Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D559C3A862811EF80AAD181762E951A.roa
File: 9D559C3A862811EF80AAD181762E951A.roa (raw, json)
Hash identifier: jqgChR7Vfq8N86QZcLBG3/I/hAJmmLoDrv/dMtKrZXo=
Subject key identifier: 19:9C:23:79:04:3C:EF:76:44:4E:4E:AA:C3:B7:5E:77:41:B4:45:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C1D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D559C3A862811EF80AAD181762E951A.roa
Signing time: Wed 09 Oct 2024 10:24:07 +0000
ROA not before: Wed 09 Oct 2024 10:24:03 +0000
ROA not after: Sat 21 Dec 2024 10:24:03 +0000
asID: 142286
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49616 (0xc1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 9 10:24:03 2024 GMT
Not After : Dec 21 10:24:03 2024 GMT
Subject: CN=670659c7-37f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c3:a5:2a:f4:36:d2:b5:45:df:5d:fd:ca:4a:
ae:dc:80:3a:65:ee:26:34:db:a9:7b:38:01:69:e3:
e8:96:35:56:1b:ad:5c:b8:d9:4d:5b:56:54:c1:fb:
52:d2:f6:3c:b3:00:3f:6b:b7:12:e1:71:9b:a6:b4:
44:b7:03:cc:ee:9a:b2:71:88:7c:6a:b1:51:f5:17:
46:bb:a2:7f:2b:fa:e4:90:a2:f1:52:82:14:46:41:
a2:b8:19:f5:7c:4a:f3:72:9f:9e:7c:cb:47:b6:2d:
42:55:a2:26:7c:dd:73:94:43:f9:c5:e0:a4:66:8d:
c3:f8:a8:e0:a2:a9:d5:e3:5c:73:61:87:c1:f2:97:
14:e7:cc:68:02:60:16:30:7d:97:26:39:37:8f:9a:
92:51:c7:e3:67:ee:65:ed:dc:9f:3f:36:c7:ba:da:
4d:65:ad:b9:f5:58:6c:61:9d:23:69:b7:88:7e:4e:
df:1c:e8:4b:0a:4c:26:76:f6:1a:d9:a7:6a:22:4f:
91:4b:b6:2e:b1:ea:55:54:e2:a2:ba:84:8f:56:58:
ea:db:4b:bc:3b:b8:df:ba:ec:48:65:a2:58:24:70:
70:88:7f:d2:3d:e3:50:98:34:b8:dd:9d:dc:ed:2a:
6d:a4:92:88:af:9a:77:8d:6d:5c:5f:da:6a:5f:cc:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:23:79:04:3C:EF:76:44:4E:4E:AA:C3:B7:5E:77:41:B4:45:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D559C3A862811EF80AAD181762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:c5:86:34:6e:48:a9:ac:f8:a2:d4:e3:2f:43:51:81:50:f1:
fd:79:9e:e3:eb:77:6e:3a:69:59:af:bb:23:bc:ff:d7:48:fc:
5e:2a:6c:91:14:b2:2c:59:cd:d8:71:07:15:50:95:aa:2b:e5:
bd:a8:a1:77:08:99:d0:2a:55:e2:57:95:70:67:28:dc:d8:b5:
0a:05:5f:5d:94:26:93:65:35:28:23:dd:36:f5:93:a2:eb:68:
7e:e0:a0:66:96:2c:6c:de:b4:58:e8:7b:c3:50:02:43:a9:ec:
37:88:b5:7a:06:b0:0f:6d:48:a6:f1:e0:f2:ac:63:a6:a7:e3:
2b:17:8b:68:9c:f5:0f:4c:a6:62:8a:be:d6:db:f5:87:d6:45:
d6:e8:70:6c:5a:fd:3f:b4:cf:ca:b1:f1:67:f3:09:4c:f1:be:
01:8c:24:49:e7:31:34:a3:b9:1f:a9:1b:f2:2b:e7:37:e1:29:
94:d5:86:91:4a:db:63:90:9d:1d:f0:14:5a:56:84:af:fa:94:
19:ed:26:9c:db:9a:de:9a:64:36:64:3d:b8:5b:1a:9d:4c:3c:
1a:2d:92:b8:ab:c3:ad:61:a8:d5:6d:df:02:7d:e2:4f:92:3d:
4d:fc:55:b3:8a:85:85:f3:06:a2:0b:25:a1:61:3d:60:10:b8:
d9:a3:69:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org