Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B10DF98ADEA711EEBE75E68A775412E6.roa
File: B10DF98ADEA711EEBE75E68A775412E6.roa (raw, json)
Hash identifier: CcXXbiroVGkq0LtnmLQ7w+hv3jEK9bn3XmRzFMXqSZU=
Subject key identifier: 12:12:2E:20:9D:84:5B:C0:87:3A:2E:6E:1C:08:D0:D9:BC:EA:D4:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7DD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B10DF98ADEA711EEBE75E68A775412E6.roa
Signing time: Sun 10 Mar 2024 06:30:31 +0000
ROA not before: Sun 10 Mar 2024 06:30:27 +0000
ROA not after: Tue 28 Jan 2025 06:30:27 +0000
asID: 132513
IP address blocks: 45.194.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32212 (0x7dd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 06:30:27 2024 GMT
Not After : Jan 28 06:30:27 2025 GMT
Subject: CN=65ed5387-fd75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:65:75:45:c6:70:38:86:84:df:86:89:4d:
ef:8f:7e:9a:d2:d7:4a:7c:b4:20:c3:85:ab:66:65:
6b:d5:b8:90:a8:ed:45:b0:0b:8e:bf:de:7d:1f:65:
5e:69:ed:3e:65:86:8c:f7:3a:1d:49:b6:18:41:03:
a8:b0:a9:45:24:43:c6:3c:40:0f:63:be:95:49:68:
fc:ed:c2:4b:43:5d:10:21:80:c0:47:e4:6c:f9:35:
36:c6:24:69:f6:5b:fc:9e:e8:2b:27:02:17:ee:cc:
2c:8c:0b:e0:24:94:28:b0:ec:17:d9:a0:a3:ea:b7:
28:8a:78:49:03:e8:2a:82:e0:f8:89:e8:27:0a:2f:
25:4f:05:d9:51:dc:44:bd:e2:ae:ec:f8:4b:d8:25:
81:7b:ca:c6:56:7c:2f:87:2c:17:44:8d:76:ba:6d:
bc:cd:d2:97:fe:0f:18:16:c9:9b:6d:9e:0f:90:e7:
1c:69:6b:e3:c6:04:42:b3:83:c2:9c:48:0e:8a:56:
18:f6:4d:37:2c:3b:cc:7e:72:ac:13:05:5a:22:8b:
ee:3e:78:ed:0b:19:0f:68:9e:e2:c2:df:cf:86:75:
28:ce:64:ad:6f:9a:3a:18:41:cf:c7:98:dc:0a:b9:
7a:37:4a:fb:c2:44:41:2f:05:e5:0f:65:00:bc:68:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:12:2E:20:9D:84:5B:C0:87:3A:2E:6E:1C:08:D0:D9:BC:EA:D4:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B10DF98ADEA711EEBE75E68A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.112.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f4:b1:51:3d:f4:59:3a:4a:eb:46:37:40:27:d9:1e:ec:6e:
a3:20:c0:51:34:4f:bd:ec:7e:7d:4e:4c:ce:dc:3a:5c:3a:3b:
fd:c1:81:5f:40:11:d2:6a:51:31:24:41:f2:81:62:1b:7f:d4:
23:58:42:dc:ee:6c:9c:35:40:61:be:dd:17:ca:b0:53:6a:75:
0d:66:98:63:bc:da:57:3d:4b:0a:bf:f2:de:bb:6c:4b:24:21:
4a:77:47:aa:92:dd:02:67:ae:f6:7c:ec:76:81:b3:fe:15:27:
c3:9b:1d:b4:a0:49:85:0a:15:c6:5b:17:a8:e1:78:dd:21:36:
ff:05:df:13:83:81:32:37:d3:4a:5c:8e:0e:e5:85:c4:5f:73:
6a:19:38:e1:0b:e9:82:97:e3:37:b6:1f:f6:f9:a8:30:0d:84:
b1:10:8c:a4:4c:be:5f:f3:fc:cf:35:67:e1:23:c5:19:70:46:
14:b4:e2:ad:36:6d:83:4f:79:d8:74:e8:36:c9:52:3e:73:a2:
fc:33:93:01:33:4b:dc:ed:6d:01:29:a4:de:b8:2b:1f:3b:d3:
5a:53:ec:ab:b5:6c:32:12:8c:2f:5a:9d:9c:c8:99:a1:a7:8f:
c1:c6:67:da:06:55:95:bc:7f:57:63:5a:c1:1b:4a:7e:d5:d0:
15:13:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org