Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B623D05C7E3E11EFBC91B9B4762E951A.roa
File: B623D05C7E3E11EFBC91B9B4762E951A.roa (raw, json)
Hash identifier: YwjLLvyavEbFO6ZfyX0bDW9KqZkiLDZgCCgO4OygUKo=
Subject key identifier: 22:3B:BF:C4:77:16:93:F5:8A:45:D4:E3:81:74:0F:3A:EF:DD:24:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B623D05C7E3E11EFBC91B9B4762E951A.roa
Signing time: Sun 29 Sep 2024 08:42:08 +0000
ROA not before: Sun 29 Sep 2024 08:42:04 +0000
ROA not after: Mon 30 Dec 2024 08:42:04 +0000
asID: 17561
IP address blocks: 45.194.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48267 (0xbc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:42:04 2024 GMT
Not After : Dec 30 08:42:04 2024 GMT
Subject: CN=66f912e0-6cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:79:3c:7e:c6:b0:7e:01:ca:20:c2:de:d6:
ce:14:f7:8b:b1:61:1e:21:a4:1c:4d:55:cc:f8:42:
3a:41:04:55:34:80:a7:fa:67:ab:5b:85:66:73:9f:
3f:78:94:de:ed:37:93:f9:ad:a3:ac:94:bf:23:d0:
1d:cb:b6:cb:30:3a:d9:95:c9:c9:78:02:39:9b:a2:
9a:6c:bf:a8:2c:e1:1d:f6:06:bd:db:cc:57:28:96:
85:4f:ad:42:65:64:46:18:cb:e9:38:4e:ef:82:64:
66:4d:a4:a1:6f:0c:09:af:9a:5c:92:94:0d:02:7f:
29:b4:5d:85:0e:0b:20:7e:70:6b:4d:d6:95:af:0f:
ce:2a:72:22:57:4e:3b:d2:66:df:3d:f8:e2:af:e4:
d4:d2:73:32:fc:86:89:e7:62:50:6e:8a:15:1c:c9:
86:44:4a:95:13:f3:3e:a5:b2:3a:f4:02:08:c1:08:
ed:13:de:e9:75:f7:2b:d5:0c:c5:fa:2a:e4:a5:85:
2a:fa:1c:a3:54:8a:84:ad:2b:04:6f:c6:07:2b:17:
af:f9:b6:51:70:fa:a9:11:e5:87:e1:61:bc:d4:c2:
16:f2:94:bf:85:a3:7b:a8:82:f8:1a:b8:77:4d:64:
54:45:15:ee:b9:cd:7c:6f:0f:8f:f0:d6:8f:89:6d:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3B:BF:C4:77:16:93:F5:8A:45:D4:E3:81:74:0F:3A:EF:DD:24:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B623D05C7E3E11EFBC91B9B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d2:be:33:e6:34:4b:b5:c4:e2:38:bd:94:16:ed:4a:c1:75:
7a:a3:3b:86:1a:f7:0f:3f:e2:47:a1:31:28:81:cc:8f:86:b9:
bc:0c:45:a0:84:2e:47:4b:7e:ff:59:17:d4:7e:d1:8a:1f:e8:
09:34:1b:bc:5e:33:bb:0e:70:40:35:42:d6:c6:67:23:00:7b:
83:7f:3e:2f:d9:39:80:57:ff:5a:c5:11:57:12:1e:0b:a8:b5:
e7:df:bb:f0:03:5c:de:b5:f6:73:7b:be:14:3b:da:f8:7e:62:
f5:48:4a:e3:61:6c:ec:f8:7a:f6:4f:df:4f:b8:be:4c:aa:7f:
a2:c8:a4:d2:10:92:f1:87:f8:b2:ef:9f:70:75:a6:b6:d9:4e:
bd:01:7e:dd:b8:2a:ac:6e:28:9c:81:70:8f:2d:9e:cf:a0:b9:
7b:cc:c0:94:6f:c4:79:e0:66:8a:5c:08:cd:20:db:20:da:66:
16:05:c6:40:88:9e:96:4f:4a:95:21:55:93:00:ce:9e:d7:49:
80:81:e7:09:55:3a:d6:eb:b7:3b:ff:de:63:ca:d8:15:b8:e1:
b7:f8:e8:71:f1:70:25:9b:c2:10:af:da:68:b9:40:31:4b:66:
49:be:65:d9:9e:f2:2a:ed:e8:15:16:f6:82:e7:ed:ce:48:29:
7a:6d:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:46 2024 by rpki-client on console-ams.rpki-client.org