Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE0D99D6A73F11EF8273CFB8762E951A.roa
File: BE0D99D6A73F11EF8273CFB8762E951A.roa (raw, json)
Hash identifier: 0v4t/iTmDBn+coTHCn2BLgOYkT9TQQ0XeuWpoESzWF0=
Subject key identifier: CB:6B:7C:BA:65:44:15:9B:C1:52:45:3D:7A:51:A1:2F:83:38:C5:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D62D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE0D99D6A73F11EF8273CFB8762E951A.roa
Signing time: Wed 20 Nov 2024 13:02:48 +0000
ROA not before: Wed 20 Nov 2024 13:02:45 +0000
ROA not after: Sat 30 Nov 2024 13:02:45 +0000
asID: 142062
IP address blocks: 45.204.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54829 (0xd62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:02:45 2024 GMT
Not After : Nov 30 13:02:45 2024 GMT
Subject: CN=673dddf8-04a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:aa:28:3d:29:59:e2:61:39:59:09:29:dd:
69:11:0b:2a:70:bc:29:72:84:4c:d7:4c:e3:c9:15:
a6:89:fc:4f:60:53:b5:03:50:d4:77:e8:bb:fa:a6:
27:51:6e:ad:ad:a4:d4:4f:f6:cc:1a:d5:9c:6d:84:
bc:86:2b:5a:00:fd:ea:07:0f:86:a6:eb:c4:61:98:
34:3f:22:29:3b:d8:93:0c:db:fa:f1:ee:37:36:c9:
c5:76:f2:fb:77:33:6c:0d:2e:6a:91:c2:ed:26:41:
b1:d9:c0:04:bf:33:d0:da:a4:26:84:11:0d:74:8a:
98:8d:cd:44:3d:13:d0:d0:2c:3c:19:b5:a6:50:6b:
02:ba:b2:ab:3c:23:fe:c9:5d:69:f7:3f:de:ea:c3:
22:f2:d9:ef:8a:69:66:e7:c7:6c:43:8f:3e:d6:65:
e0:f4:1a:c4:3e:e5:4f:94:4e:00:10:92:d2:e9:7b:
3c:a7:15:58:6c:20:96:4d:5c:87:bd:14:f2:4e:d1:
88:5b:2b:8f:d9:e2:d7:7a:cc:26:88:70:93:75:33:
aa:14:d8:fd:da:58:5c:ab:2d:ba:48:41:2a:ca:a7:
d4:69:a4:99:31:5f:88:0f:8a:83:49:71:92:13:fd:
5f:55:da:7c:ab:8b:40:f5:45:52:64:cd:36:1c:7f:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:7C:BA:65:44:15:9B:C1:52:45:3D:7A:51:A1:2F:83:38:C5:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE0D99D6A73F11EF8273CFB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.87.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d7:dc:57:41:78:9f:8d:43:7b:4d:b9:bb:15:88:78:a8:9c:
89:af:72:72:f3:b4:46:b8:15:ed:3e:23:40:b7:65:1c:75:93:
89:6e:9f:84:35:23:d7:5f:e2:57:84:8c:1c:f8:7c:2a:8e:bb:
ec:82:b5:90:55:87:33:31:2a:b4:4c:29:0f:73:16:8b:8f:8f:
fb:cd:8f:c7:9b:e7:61:f0:5f:ac:00:7a:98:b3:40:57:6e:c1:
42:f7:5e:2a:a1:cf:c2:58:8f:d8:ee:bc:cf:9d:9b:33:1c:80:
dc:b9:fa:b4:b9:21:1f:41:aa:6d:9f:90:75:89:09:a5:d5:70:
f4:54:39:06:f1:1f:58:0b:f5:a6:c2:d2:c5:74:d3:d4:b2:d0:
17:c3:54:87:eb:05:32:f5:77:20:18:05:8c:81:3e:b8:6d:b8:
cf:00:13:c2:d2:b4:78:dc:14:59:ef:9a:27:9e:db:8c:42:8a:
c7:96:54:bc:e1:0e:c2:36:66:06:6e:09:4e:66:7d:c7:17:5b:
b0:57:69:53:f9:71:bb:9a:7e:4c:99:76:10:ea:31:6f:36:6e:
12:98:84:35:b8:dd:16:b1:5b:85:24:4f:36:30:1c:df:37:2f:
93:e5:e0:e4:7c:fd:9e:35:ee:20:b9:b3:cb:cc:2b:e4:84:2e:
bb:6b:4c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:46 2024 by rpki-client on console-fra.rpki-client.org