Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93AA40E6AD5B11EFBFA16AB9762E951A.roa
File: 93AA40E6AD5B11EFBFA16AB9762E951A.roa (raw, json)
Hash identifier: banEco0Ao4v/NkCs2FZ82EEb9wK1Fcc0/9tCLBkVLp8=
Subject key identifier: CC:7D:68:EA:D0:4C:ED:16:7F:32:62:7B:27:72:39:7A:4E:C7:D5:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: DC51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93AA40E6AD5B11EFBFA16AB9762E951A.roa
Signing time: Thu 28 Nov 2024 07:37:10 +0000
ROA not before: Thu 28 Nov 2024 07:37:07 +0000
ROA not after: Tue 11 Feb 2025 07:37:07 +0000
asID: 9009
IP address blocks: 45.192.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Dec 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56401 (0xdc51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 28 07:37:07 2024 GMT
Not After : Feb 11 07:37:07 2025 GMT
Subject: CN=67481da6-e8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:1f:47:f5:a7:78:1a:fc:59:c1:8d:18:ee:
dc:48:89:a1:fe:43:95:06:31:c0:25:88:a6:8f:26:
d0:65:c6:a9:5c:69:4e:1b:7c:76:59:a5:82:5d:b5:
94:6f:77:db:0c:94:62:2b:50:57:ef:d2:64:3b:13:
33:d2:3e:e2:12:ae:58:dc:f2:a1:ae:56:d5:38:5d:
86:ca:36:27:2b:b2:86:ec:8a:5e:62:e2:d6:d3:e9:
66:78:d3:1d:7d:63:80:d2:84:64:9d:1b:89:d1:7d:
b3:4f:c1:22:83:5e:b3:21:53:d3:16:c4:83:ba:d0:
93:25:dd:fa:97:bd:bf:ed:80:c3:e2:c8:d0:40:ad:
d4:89:ec:f2:76:0f:ba:5d:1a:9b:66:7e:c5:bb:31:
7c:cf:18:41:d2:d4:16:ec:50:ab:b6:c1:36:6f:28:
06:4d:42:27:1a:d8:1b:cf:99:10:b4:63:23:a1:78:
8a:65:bf:ed:f2:1c:aa:2b:c2:f9:27:d9:aa:08:e3:
97:e9:3f:72:31:5d:b4:e3:61:b0:55:46:59:81:e9:
97:1f:e5:33:c9:96:a5:e5:bc:6d:49:47:87:0a:c1:
d7:0e:41:8a:0d:c8:f0:e9:7f:68:18:f1:81:48:8a:
d7:74:0c:50:51:20:54:55:e0:44:a2:52:e9:ed:03:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7D:68:EA:D0:4C:ED:16:7F:32:62:7B:27:72:39:7A:4E:C7:D5:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93AA40E6AD5B11EFBFA16AB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:db:d7:6c:21:b0:95:15:c5:48:d5:72:05:8a:db:74:9c:78:
cc:fa:1c:fe:4a:c6:d0:3c:23:99:dc:a7:5f:e6:a4:f8:c8:d0:
39:aa:78:e0:3d:df:c3:f2:4b:12:12:91:ec:5e:db:da:d6:7f:
48:6f:8c:17:a6:eb:53:4a:c6:a2:cf:60:b0:65:47:6e:fe:5f:
48:90:15:95:ad:ba:ee:67:f8:fc:ae:82:a7:f1:f3:2f:83:a2:
59:9b:84:1a:cd:d7:4f:c8:6f:2e:96:cc:97:da:3b:97:ed:57:
dd:46:69:92:a1:1d:f3:13:44:16:52:90:fe:55:f1:b5:d8:79:
01:3a:70:bf:af:a2:76:90:8b:98:97:ab:23:8a:8d:30:68:8a:
82:40:1d:bc:75:45:59:21:e6:bd:f4:e1:df:0a:1b:51:ae:ca:
ec:75:a6:87:3b:94:08:66:9a:8e:83:fb:7a:12:e4:48:41:41:
41:13:51:97:90:f3:4a:ec:2c:fc:88:cc:09:12:f4:90:27:e6:
8c:a8:56:d4:6a:e5:48:2f:ed:b7:fb:04:1a:e2:db:b0:34:07:
49:34:20:a0:83:0d:ef:1e:3d:b6:bb:3c:d6:b0:e4:c6:53:56:
e1:9c:25:0e:fe:df:2c:b4:43:90:cb:50:e7:87:bc:a1:18:84:
ac:09:8b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 14:47:49 2024 by rpki-client on console-fra.rpki-client.org