Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5CDA01A5DCD11EFA3B42B89762E951A.roa
File: B5CDA01A5DCD11EFA3B42B89762E951A.roa (raw, json)
Hash identifier: 7S0Qw7HILGhTMAi1fAgVxDky0oqpMdzY0j46gh/X6rs=
Subject key identifier: D6:39:22:DD:80:96:2B:9A:1B:71:F2:C2:B7:C6:1B:E3:23:1D:3B:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: A867
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5CDA01A5DCD11EFA3B42B89762E951A.roa
Signing time: Mon 19 Aug 2024 01:52:37 +0000
ROA not before: Mon 19 Aug 2024 01:52:34 +0000
ROA not after: Thu 31 Dec 2026 01:52:34 +0000
asID: 17561
IP address blocks: 45.198.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43111 (0xa867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 19 01:52:34 2024 GMT
Not After : Dec 31 01:52:34 2026 GMT
Subject: CN=66c2a565-8c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:8f:24:54:1a:94:1a:0f:b5:d9:ae:58:75:
cd:0c:e5:45:3b:a1:fb:2e:88:2a:37:a9:50:e9:d4:
3a:3f:42:d3:5e:cf:94:7c:9f:01:57:99:ee:e6:e7:
20:94:90:5a:95:a2:4f:5f:69:ee:9e:24:3e:04:79:
63:98:52:ce:2d:f1:a5:66:1d:0d:8b:c9:be:c4:14:
b6:41:54:b0:bd:b2:27:b5:22:59:79:b4:16:ed:30:
1a:c1:81:26:1c:f2:66:e7:48:1b:67:93:e3:69:5f:
dd:58:84:6c:54:e0:88:e1:11:f3:fb:0d:f4:bf:c1:
6a:08:90:b8:6c:f1:a4:c2:26:63:79:70:25:bc:fc:
91:9f:25:31:33:d4:d0:41:bc:83:80:6a:36:e5:2d:
1c:37:30:51:30:c5:ea:4f:ff:cc:29:dd:11:1c:34:
0c:10:71:e4:42:0d:c3:5b:d1:c7:a5:0a:39:c5:f2:
fb:6f:f8:6f:70:00:84:d4:78:3e:9e:85:65:ed:77:
bd:84:b3:f7:14:d2:63:1a:31:b6:19:95:76:12:3a:
26:30:24:46:d8:e9:28:64:49:97:55:cf:7e:ad:37:
6d:32:1d:86:f6:9a:38:7a:2f:2b:54:8b:a2:c9:f2:
93:4d:3f:82:f1:44:93:2d:31:93:97:a4:47:13:57:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:39:22:DD:80:96:2B:9A:1B:71:F2:C2:B7:C6:1B:E3:23:1D:3B:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5CDA01A5DCD11EFA3B42B89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.4.0/24
Signature Algorithm: sha256WithRSAEncryption
19:34:5c:6c:3e:e3:79:80:7b:58:01:42:dd:86:9e:b2:65:bb:
3b:82:d1:1e:c1:ac:d6:a8:f4:d2:2b:94:ce:8e:43:8e:8b:b4:
a9:62:08:df:f0:fc:1f:f1:d1:a8:7d:fe:f9:5a:7b:9e:c1:6d:
4c:bb:07:18:3d:64:c4:b5:a2:d2:c6:de:fb:0d:cf:62:a6:5b:
20:22:66:1f:10:74:a7:3b:be:5f:5f:56:08:1c:7a:ff:f5:16:
d4:ae:83:14:02:fe:74:54:5c:ba:05:18:f5:44:10:e9:6c:d1:
49:14:79:9e:c3:0d:c8:51:27:ca:ee:b7:75:6b:be:f4:44:ee:
55:c1:d8:5c:09:34:a9:d7:31:09:05:09:88:94:be:47:12:f8:
88:71:66:54:9b:93:3c:ff:6b:d0:f2:60:4d:2e:a6:14:77:3d:
d4:a8:49:bf:61:c8:be:5c:9c:8c:98:a8:26:e6:ac:f0:e1:80:
fe:10:c2:f9:7b:83:51:22:71:37:bd:69:16:37:90:72:dd:4b:
fe:e7:31:51:5c:3a:8f:e6:c7:ac:15:11:1f:a7:b3:90:5c:72:
77:0d:15:31:50:a9:a2:07:65:1b:dc:df:a0:69:ea:b0:cc:26:
c0:9d:3f:31:f0:bc:9d:dd:66:70:50:2d:d9:67:3c:64:8d:04:
d7:b4:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:44 2024 by rpki-client on console-fra.rpki-client.org