Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8A2B85A8E2211EFB3B9EB5E762E951A.roa
File: A8A2B85A8E2211EFB3B9EB5E762E951A.roa (raw, json)
Hash identifier: 5Lh4sI1rVh6OxPllVAOFVmNWN6eQVlh1x3m76zQ7vvQ=
Subject key identifier: F8:C4:5E:5E:B7:F6:33:4C:2E:5E:F6:E0:86:26:14:7A:CA:EF:26:C4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C6EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8A2B85A8E2211EFB3B9EB5E762E951A.roa
Signing time: Sat 19 Oct 2024 14:01:38 +0000
ROA not before: Sat 19 Oct 2024 14:01:34 +0000
ROA not after: Thu 21 Nov 2024 14:01:34 +0000
asID: 140869
IP address blocks: 45.203.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 21 Nov 2024 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50923 (0xc6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 19 14:01:34 2024 GMT
Not After : Nov 21 14:01:34 2024 GMT
Subject: CN=6713bbc2-b775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:4a:25:77:d1:69:87:78:70:36:a8:d7:13:
3e:5c:95:68:af:24:ba:4a:76:94:46:3d:82:c0:73:
00:c4:85:39:37:9c:ea:38:e5:ec:c8:37:19:c1:25:
ad:23:37:9a:66:17:05:2c:6c:04:32:aa:0a:79:d1:
0a:89:6a:4d:ec:82:ae:c8:0d:d3:cf:3d:16:c9:23:
46:0e:92:ce:80:29:35:09:2a:c0:4e:5c:48:e4:bb:
b6:f2:e0:06:42:2b:70:4b:17:d7:68:57:06:14:f3:
68:b6:4f:ec:f9:b5:e9:23:8f:8e:b5:d8:be:d3:2d:
ae:04:27:6c:95:63:ad:b8:34:4f:32:be:87:6d:5d:
b1:50:9e:2e:02:d7:18:10:8e:e8:05:6a:c3:4e:51:
cc:4e:9a:95:2c:0e:b2:5b:83:61:99:64:b2:8f:94:
05:70:26:bc:71:77:60:65:0b:f0:52:4d:16:fa:2f:
7c:8a:52:93:98:63:16:73:07:23:89:fe:96:9d:09:
d2:75:95:b1:b6:44:fe:fa:6c:00:17:3b:6b:7c:62:
13:cc:bd:4a:8a:b7:4a:32:40:7f:29:d2:04:6d:38:
29:8a:39:e5:4d:d5:3f:78:4b:52:15:ec:0f:2b:fd:
e3:53:0c:8f:cf:94:48:59:f5:06:ea:6a:6f:47:94:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C4:5E:5E:B7:F6:33:4C:2E:5E:F6:E0:86:26:14:7A:CA:EF:26:C4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8A2B85A8E2211EFB3B9EB5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
44:df:f2:99:02:f3:fd:ea:b9:1d:3e:97:24:61:8a:c4:33:ed:
9e:81:9d:34:43:7d:d6:71:66:14:f9:a9:0f:8c:fc:07:03:cf:
9c:e7:fa:bc:3c:f6:d1:73:ff:cf:05:de:23:dd:15:23:b9:06:
2b:a5:15:e9:de:12:19:0a:df:3e:ad:d4:a8:9f:f1:f2:31:86:
17:58:ec:1a:67:15:7f:29:2e:38:84:86:58:d8:86:98:02:6f:
be:7e:41:a9:2d:3a:85:d0:32:e1:73:9a:c6:2d:bf:0b:26:79:
07:c8:b2:3a:b6:10:91:2a:e4:ba:8b:8c:fe:51:72:0d:49:f4:
8d:b1:85:fa:9e:a4:a4:48:c6:00:77:1d:d6:f4:3f:31:08:00:
87:fd:91:e6:81:64:11:f4:ba:45:e3:0a:49:2d:ec:fd:93:04:
6f:89:7d:3e:b6:29:74:d2:9d:9f:d6:19:15:a0:bd:fc:60:9a:
ee:b8:8d:9c:02:e3:13:71:c4:bf:20:a3:10:95:39:3d:96:21:
ab:63:bc:64:26:7a:07:7f:1f:ec:6f:9f:8d:ed:67:a2:b5:9c:
23:59:c0:7f:6d:44:4a:ed:1d:35:76:70:cd:27:9d:d8:88:05:
2b:f4:3c:6a:42:c7:bd:77:ee:ca:23:f3:0b:e9:3b:88:3d:c1:
20:db:94:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:44 2024 by rpki-client on console-ams.rpki-client.org