Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C6287BCA73D11EFA329B4AA762E951A.roa
File: 9C6287BCA73D11EFA329B4AA762E951A.roa (raw, json)
Hash identifier: dt2BXJUfkRV2DWwEXBpZHcsT+xbfwLovhyVpibRtaZM=
Subject key identifier: F9:AD:EB:C6:D5:55:43:FB:9C:8A:84:1E:4B:B6:2B:A7:41:BF:28:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D623
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C6287BCA73D11EFA329B4AA762E951A.roa
Signing time: Wed 20 Nov 2024 12:47:33 +0000
ROA not before: Wed 20 Nov 2024 12:47:29 +0000
ROA not after: Sat 30 Nov 2024 12:47:29 +0000
asID: 48031
IP address blocks: 45.200.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54819 (0xd623)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 12:47:29 2024 GMT
Not After : Nov 30 12:47:29 2024 GMT
Subject: CN=673dda65-613d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:07:cf:35:87:b1:d8:cb:43:73:45:e6:4b:da:
15:c8:39:a3:13:84:16:e2:1e:45:a0:11:3c:8e:38:
94:cb:c9:1f:5e:a6:57:9c:e9:d4:aa:57:ee:10:ea:
ca:f7:07:69:ad:c9:02:c0:75:79:c8:9e:91:18:8a:
23:da:07:e5:d6:1b:3f:a3:86:9a:f5:8a:10:56:05:
e9:7c:66:e9:8f:5d:8e:ca:2c:bf:20:bd:db:8c:1a:
42:d8:73:65:ce:7f:5e:25:8e:08:f0:de:ac:54:37:
5b:44:72:3e:4b:f6:74:13:db:9a:e1:22:45:01:a2:
79:20:c3:81:5d:85:16:b9:20:55:d7:6a:ea:30:97:
4f:7f:4a:a8:96:c4:6e:36:2a:27:60:ed:43:c3:78:
66:fe:0f:36:65:82:dd:2c:7d:92:5a:d6:2f:08:69:
ac:c8:5e:61:8e:80:09:f9:f7:ce:41:a4:45:f7:ff:
0e:75:fd:f7:df:2b:b1:2d:cd:52:b3:c8:fc:db:ad:
a4:b1:cb:7a:35:15:d3:06:cf:60:90:52:e3:49:3c:
8c:33:18:17:ef:04:15:f5:27:58:c5:01:fa:75:5c:
54:d8:5b:e0:84:42:92:eb:02:37:7c:2e:9d:a8:7d:
a7:3a:3f:d0:22:b8:b0:ec:61:95:f2:01:09:ca:af:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:EB:C6:D5:55:43:FB:9C:8A:84:1E:4B:B6:2B:A7:41:BF:28:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C6287BCA73D11EFA329B4AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.188.0/23
Signature Algorithm: sha256WithRSAEncryption
37:9e:3a:05:1f:c0:3c:51:ee:95:dd:1f:b2:e5:7c:47:2a:ec:
af:73:2f:03:ab:fd:e8:b0:a3:f2:87:7a:29:4f:98:f5:fb:e7:
04:e0:4f:30:ef:67:a5:05:e1:b5:74:d6:ae:8f:ee:8f:a2:27:
2f:11:9d:20:53:e1:f0:a4:2f:39:bf:26:fc:c8:96:f6:d3:44:
5b:79:c3:34:6d:c9:32:ff:97:75:b8:31:db:6e:c7:08:30:24:
5e:8a:6e:52:52:21:36:59:ab:32:97:9d:33:26:d3:bf:f2:5e:
19:c6:57:c6:3a:fb:da:34:6a:21:6e:6b:0b:c7:94:d4:06:0a:
e3:5d:2c:07:58:fb:47:d2:a5:06:98:e9:3b:d2:54:58:be:df:
69:55:8b:80:c3:b9:05:e9:cf:44:57:a4:79:bb:9f:2e:51:23:
06:6c:49:92:28:21:c7:be:75:bc:c3:04:79:82:74:d4:39:2a:
f6:2d:a8:ca:73:6c:59:6c:c8:7c:95:1d:ff:8d:f1:1e:6e:e1:
40:e2:d2:1b:21:90:ac:c4:d6:71:0b:03:42:41:d7:13:8c:59:
1c:30:38:73:3b:c8:ee:05:41:ea:c2:08:ba:48:1d:ce:43:b5:
32:3a:77:ea:7d:10:b5:b2:75:90:7b:44:53:8b:e1:55:f5:0d:
c9:3e:2c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org