Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E72924EA25D11EF94594081762E951A.roa
File: 8E72924EA25D11EF94594081762E951A.roa (raw, json)
Hash identifier: /koO0+fz0VNNJ2YacGILiY904xpRrIoPBbXASeoj5yg=
Subject key identifier: 41:41:69:65:33:BD:AB:FC:31:6D:84:16:CF:42:0C:40:2C:DA:37:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D27F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E72924EA25D11EF94594081762E951A.roa
Signing time: Thu 14 Nov 2024 07:53:38 +0000
ROA not before: Thu 14 Nov 2024 07:53:34 +0000
ROA not after: Sat 14 Dec 2024 07:53:34 +0000
asID: 6079
IP address blocks: 45.205.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53887 (0xd27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 07:53:34 2024 GMT
Not After : Dec 14 07:53:34 2024 GMT
Subject: CN=6735ac82-edc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:91:5c:36:aa:91:6a:fd:ad:9e:67:6d:1c:
4b:13:69:fe:55:ac:12:31:11:44:74:28:1b:52:a4:
5a:c2:60:1e:42:8d:7a:11:55:0d:61:b4:18:08:7d:
9a:75:d2:1f:75:f4:7d:3f:ba:77:00:27:74:65:be:
32:16:25:89:76:3c:4d:51:d2:4d:8c:35:07:2c:bf:
74:a9:9d:5b:79:64:c3:ec:e6:98:38:d7:4a:f2:2e:
83:72:98:f6:42:dd:61:59:86:71:0a:6d:cd:8f:73:
ef:55:1a:67:70:0c:6e:57:c6:a1:60:fb:96:dd:47:
00:20:db:00:16:61:43:e5:e4:55:43:9d:25:0e:5a:
c5:c9:06:f8:44:6c:39:19:d2:48:50:59:95:96:b7:
c0:5d:b8:99:84:a6:e8:1d:eb:5f:d7:df:47:1c:b3:
e0:c4:a0:bb:55:2f:ec:14:2f:b6:a2:8a:a9:97:61:
c0:54:96:38:da:99:1e:12:6f:f3:23:ce:0e:34:91:
e9:e8:2c:4e:0c:b0:49:dc:07:92:2c:0d:cb:9c:e1:
a5:d6:af:83:7f:65:35:90:b7:bb:8f:d3:bc:5f:e3:
df:f8:21:b1:56:ad:7d:71:56:5f:de:10:fe:20:0a:
b3:0f:5e:22:ef:70:5f:51:fd:b6:8d:18:c8:5b:36:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:41:69:65:33:BD:AB:FC:31:6D:84:16:CF:42:0C:40:2C:DA:37:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E72924EA25D11EF94594081762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:a4:03:d5:cb:fb:a3:75:55:86:b4:6d:c7:98:e6:a1:68:b5:
7c:1c:e9:72:c3:99:ed:57:cf:a4:00:9e:d7:7f:37:3c:ee:c8:
53:9b:0c:74:8e:bb:44:7a:ad:1e:63:48:e8:38:f2:c2:46:1f:
7f:5b:05:a0:9f:b7:7b:89:0b:0e:e0:76:44:17:2e:c0:dd:18:
b6:c1:90:76:53:ab:fe:20:1e:22:6c:e1:b2:f4:c6:b7:8b:d4:
fd:fd:5f:1d:54:18:2a:21:a9:5d:23:b5:12:b6:22:3f:41:4f:
4a:9f:8d:1b:78:92:03:5c:eb:4f:0b:c5:e1:f8:eb:71:0a:58:
12:c2:81:14:04:12:31:a4:27:92:23:c1:f4:5c:d6:8a:a3:3e:
68:b3:51:83:49:36:36:9f:85:41:85:26:39:20:ad:50:bb:d2:
06:98:f2:a4:ec:a4:74:22:ee:bf:86:46:c5:07:37:dd:7e:23:
a3:d4:ec:7b:60:6c:2e:24:ee:9b:d3:88:01:27:b6:af:56:1d:
10:9f:3d:bb:fe:e9:c9:d6:f4:80:54:61:23:0c:dc:22:48:90:
97:41:7a:df:7d:f4:9c:f5:8f:10:d2:30:61:9e:5f:4a:32:44:
b4:ce:72:af:6f:28:ce:bc:8a:20:62:92:9e:79:53:18:0c:e1:
c9:f5:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org