Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8B11D6CA74611EFB4814764762E951A.roa
File: B8B11D6CA74611EFB4814764762E951A.roa (raw, json)
Hash identifier: 7LCEoyZR1lSDI1S01S5Koq7wK1/3LiY9VYiopq/hhQg=
Subject key identifier: 96:E9:05:D3:AA:C8:AA:95:57:98:16:07:E4:7A:79:BD:A8:7C:0D:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D679
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8B11D6CA74611EFB4814764762E951A.roa
Signing time: Wed 20 Nov 2024 13:52:46 +0000
ROA not before: Wed 20 Nov 2024 13:52:42 +0000
ROA not after: Sat 30 Nov 2024 13:52:42 +0000
asID: 44559
IP address blocks: 45.199.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54905 (0xd679)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:52:42 2024 GMT
Not After : Nov 30 13:52:42 2024 GMT
Subject: CN=673de9ae-bd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:1e:5c:d3:90:18:1b:ca:31:63:42:9e:9f:
6d:5e:05:c1:31:da:16:3e:cd:55:e9:f1:75:b6:fc:
98:b7:f9:3a:5b:bb:18:e7:36:3d:0d:a6:4f:39:16:
b1:9a:58:8a:0a:d3:39:ea:a3:c1:6e:4b:99:e8:0a:
91:04:fd:bc:29:de:4e:ba:30:97:9a:03:f3:7c:53:
05:e6:52:e6:3e:f9:a3:de:28:e1:fa:86:76:96:4d:
5d:e9:73:f3:66:13:4f:28:6e:1c:69:e7:ea:92:b1:
50:e2:81:13:d7:95:7c:a7:c1:6a:99:2d:45:c9:7e:
fb:d3:9c:42:c4:1d:82:bc:75:e5:9e:66:d8:2c:fc:
f1:70:3d:ec:7a:79:5a:20:cc:d9:99:1d:22:f7:fa:
a5:bb:e9:5d:56:11:86:8c:cc:a1:fd:ad:26:12:c0:
cb:0e:79:bd:4c:b2:06:2a:43:1b:d6:88:00:96:a2:
ed:e0:7c:e6:a4:13:d0:07:74:aa:58:e9:3c:eb:32:
e1:f7:5e:72:15:a4:82:31:1e:6d:29:d9:2e:d7:0b:
99:1a:e4:dc:32:3c:ce:0e:63:94:c9:00:35:a5:9b:
38:79:20:a8:57:86:e0:3a:73:b0:84:c5:aa:fb:f2:
9b:d3:e7:8a:81:12:a6:04:e3:90:11:1d:f3:3b:cb:
3d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E9:05:D3:AA:C8:AA:95:57:98:16:07:E4:7A:79:BD:A8:7C:0D:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8B11D6CA74611EFB4814764762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.212.0/23
Signature Algorithm: sha256WithRSAEncryption
39:a4:b3:4d:61:1f:f7:eb:6c:b3:b8:e4:dd:e6:77:78:ef:16:
6d:6c:84:7e:23:fa:63:93:2c:21:50:93:77:b7:10:22:be:c4:
1b:cc:ad:35:32:de:12:75:45:3e:9b:cc:4b:9d:5b:78:21:32:
cb:6c:af:af:7b:ad:c4:b8:5b:fc:e4:eb:79:64:06:f1:a5:00:
f0:60:67:38:58:d5:34:ed:78:6d:ab:b5:91:6f:ad:36:99:c1:
6b:9a:32:8d:36:da:bf:1c:a7:9b:90:6c:21:8e:77:55:bf:29:
bc:b6:07:37:37:45:31:17:6c:9a:74:5b:8f:1b:ce:16:37:c3:
52:9f:c1:10:55:ff:2e:40:62:7a:1e:c0:28:e8:93:8b:09:5d:
ff:f8:37:52:d2:9f:d6:12:05:b8:c4:1d:ff:a6:53:75:41:94:
28:14:d3:ff:95:8e:b3:83:28:d9:52:dd:61:2c:e2:ed:32:71:
06:3f:27:2c:9a:4c:71:df:07:6e:95:ca:90:79:44:b1:fb:c5:
43:62:a1:c0:0e:33:4f:71:65:58:56:52:84:34:1c:87:64:25:
fc:d2:4b:b6:e8:8d:c9:99:63:4f:0c:52:63:88:a5:80:a4:7d:
8f:34:84:ee:20:ee:bb:32:6f:86:d4:07:d5:d4:34:9c:d9:88:
63:f6:79:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:45 2024 by rpki-client on console-fra.rpki-client.org