Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91A86BF49F7F11EF9DD63A4D762E951A.roa
File: 91A86BF49F7F11EF9DD63A4D762E951A.roa (raw, json)
Hash identifier: wghEN/UHwh0/uef4GurVfkNm7l6EyLQEy9wfdgJjwSg=
Subject key identifier: 13:9F:82:E6:82:B2:E3:38:84:3C:94:CE:B0:09:97:EF:27:A1:77:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D110
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91A86BF49F7F11EF9DD63A4D762E951A.roa
Signing time: Sun 10 Nov 2024 16:19:33 +0000
ROA not before: Sun 10 Nov 2024 16:19:29 +0000
ROA not after: Fri 17 Oct 2025 16:19:29 +0000
asID: 132813
IP address blocks: 45.204.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53520 (0xd110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 16:19:29 2024 GMT
Not After : Oct 17 16:19:29 2025 GMT
Subject: CN=6730dd14-be3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8f:00:3d:ec:f2:8a:ab:d2:53:71:d3:df:47:
b7:82:d9:fd:57:46:bf:a1:18:1e:b3:d3:e5:88:17:
93:86:3b:e2:95:4c:37:9c:e7:a2:2c:1d:28:2a:52:
60:f6:42:3a:39:42:11:bd:25:d0:83:a4:83:15:52:
18:db:74:df:d2:92:68:0a:54:83:41:f6:41:3f:f4:
96:bb:bb:73:3a:07:e8:89:a0:42:1c:34:ac:4b:d4:
54:73:75:8e:ef:27:3f:ae:ed:78:ef:ee:7d:19:35:
84:a0:74:2e:66:3e:a7:ab:16:cc:bf:8a:e2:04:87:
a0:60:9a:32:78:9f:bd:17:98:21:19:50:64:f3:27:
e0:3f:0c:bf:fd:00:d1:83:a9:1e:e8:d9:76:06:4f:
f9:da:14:06:89:e1:c6:cb:b5:9e:dd:ae:f0:92:25:
b8:73:d9:76:c2:31:3b:fe:23:de:45:6c:91:9d:db:
81:35:aa:92:07:6f:5b:58:aa:bd:d7:8f:ac:b5:55:
6b:e3:c3:3a:25:0c:8d:4a:4b:73:ea:84:d3:40:d7:
4c:9d:7d:3e:8f:51:e2:e4:1b:b8:60:a2:15:7b:b5:
5d:05:b1:8b:7f:d7:85:f4:48:52:3e:b3:58:b0:8d:
df:58:74:9c:04:1c:0c:99:21:18:0a:30:b3:7b:2e:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9F:82:E6:82:B2:E3:38:84:3C:94:CE:B0:09:97:EF:27:A1:77:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91A86BF49F7F11EF9DD63A4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.8.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:40:ec:68:b9:c2:f0:67:fd:1f:7b:d0:7d:ea:97:ea:9a:d0:
2b:cb:e3:55:06:11:f3:b2:50:47:4d:ea:85:11:89:dc:87:73:
0d:5d:74:9e:8b:53:e6:64:d2:ce:a5:e3:f3:fc:a2:24:f2:c0:
58:d9:d0:3a:ac:8a:77:66:40:a1:54:3e:3b:e4:eb:17:06:72:
e1:00:ee:d6:99:dc:55:8b:4f:3f:6d:43:e5:22:7b:41:d2:3b:
c3:a2:74:6e:82:1b:0d:00:dc:b8:4e:32:85:45:70:9c:a4:1d:
ab:2f:f8:cd:aa:c5:6e:fc:82:b5:35:db:86:35:42:cf:0b:9d:
7e:42:0a:0a:82:51:d8:0e:6f:e1:68:3c:a7:a9:f2:2f:dc:fe:
82:22:25:5a:8c:2b:b0:bf:55:76:94:6f:91:90:a4:84:a3:fd:
bb:ca:d4:3c:fc:20:e1:28:1c:45:2c:66:7d:9f:b6:66:85:0d:
66:9f:e7:41:07:fa:a5:3c:0c:cc:62:63:6c:b4:87:bf:8e:fe:
bf:03:42:45:f3:f0:44:13:d3:56:7d:79:6f:2b:02:3b:81:fa:
44:9c:7f:27:fb:2d:84:27:e7:8a:2d:d3:75:23:3c:33:35:98:
8c:bb:bb:b0:f8:1a:8c:63:3c:36:8d:ec:e5:86:2f:29:08:1e:
fc:ff:29:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org