Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A51CAC28B9111EFB2E597B2762E951A.roa
File: 9A51CAC28B9111EFB2E597B2762E951A.roa (raw, json)
Hash identifier: 82CRMKfE1zvFyOoOIJe0uHXE8qzDhb8qJiFCE6yXEY8=
Subject key identifier: 80:82:6C:82:68:8E:95:D7:8B:CD:D9:19:FD:C8:02:E4:B8:59:40:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C50C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A51CAC28B9111EFB2E597B2762E951A.roa
Signing time: Wed 16 Oct 2024 07:38:15 +0000
ROA not before: Wed 16 Oct 2024 07:38:11 +0000
ROA not after: Thu 18 Sep 2025 07:38:11 +0000
asID: 132513
IP address blocks: 45.204.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50444 (0xc50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 16 07:38:11 2024 GMT
Not After : Sep 18 07:38:11 2025 GMT
Subject: CN=670f6d67-6cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:a3:06:f7:9f:67:92:20:e9:7d:77:c5:be:
3e:f3:07:64:9a:dd:cc:59:13:04:45:ef:b4:d1:e7:
34:c1:b4:43:60:0a:e3:1d:6a:d4:6b:a8:28:1a:33:
10:44:bb:c3:5c:66:1a:34:a3:9d:09:3f:93:ef:b1:
e4:34:d4:d9:55:dc:0b:26:56:73:2c:88:bd:5f:6f:
85:80:3b:3c:db:0f:3e:00:db:4e:16:8b:cd:7c:36:
df:dc:5d:02:cc:23:16:9a:a7:dc:a1:67:0d:da:8d:
44:2e:41:78:48:29:5f:be:6f:28:66:68:d2:c7:50:
f9:04:e3:ea:bc:b7:a4:d8:28:97:07:4a:91:d4:27:
03:6b:f5:f0:53:ed:2b:1b:cf:80:3d:ea:43:f7:83:
50:fa:58:7c:82:9d:5c:93:00:a9:81:1a:1b:64:c5:
66:d0:09:9a:32:22:37:e1:39:7f:82:bc:f1:76:20:
dc:53:d0:65:3d:28:4b:1d:f5:e9:aa:1f:5b:28:d8:
72:bf:c5:c8:08:44:ae:40:88:67:da:ba:46:1b:53:
08:e0:31:f6:10:aa:c0:56:c7:e5:1b:34:b1:5a:a6:
2c:6e:61:c3:62:1a:64:28:e8:0f:3c:18:6c:01:0b:
df:cb:19:5a:56:4c:52:e9:21:fb:85:0f:d3:fa:2d:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:82:6C:82:68:8E:95:D7:8B:CD:D9:19:FD:C8:02:E4:B8:59:40:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A51CAC28B9111EFB2E597B2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.66.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f2:fa:60:75:5c:7b:74:5c:0f:e8:57:5a:b0:87:05:15:06:
80:52:86:92:bd:f6:39:30:a9:eb:ac:f4:c4:b9:56:8a:99:0f:
2b:84:88:d9:10:91:db:25:4a:54:f8:0e:4c:3b:e1:73:05:02:
f2:16:ae:6a:df:ef:04:f9:24:e4:46:da:b4:e9:fd:74:65:af:
44:7f:a5:5d:bd:c7:82:59:5a:02:77:eb:2e:6c:30:2a:17:7c:
7f:30:1b:93:a4:10:ab:4e:83:a0:95:be:6e:91:10:22:6a:ad:
95:77:aa:82:cd:22:e4:83:d2:1d:1e:21:81:b4:82:3c:e5:fb:
47:8b:da:90:85:1e:55:4d:49:ac:2f:d6:70:01:0a:3d:d7:aa:
19:c6:3b:b2:76:45:f0:67:71:38:3e:fb:d2:ab:ba:01:4c:aa:
09:a1:12:7d:6b:50:fd:0d:21:fa:32:ff:51:b1:94:4f:36:6c:
cb:31:01:6c:84:52:63:40:de:f7:cc:85:06:e4:7b:f9:f7:f4:
7e:db:52:5f:7d:d7:50:ea:52:08:83:da:4b:d5:90:86:4b:c5:
16:cc:87:dd:2e:f3:03:42:e8:8b:21:7a:61:4b:8b:24:e2:4c:
e8:04:68:3d:dc:2d:fb:a2:5e:8c:d7:60:3e:aa:09:86:20:03:
69:b8:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org