Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90B11E308D2D11EFB0EB245A762E951A.roa
File: 90B11E308D2D11EFB0EB245A762E951A.roa (raw, json)
Hash identifier: qbsa0dMoD3T+IP07XTNIgwC+W3pQfnIZzSsfT9lrmXk=
Subject key identifier: 88:77:47:6F:0B:40:DE:C8:4D:61:0D:C4:36:BD:6C:08:0C:49:DF:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C67C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90B11E308D2D11EFB0EB245A762E951A.roa
Signing time: Fri 18 Oct 2024 08:47:11 +0000
ROA not before: Fri 18 Oct 2024 08:47:08 +0000
ROA not after: Sat 23 Nov 2024 08:47:08 +0000
asID: 44559
IP address blocks: 45.200.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50812 (0xc67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 08:47:08 2024 GMT
Not After : Nov 23 08:47:08 2024 GMT
Subject: CN=6712208f-f531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:19:73:16:d3:ac:81:11:4d:a6:b4:fe:1d:78:
aa:b2:1f:e5:01:18:15:9d:d0:f8:d0:09:9d:72:06:
28:3a:21:96:16:a4:26:2e:4d:9d:af:d7:e2:06:0d:
d1:86:da:97:3d:8f:9c:72:97:8c:a2:6b:d5:c4:74:
09:96:13:bf:64:20:9f:db:20:c1:f5:71:5f:3e:6c:
0b:59:f4:be:aa:36:e9:38:31:d8:9b:39:99:dc:76:
ee:8d:f0:8e:98:95:09:ec:2a:72:59:25:64:16:e1:
44:ba:4c:38:ec:dd:60:f0:57:78:c2:d4:50:47:8c:
b9:45:6c:1a:05:d0:d5:bf:82:ae:09:0e:7f:1c:76:
48:85:1e:f6:5b:d2:a5:1c:23:e0:b0:71:e1:c0:dc:
32:be:52:ca:75:fe:05:7c:3a:76:94:e5:c8:cb:17:
28:56:70:cc:8a:24:c8:c8:4c:db:d9:f2:52:8b:c1:
67:78:5c:3b:16:00:83:a7:30:dd:43:ad:4d:f3:a0:
0c:85:7b:40:a0:15:9f:6a:02:52:06:45:45:95:16:
b2:f4:1a:31:14:49:e4:5b:cd:11:3b:7b:6a:ef:24:
5f:ad:40:f9:0d:c6:08:20:57:86:16:b5:56:40:7f:
52:3b:69:40:4f:ad:61:19:4a:a5:71:b2:e4:0f:57:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:77:47:6F:0B:40:DE:C8:4D:61:0D:C4:36:BD:6C:08:0C:49:DF:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90B11E308D2D11EFB0EB245A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.180.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8e:f5:21:f0:5f:46:5f:7a:a7:52:1f:f2:99:7f:b0:53:99:
15:f5:74:93:40:cc:d3:28:26:dc:91:93:a9:1c:76:42:e9:8a:
96:3b:88:00:07:9a:ce:a3:f2:d6:5a:92:02:57:02:e6:20:c4:
47:14:8f:27:a7:32:3f:46:64:f8:25:e9:de:4b:99:ad:dd:31:
16:0e:a8:7b:72:43:53:0a:4a:18:a9:8e:a4:88:2a:a1:ef:77:
a0:63:10:34:ae:50:fb:9b:ff:c3:d8:78:0f:bf:85:97:05:02:
ed:c1:7d:fc:9a:d1:62:d0:ba:b5:b8:c9:fd:ea:fa:8b:05:b9:
d3:7f:10:b4:56:2a:22:d3:a8:a5:47:e8:0b:ea:bf:24:05:91:
65:77:b6:f3:eb:7d:80:32:bb:91:58:7e:95:dd:d1:fc:f1:c3:
82:31:eb:9c:c3:58:36:28:44:24:d5:a5:96:82:79:f7:65:a3:
97:64:c9:51:ce:3d:5f:25:27:a4:3e:bd:d7:c6:d1:2b:78:c1:
ff:33:51:cd:12:df:c7:9e:67:d1:f4:cc:9a:ca:a9:bd:29:e3:
e2:f8:d4:0a:da:98:8e:e6:47:6a:94:f4:02:33:1f:ff:8e:03:
82:af:7d:41:1a:f8:10:e7:b7:45:96:80:23:7f:4c:3e:9e:8e:
88:41:40:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org