Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE6588309AAB11EF912B5665762E951A.roa
File: BE6588309AAB11EF912B5665762E951A.roa (raw, json)
Hash identifier: vlvXDRs5kkf8ZvdLLtoKKWFFYgYYnSyx8No0QhYpjR4=
Subject key identifier: F8:30:F2:E6:F2:E4:95:18:80:5B:5A:2F:D6:E0:A3:7F:D7:94:4F:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CD94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE6588309AAB11EF912B5665762E951A.roa
Signing time: Mon 04 Nov 2024 12:53:10 +0000
ROA not before: Mon 04 Nov 2024 12:53:06 +0000
ROA not after: Tue 03 Dec 2024 12:53:06 +0000
asID: 141883
IP address blocks: 45.200.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52628 (0xcd94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 12:53:06 2024 GMT
Not After : Dec 3 12:53:06 2024 GMT
Subject: CN=6728c3b6-3050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:7c:c7:f6:dd:22:08:c8:95:8c:d8:f7:3e:
b3:dc:6d:c6:70:8c:0f:7e:83:25:c6:9d:6b:f0:05:
5c:ce:d2:9f:8b:e4:76:b3:33:4b:c1:e0:f1:fc:ae:
86:5d:96:11:b8:95:e3:24:cf:3f:7b:d1:7a:0f:c7:
13:83:29:96:ac:be:0b:c0:bf:e1:7f:64:90:e0:71:
c9:23:3d:aa:9c:b1:bd:47:ae:41:ab:5c:20:ea:ee:
7e:69:ec:05:96:9f:80:d5:50:8e:d6:03:6e:5e:ef:
fe:52:44:93:d3:28:b9:44:01:a1:c5:36:66:99:72:
1b:d6:ad:86:a9:f5:fa:cd:fe:46:14:b4:1d:5d:78:
25:c7:19:c0:27:56:53:7e:57:eb:5a:12:dd:2c:b2:
02:85:32:5f:80:c2:a1:65:8b:8e:ac:7a:f7:6c:13:
eb:20:ab:d3:7e:39:a3:73:36:fc:54:f0:aa:38:95:
d8:c5:a1:89:82:7e:fb:c7:8a:ed:45:b4:a8:5c:c0:
32:64:80:b4:7d:41:2f:9c:17:ec:3e:14:7a:5e:cf:
de:e5:c5:47:ba:e1:48:e9:78:57:55:2a:7b:2b:fe:
19:37:1e:27:b4:f1:d6:97:de:8a:19:cd:d6:4f:ad:
c5:fd:e5:39:3d:37:04:7a:50:26:e6:e0:74:20:b5:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:30:F2:E6:F2:E4:95:18:80:5B:5A:2F:D6:E0:A3:7F:D7:94:4F:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE6588309AAB11EF912B5665762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
41:99:23:a3:a9:29:62:b0:66:5a:28:6e:4c:e6:76:a1:3f:4b:
83:b9:fe:30:f4:e2:42:3a:ac:27:63:99:29:ff:06:9b:a7:3f:
03:5b:cd:ab:fd:cf:f1:f5:6c:c2:bb:8e:1b:7e:e9:fa:69:be:
c1:72:d7:0d:9a:ea:73:e8:2d:44:70:a3:1f:f2:82:86:fa:dc:
49:28:9f:50:f8:55:7b:02:3f:35:b0:2b:5b:6c:1a:c7:9a:ca:
f2:da:e3:56:7f:15:4e:be:ae:27:7e:09:35:16:1a:8a:b2:77:
23:32:2d:f3:e9:f3:67:94:3e:e6:85:29:1b:42:46:ab:76:86:
da:4c:ce:f3:cc:ec:ca:27:57:53:9b:d9:0a:99:5e:dc:79:aa:
44:91:fe:08:e6:80:a8:de:b9:83:31:89:66:4e:63:2f:f8:88:
93:fd:d2:09:13:ec:08:17:12:f3:03:f3:65:fd:c6:31:f4:63:
08:19:f5:6f:b5:75:3c:6e:f0:57:2d:7d:9d:a9:9b:a2:cc:c2:
6e:bc:43:58:83:9f:92:2a:ff:bc:47:24:0d:87:81:72:8e:fe:
1f:00:43:b3:88:c3:9e:ac:9a:34:f3:51:00:59:8d:20:48:9f:
4f:bf:96:8c:60:62:0f:a7:6f:99:c1:68:dc:56:e6:e9:20:de:
a1:89:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:46 2024 by rpki-client on console-fra.rpki-client.org