Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A99A087033A111EFA0B1F17D762E951A.roa
File: A99A087033A111EFA0B1F17D762E951A.roa (raw, json)
Hash identifier: HvE/TbJh2ogAbNDXbLIAlv9++M1L6JcI2mCOlWSkwi4=
Subject key identifier: 6E:83:8A:12:AD:EA:9A:53:28:52:56:50:4F:1A:4D:74:9B:8F:5A:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 958F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A99A087033A111EFA0B1F17D762E951A.roa
Signing time: Wed 26 Jun 2024 09:51:30 +0000
ROA not before: Wed 26 Jun 2024 09:51:26 +0000
ROA not after: Mon 30 Dec 2024 09:51:26 +0000
asID: 984
IP address blocks: 45.202.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38287 (0x958f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 09:51:26 2024 GMT
Not After : Dec 30 09:51:26 2024 GMT
Subject: CN=667be4a2-069d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:9b:aa:d5:54:b2:5d:79:67:30:fe:39:e4:
3e:8c:47:2c:fa:68:2a:66:e8:89:bd:88:66:62:e4:
b9:07:9f:5e:27:c1:33:d7:a5:1c:71:44:6c:a1:aa:
3a:8b:0d:42:22:26:e1:af:90:e2:46:b6:37:cc:2e:
71:49:80:bc:e8:38:e8:00:f9:76:30:dc:8e:dc:69:
4c:2f:7b:85:9f:2f:7a:3c:eb:4c:14:63:4c:73:3f:
69:08:3e:4e:a5:c5:67:c6:98:f9:34:fd:09:13:54:
d7:b2:1e:d0:21:31:97:a7:75:b2:69:0e:c4:78:83:
af:50:87:4a:d6:09:15:ad:40:ea:27:ef:18:af:95:
7d:1f:a0:bd:70:e9:f7:22:6e:6c:61:3a:4f:fe:a3:
19:fc:51:e0:88:cb:47:c5:51:7d:48:67:2c:4a:5b:
86:4f:aa:0e:b5:60:34:da:e0:d7:0e:a3:0d:35:58:
6d:bc:b0:9e:43:05:ec:24:a8:91:ce:aa:40:01:0d:
53:36:f7:a0:91:23:36:12:e2:8a:8e:78:07:0b:ab:
7f:f6:68:ce:d7:ad:a6:d6:3e:20:52:a5:59:07:54:
fa:00:45:85:86:55:16:38:63:a3:f1:c5:b5:63:ef:
87:a8:71:97:2a:3f:42:57:e9:7c:7e:17:87:c0:1e:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:8A:12:AD:EA:9A:53:28:52:56:50:4F:1A:4D:74:9B:8F:5A:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A99A087033A111EFA0B1F17D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.192.0/18
Signature Algorithm: sha256WithRSAEncryption
09:c1:da:44:c3:85:95:1e:4f:53:1c:1d:a9:f3:6f:ef:c9:d4:
a5:3d:1a:67:76:31:ac:8f:06:72:37:3a:4c:d0:bd:5b:50:3a:
ab:44:ef:f5:10:95:35:6c:00:da:a6:47:d4:da:03:f2:3d:61:
00:9a:e1:92:53:3f:97:78:52:bc:68:5d:a2:d2:8e:03:4c:be:
76:2b:da:5c:f9:57:1f:f0:77:cd:4f:86:04:05:09:29:3c:ae:
c1:5b:e5:c9:5f:d8:ca:9c:14:b9:64:38:53:3b:c0:03:60:07:
58:3c:fa:a8:65:d4:1d:43:89:11:7a:97:f0:ac:ee:2d:b6:4a:
f6:9a:fc:5d:49:8c:71:6e:ec:d0:6a:65:c2:f1:09:b6:b1:7a:
89:37:94:67:de:94:d1:0b:e0:78:5f:72:aa:35:24:c3:3a:58:
e9:c9:f3:70:da:06:f0:dc:b2:ed:88:40:c2:a4:39:16:b9:d1:
7c:db:2e:11:ac:cc:58:6a:9f:d7:04:06:6d:47:98:75:c3:64:
04:a9:27:78:82:55:15:b0:0b:15:97:58:32:36:5e:a0:1e:fe:
c4:6b:18:27:74:7f:8a:54:e2:9a:4e:eb:97:99:6d:e0:3f:99:
8d:04:cf:15:8f:71:3f:37:a7:a0:4e:44:68:df:a2:bb:7c:ac:
d3:63:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:40 2024 by rpki-client on console-fra.rpki-client.org