Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B926BEE5F1811EF99A4B89E762E951A.roa
File: 9B926BEE5F1811EF99A4B89E762E951A.roa (raw, json)
Hash identifier: wzzL6bYp7qN7cZ1uvg6s+ILyt9eYUK2UrVGgVopTSNc=
Subject key identifier: 74:74:02:AB:CF:FF:93:33:F9:A3:F6:A8:D5:12:C5:39:44:53:55:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AA6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B926BEE5F1811EF99A4B89E762E951A.roa
Signing time: Tue 20 Aug 2024 17:21:17 +0000
ROA not before: Tue 20 Aug 2024 17:21:13 +0000
ROA not after: Tue 21 Jan 2025 17:21:13 +0000
asID: 63199
IP address blocks: 45.195.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43630 (0xaa6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 20 17:21:13 2024 GMT
Not After : Jan 21 17:21:13 2025 GMT
Subject: CN=66c4d08c-a323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:7b:56:c3:79:36:c2:73:3e:d6:81:7e:06:
22:2a:83:e5:8a:80:1c:cd:53:46:c0:a2:38:82:b1:
40:a8:6d:1e:cb:3f:45:5b:84:36:f0:3d:7d:ed:d3:
b7:be:b0:f6:24:7f:d3:14:a9:08:98:47:de:4d:0b:
d9:5f:b1:b2:22:69:c3:c3:06:12:77:1b:b8:43:dc:
bb:30:3c:25:a2:93:08:b1:1d:e4:b1:bb:07:30:26:
07:9d:0d:0a:61:fc:0d:1c:7a:15:06:d7:be:26:b9:
d1:d3:5a:b1:d0:12:cf:c2:b3:a7:b7:30:02:d8:7e:
77:5a:0d:28:b7:c3:e9:e7:0f:35:19:ea:2c:c5:07:
79:a3:c2:49:b3:c2:81:fa:ed:ea:19:54:c8:c6:73:
53:28:1e:2c:da:a3:ef:1d:e8:2d:95:cb:60:15:47:
17:c3:30:4d:cd:53:19:d6:24:29:db:0d:9d:fd:1a:
62:2d:ab:cb:5e:d4:c5:5a:64:35:7c:e6:63:90:da:
43:55:2c:4e:b8:2e:39:71:96:d4:a4:e5:23:47:1e:
48:d7:e9:66:9b:e0:2a:ab:66:83:0d:a9:62:0b:e5:
a9:10:1a:8a:fa:58:fb:28:c6:19:fc:04:90:47:b0:
06:e0:83:7a:9e:a6:cc:e4:92:93:93:95:ea:d7:bf:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:02:AB:CF:FF:93:33:F9:A3:F6:A8:D5:12:C5:39:44:53:55:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B926BEE5F1811EF99A4B89E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.96.0/21
Signature Algorithm: sha256WithRSAEncryption
40:f0:43:45:44:5f:0e:51:d4:7a:b1:3f:e9:20:e8:58:dd:88:
21:e5:5d:f9:b2:12:07:16:a5:62:50:66:b0:13:5a:80:1e:c0:
41:57:bc:0a:dd:96:b1:20:83:e5:5b:67:fe:03:90:9f:69:03:
17:a6:a4:7b:e7:6e:ef:d1:be:91:d8:9d:54:8a:53:00:09:0f:
52:94:74:44:89:b3:27:46:df:a1:40:97:f7:9f:99:f7:86:cf:
a3:47:08:1b:53:32:ee:d5:c5:6e:0d:a2:a1:e1:d6:2e:e5:71:
a3:f7:27:2f:2d:83:ff:54:1a:1b:8e:f5:b6:85:c4:3c:e0:d5:
b2:b1:3b:49:41:c0:16:93:b2:41:a5:78:39:bc:1e:ce:61:29:
c6:42:a1:ae:fe:08:fa:45:2b:84:fd:6d:09:58:ad:9f:ba:32:
71:9a:d0:e1:dc:61:d3:2b:fc:91:28:3b:c7:78:36:2b:7e:76:
cd:d2:5a:6c:cf:0d:06:3d:a9:e2:4f:ca:3c:16:ea:d9:b9:40:
31:ab:44:4c:c1:bd:6e:1d:ba:e3:7a:a8:48:32:18:5d:39:2a:
20:7c:8e:e6:e5:22:e0:95:30:fd:77:df:10:cc:88:39:4e:14:
3b:45:1f:e7:bf:da:5f:42:3f:3a:06:47:62:08:90:7b:7d:56:
05:d3:6a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org