Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2BEAECA735211EFAF62D14D762E951A.roa
File: A2BEAECA735211EFAF62D14D762E951A.roa (raw, json)
Hash identifier: 1Vb1C7nc9aBeqIIk17AhM9QCfwkCjNmo5FCa+9yzFTY=
Subject key identifier: 54:E7:C0:29:E8:0D:43:DF:AF:AC:33:03:9F:80:2E:2F:46:C7:AF:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B678
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2BEAECA735211EFAF62D14D762E951A.roa
Signing time: Sun 15 Sep 2024 11:07:03 +0000
ROA not before: Sun 15 Sep 2024 11:06:59 +0000
ROA not after: Fri 08 Aug 2025 11:06:59 +0000
asID: 133199
IP address blocks: 45.207.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46712 (0xb678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 11:06:59 2024 GMT
Not After : Aug 8 11:06:59 2025 GMT
Subject: CN=66e6bfd7-fdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:29:3f:a5:48:0e:a7:54:9e:a6:d2:42:2b:
40:7f:c8:78:4d:e1:b8:22:09:2a:1b:e3:4d:17:6d:
cb:a2:5e:01:de:83:69:3b:57:0a:23:69:85:bc:c5:
64:c7:c7:cf:ca:b8:07:2e:5c:f1:f0:9b:70:96:5a:
d4:60:0a:d9:f7:59:1f:fc:b3:46:d9:d0:2c:d1:8f:
e4:b2:42:c9:db:61:f4:20:a4:4f:37:de:ec:e9:73:
92:a2:c8:f0:4c:2f:2b:e1:22:ef:f4:9b:63:c9:ab:
3b:5d:c9:87:1b:a2:71:02:ce:64:2f:d4:a7:60:f5:
95:83:9d:91:57:33:20:db:8f:ee:f6:4f:3d:ed:a4:
fc:3c:c3:ae:96:e7:4b:f8:94:e9:ee:c6:ac:7a:ba:
9d:44:e8:c2:98:fc:60:1b:09:38:bf:f0:b2:fe:13:
ae:fc:24:03:80:5e:cf:e0:1c:47:06:b4:08:e3:2f:
0a:de:5e:ce:a7:e7:b7:85:13:43:6d:2e:86:b5:fc:
0b:03:d1:c0:8a:0b:b9:3f:ce:47:61:b1:dc:1c:25:
2b:12:5f:0c:4b:42:b0:7b:12:82:d9:0c:80:2e:1b:
1a:aa:47:95:2c:72:e2:af:09:a8:c9:1f:77:2d:75:
a9:9d:02:c1:c1:04:61:c7:0a:e7:f2:c2:c9:a2:4d:
0b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:C0:29:E8:0D:43:DF:AF:AC:33:03:9F:80:2E:2F:46:C7:AF:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2BEAECA735211EFAF62D14D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.34.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:f6:92:9c:5e:40:bf:8e:a5:90:20:a4:80:08:0d:c6:3b:80:
0c:be:f6:45:b7:0b:ba:5e:ef:e8:b9:90:be:a2:c7:60:00:be:
ed:93:1c:e6:b7:52:18:27:cd:77:fc:39:8c:b8:75:35:79:43:
45:5a:58:37:5f:78:4d:c6:e5:f1:9c:05:88:ce:12:67:af:db:
91:b7:99:b6:6d:b9:fd:3e:13:88:24:d5:8c:e1:0d:50:51:bc:
bf:c4:0d:00:27:6c:7f:99:9b:1d:95:8a:3d:94:8c:d3:f9:d5:
2d:75:b9:d4:68:0a:09:29:e0:d0:a6:4d:3e:31:2f:7b:9b:f1:
26:8a:ea:2e:ad:41:5d:02:40:e4:c7:52:f7:13:a4:0d:d4:58:
fd:fe:cb:e3:c3:18:de:eb:3b:42:73:92:b6:7d:34:69:ac:4b:
ad:66:5a:be:6f:30:b1:bf:8f:f8:1d:f0:35:56:ca:84:af:46:
49:d9:b8:fa:d4:e2:ac:d7:a6:f2:da:15:ed:68:f4:75:0d:bc:
6e:2b:ac:e1:ce:4f:67:a8:31:e5:96:39:76:a1:17:e4:8b:3a:
20:1a:06:e9:b3:97:be:1b:1f:d1:b7:7e:b1:a3:22:40:18:fa:
32:dc:64:0a:01:75:ea:22:46:1c:0a:31:04:52:6e:4b:1f:f8:
8f:e0:c5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org