Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B69FE67A1CF411EF952503427DDC24C2.roa
File: B69FE67A1CF411EF952503427DDC24C2.roa (raw, json)
Hash identifier: e0IX8NGEy03mqA4Y4Evc/M9TC8D1/gAYlgwkrgsWC/4=
Subject key identifier: 40:84:34:01:22:B3:D8:9E:D7:2E:4A:72:18:B5:05:6B:4B:26:01:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8C94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B69FE67A1CF411EF952503427DDC24C2.roa
Signing time: Tue 28 May 2024 13:18:03 +0000
ROA not before: Tue 28 May 2024 13:18:00 +0000
ROA not after: Mon 30 Dec 2024 13:18:00 +0000
asID: 136235
IP address blocks: 45.207.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35988 (0x8c94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 13:18:00 2024 GMT
Not After : Dec 30 13:18:00 2024 GMT
Subject: CN=6655d98b-3a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:34:47:60:b2:9a:ff:6a:53:5c:8a:30:14:
6a:06:0e:c0:70:01:7c:63:f9:3d:b3:90:0f:b0:ed:
4e:4c:6c:5a:08:75:f6:c4:81:92:a6:98:42:cc:c4:
59:2d:07:9e:c3:7e:0d:97:94:bd:87:1e:a2:3f:ae:
0b:50:9f:1b:a7:a6:18:ac:3b:ea:47:1b:69:10:b9:
5b:20:aa:2e:18:e0:3a:97:c7:87:7d:49:53:dd:bf:
0b:ff:77:12:7c:44:1a:b1:11:88:c9:ae:3f:8c:eb:
17:3b:99:8b:df:98:ce:a5:51:df:6d:45:b7:ee:c5:
43:a6:01:f8:94:37:45:4c:7e:cc:46:49:78:01:dc:
86:28:a2:9a:48:b0:87:29:40:b6:3a:6c:4b:6b:08:
1a:db:5d:9b:8a:00:6a:2a:5b:81:18:4e:d8:21:a2:
c9:0d:95:63:29:d2:4b:4c:d2:36:86:ce:b8:e3:e2:
e7:eb:ef:1b:82:7c:cc:1d:a9:67:6e:8a:f5:df:ff:
9d:96:d3:62:5a:ee:e7:dd:24:ad:2c:c2:99:82:4d:
21:66:87:7e:3f:69:71:cd:62:61:95:33:4a:b9:d6:
a7:8f:45:4c:1d:8d:34:37:a4:c1:69:ff:12:a2:0c:
b2:3c:c3:d8:8b:49:30:fd:00:9f:2d:85:eb:eb:d0:
90:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:34:01:22:B3:D8:9E:D7:2E:4A:72:18:B5:05:6B:4B:26:01:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B69FE67A1CF411EF952503427DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c1:cf:9f:8b:21:c2:aa:ab:be:1b:d5:b7:5d:c0:ce:21:04:
a8:14:ca:48:0f:f6:63:53:0b:0c:b4:96:68:0f:eb:66:91:dc:
d3:97:8f:7f:95:f4:7b:47:40:b9:c2:9a:56:09:d7:66:e6:31:
82:c7:21:b2:4d:8b:34:e5:5c:b7:19:4c:e6:64:ea:60:c3:e7:
13:78:96:2d:1e:7c:92:0d:dd:09:14:0d:42:99:54:b5:88:30:
18:5a:ca:04:4d:77:07:5d:f4:88:52:eb:4e:cc:3b:b5:b5:b1:
a6:1f:b3:13:99:20:2c:fc:9d:bc:2c:f3:54:30:05:ce:d4:86:
32:ab:b3:18:5b:40:4c:d2:bd:1f:64:36:0f:79:d8:81:e0:79:
e3:8a:9f:1c:d2:6b:91:72:9f:bf:3f:5f:de:39:02:f7:07:16:
20:33:54:61:fb:d8:8d:9b:19:9a:1e:ee:1a:9f:09:7c:17:31:
57:f1:3d:9b:f0:31:e4:54:7c:2e:99:f8:66:d7:bd:b3:bd:98:
0d:f8:1c:f3:b0:94:42:c8:b9:f2:5d:64:d9:e9:07:54:94:d9:
8e:31:84:50:ff:b2:b8:46:bc:25:53:44:f9:bb:db:30:1b:2b:
f5:07:94:4b:2b:1b:b4:37:56:a3:34:98:86:30:4a:db:c1:1d:
db:de:ab:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org