Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F2C8684A74611EF89462C64762E951A.roa
File: 8F2C8684A74611EF89462C64762E951A.roa (raw, json)
Hash identifier: N3q90ARien6UEir2wL5hicHqN2nDAIhqS78rGDJIkoI=
Subject key identifier: 68:C3:1A:C5:D0:D8:BB:86:58:6A:96:9C:B4:69:1C:AD:D9:1E:64:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D677
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F2C8684A74611EF89462C64762E951A.roa
Signing time: Wed 20 Nov 2024 13:51:36 +0000
ROA not before: Wed 20 Nov 2024 13:51:32 +0000
ROA not after: Sat 30 Nov 2024 13:51:32 +0000
asID: 44559
IP address blocks: 45.199.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54903 (0xd677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:51:32 2024 GMT
Not After : Nov 30 13:51:32 2024 GMT
Subject: CN=673de968-52c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:86:ab:df:0f:e0:66:48:bd:d5:7c:05:6c:
1a:9a:ca:49:b8:ca:53:85:ee:8a:b6:aa:3b:01:c5:
1b:ba:1c:e8:f2:40:43:01:f2:6d:62:86:f7:cf:b4:
28:49:dd:ce:2f:4d:0b:fc:22:05:dc:31:3f:2e:6c:
10:c0:ed:ce:8a:d2:46:13:19:13:b6:2d:dc:a8:17:
64:cb:1c:08:c9:e2:9c:d8:fc:e3:43:74:c3:a4:dd:
62:af:d3:38:b5:61:9b:63:49:63:5e:97:cd:a5:fd:
eb:78:69:c6:4f:1a:de:ac:16:c4:f4:85:7e:03:77:
82:ee:e2:aa:31:77:65:14:2d:8b:a1:e0:aa:7a:32:
7e:09:18:84:e0:15:3d:2c:f9:8e:c2:19:d3:58:a3:
35:33:b7:c5:7d:b3:b9:db:ed:22:b2:ee:46:e3:03:
b3:df:a4:8b:4e:99:e3:bf:7d:2f:79:75:71:d5:61:
83:0b:4d:95:be:d6:a8:82:25:f0:00:5a:35:45:60:
2c:98:fe:9a:03:6a:4e:b7:ee:f6:25:57:6b:33:e1:
d7:c8:61:f0:78:63:2f:c5:8b:df:5c:a2:79:9c:c9:
91:b9:0f:ab:b5:d8:5f:32:e3:e7:39:16:fc:80:d7:
52:f2:51:9d:e9:b0:ea:5e:c7:64:4c:14:32:fe:67:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:1A:C5:D0:D8:BB:86:58:6A:96:9C:B4:69:1C:AD:D9:1E:64:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F2C8684A74611EF89462C64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.218.0/23
Signature Algorithm: sha256WithRSAEncryption
48:ff:73:6e:ce:73:f8:6a:f3:95:21:ca:30:d0:42:9b:7e:74:
09:a3:e5:5c:98:07:11:97:73:29:15:3b:0e:0b:a6:42:7c:e5:
f3:63:e8:0f:be:e4:08:b7:c5:90:09:a7:9a:70:cd:c9:a0:0b:
c4:28:77:ba:92:99:74:6d:40:a2:46:f1:4a:cf:c5:33:b8:62:
c8:03:69:bc:e6:77:03:db:27:0c:e0:14:1b:86:e3:17:a7:70:
e9:10:81:14:f8:94:15:b8:b5:6d:3c:73:11:de:cd:76:37:6d:
2e:c4:20:5b:7e:01:06:d9:8c:33:c6:cb:53:9d:9f:dd:7c:cb:
c7:02:1e:0b:1d:0a:b4:6a:68:92:59:f9:64:dc:55:74:da:31:
59:62:3a:14:6a:1b:71:f2:91:b8:ab:6f:06:21:d9:76:e1:2f:
fb:70:1e:fe:5e:5a:2b:7d:25:3b:c3:fe:bb:ae:0c:3b:7d:48:
6d:5e:b1:85:8f:2f:3d:77:8a:68:61:cc:03:e8:b1:c6:c3:95:
af:74:10:3a:80:1f:96:d5:98:63:7a:3b:af:d1:58:05:71:41:
6c:88:e6:f6:72:99:fb:5d:ab:87:fe:53:cd:7c:fc:e7:a4:1e:
b1:a7:d6:ed:9e:96:1a:1c:3a:a9:88:22:aa:fb:f9:a9:98:b8:
d8:c4:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:40 2024 by rpki-client on console-ams.rpki-client.org