Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/996EF3607E3911EF8C84B193762E951A.roa
File: 996EF3607E3911EF8C84B193762E951A.roa (raw, json)
Hash identifier: w0nkWlQtpN7NKelD0xL+vZoPatx4CQ/SyKXq2hqJxIc=
Subject key identifier: DC:DE:3E:A3:00:D0:84:49:76:C5:BF:5D:35:72:07:7E:DC:7F:15:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/996EF3607E3911EF8C84B193762E951A.roa
Signing time: Sun 29 Sep 2024 08:05:32 +0000
ROA not before: Sun 29 Sep 2024 08:05:29 +0000
ROA not after: Mon 30 Dec 2024 08:05:29 +0000
asID: 17561
IP address blocks: 45.200.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48219 (0xbc5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:05:29 2024 GMT
Not After : Dec 30 08:05:29 2024 GMT
Subject: CN=66f90a4c-d6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:43:7c:59:c9:66:28:e9:0e:2f:b8:63:67:f0:
e8:31:59:9c:09:32:7a:2b:14:34:02:b8:02:5d:ba:
19:1c:57:16:c9:a2:5e:6c:ff:38:0c:41:e3:59:d9:
33:b0:b8:f3:c7:5f:37:f8:14:73:c8:5b:40:a5:c9:
ec:12:27:4a:b1:f4:20:47:2d:15:8f:32:c4:d2:44:
d5:2f:1a:81:a1:c5:30:02:72:35:9b:f4:56:0b:0a:
ce:81:ea:e8:19:3f:54:7b:ab:49:d3:38:71:ba:be:
a3:3c:9b:29:43:4e:76:3e:e7:5b:7f:a3:5c:6c:32:
d9:40:a2:e3:a9:49:b7:07:51:af:9a:5b:49:02:33:
56:b7:59:e5:63:67:49:5d:81:24:73:c7:85:a9:ae:
50:dc:d0:28:1a:f6:5d:81:6e:4f:c9:26:cc:1d:b6:
41:65:54:a4:84:66:64:9d:24:fd:45:e5:2f:8f:05:
e1:c4:f7:bf:0f:c2:cd:85:94:36:fe:3f:06:f2:8b:
4a:8e:31:52:bd:61:8b:39:d7:e6:d6:38:1a:7a:9d:
3f:1b:df:88:02:f5:50:87:1a:55:a0:6d:8c:3f:b5:
d7:1a:40:fd:a6:d3:58:1a:8e:b9:bf:d3:dc:15:19:
3e:7a:51:22:ab:05:ed:15:42:83:40:4f:e8:f3:b3:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DE:3E:A3:00:D0:84:49:76:C5:BF:5D:35:72:07:7E:DC:7F:15:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/996EF3607E3911EF8C84B193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:bb:35:5f:5e:8a:3a:b3:04:25:1f:29:34:1a:50:34:3a:41:
82:ba:3f:aa:be:95:2b:33:de:89:51:8e:e8:1d:12:e9:e6:c9:
d2:96:ca:42:55:84:70:07:cb:eb:29:f1:dc:0d:60:49:26:2f:
28:00:b4:80:f7:b1:58:fb:26:f0:71:70:0d:9f:f0:92:24:78:
76:60:ca:6e:dc:3d:41:54:ba:d8:c1:ed:d7:76:c5:8b:fe:ca:
35:6a:10:6a:63:e0:cf:30:91:bd:3f:1e:5c:f8:02:0a:9b:dc:
9c:ee:1e:72:7e:20:b2:bd:bb:f5:90:1e:9f:2a:42:e0:0d:dd:
fa:01:3d:d4:e7:14:45:c8:a7:b8:7e:a7:5e:a5:8e:0e:7f:cb:
5d:ce:75:fb:f5:97:d4:13:79:ca:49:57:01:0e:ef:14:86:ca:
bf:78:f2:2e:1e:a2:a8:db:07:47:50:67:f7:74:12:c0:f2:72:
f9:93:85:53:72:bd:32:2f:f7:2e:ff:59:67:4e:ca:30:e8:1e:
ca:82:84:2b:b8:32:31:3d:89:5a:35:78:1b:01:8e:22:d5:a0:
70:76:1a:95:51:c1:44:99:63:58:69:b0:ec:51:a6:bd:61:70:
cc:ad:38:0d:50:8f:99:0f:6c:f4:c5:29:53:61:c5:b6:40:b5:
94:ee:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org