Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/975FB270A72511EF8A8DFA97762E951A.roa
File: 975FB270A72511EF8A8DFA97762E951A.roa (raw, json)
Hash identifier: tt3ljQ7vuXLqNFu/wwq2TYTkamEASaFGsOF9xvPxd/E=
Subject key identifier: 56:1C:1E:8F:E1:F3:BC:78:60:0F:90:C0:A7:F6:D1:0B:E4:9D:F2:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/975FB270A72511EF8A8DFA97762E951A.roa
Signing time: Wed 20 Nov 2024 09:55:37 +0000
ROA not before: Wed 20 Nov 2024 09:55:33 +0000
ROA not after: Mon 02 Dec 2024 09:55:33 +0000
asID: 39600
IP address blocks: 45.204.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54745 (0xd5d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 09:55:33 2024 GMT
Not After : Dec 2 09:55:33 2024 GMT
Subject: CN=673db219-850c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:46:33:a2:c6:dc:6c:50:84:70:64:f9:ae:
2b:27:61:e0:f8:ef:49:f3:0c:00:c1:a9:c1:6e:4a:
d4:3f:bf:e4:d2:56:13:40:22:aa:e0:29:f8:22:4e:
42:32:fe:82:32:be:06:5c:88:4f:54:63:ee:c1:ba:
3e:1f:34:97:f2:db:5d:9e:03:d0:83:f3:8e:77:55:
1b:6e:54:03:3a:80:03:28:1b:73:66:20:90:87:90:
56:2a:7f:2f:6b:37:e7:1a:58:79:dc:f2:07:70:7a:
43:2e:c2:85:77:98:ca:1e:11:07:89:04:a4:18:5b:
be:92:48:1a:1e:93:67:24:fb:4c:01:11:52:d1:8b:
28:32:5d:c7:fc:2e:59:11:11:99:e3:75:9a:35:38:
c6:e2:fa:79:43:51:79:9d:c1:c0:e3:ca:77:fa:d5:
68:4a:c8:14:ed:54:11:2d:b3:95:fd:7a:73:c2:0e:
2f:5c:33:da:cf:8a:66:79:d1:0d:22:24:2a:ea:30:
5b:07:6b:a3:4f:84:84:22:39:5a:ed:90:39:21:19:
93:38:cc:fa:88:fe:de:3f:40:60:ac:56:5b:5c:24:
a3:ca:05:c4:cb:4d:b2:44:d1:c2:0a:cb:fd:1f:74:
77:18:7d:cd:7f:e1:89:a9:79:d2:11:c3:1f:b8:05:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1C:1E:8F:E1:F3:BC:78:60:0F:90:C0:A7:F6:D1:0B:E4:9D:F2:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/975FB270A72511EF8A8DFA97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.28.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9f:11:bf:a1:7d:aa:66:5d:fe:34:78:05:fc:e4:60:67:02:
1e:21:54:17:0a:cb:29:7c:d6:e2:cd:6f:70:ca:0e:2f:89:89:
6d:39:b6:fc:e9:3d:53:d5:e1:6d:ef:4d:15:d3:df:e3:07:13:
93:fc:8a:0e:3a:28:25:d1:b6:06:a5:b1:d7:fe:36:d5:d2:b6:
11:39:de:66:f0:58:f4:bc:6a:d8:77:17:02:3b:90:83:90:a6:
68:c8:b5:b0:09:fa:a3:40:70:5a:9e:b6:9e:1f:b7:e9:43:c2:
e8:0d:14:10:8b:1a:74:9f:da:5a:42:f7:18:ed:87:93:71:9b:
0c:94:51:52:8f:0c:30:16:6a:c2:73:27:42:59:16:d5:37:46:
f2:98:88:85:1a:00:a0:8c:83:62:d9:47:a7:a8:54:99:6e:c8:
f7:3a:1e:0b:b7:81:32:40:9f:5c:3d:41:d1:88:7a:1b:4d:03:
a3:48:28:d6:bd:da:79:58:6c:8a:f7:64:d0:1c:0f:73:bc:7c:
cc:12:c5:eb:e5:61:1c:11:9d:c4:7d:4c:d8:69:6d:8e:74:0f:
b4:b6:85:28:7f:e6:ea:6c:a9:cb:04:4d:02:56:e8:81:17:a4:
32:b3:4b:6b:ae:14:25:bb:ac:1d:04:ca:bf:fa:9d:48:aa:b9:
cd:3c:ab:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:41 2024 by rpki-client on console-ams.rpki-client.org