60:fa:c3:a7:
e7:72:f4:04:b5:a1:ed:2f:48:cd:45:80:d0:fe:03:a7:7e:74:
4b:56:ba:2b:f0:0b:ad:05:99:f6:51:80:a5:74:9b:60:f5:9c:
27:60:fe:5c:46:a9:68:9f:4d:8c:f4:ee:48:68:99:95:57:f5:
df:37:94:4c:b4:38:8c:be:e4:92:a5:bd:32:78:04:52:4e:5c:
11:4e:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:39 2024 by rpki-client on console-ams.rpki-client.org