Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C24D44489C1711EFA0C8D462762E951A.roa
File: C24D44489C1711EFA0C8D462762E951A.roa (raw, json)
Hash identifier: tiAETRELO5NVGA0/gS7q5NrS8xGV735LwCKe1nRK9bU=
Subject key identifier: F0:76:80:C4:8C:76:EE:21:DF:36:F1:C3:84:EB:45:89:C3:09:2A:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CF08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C24D44489C1711EFA0C8D462762E951A.roa
Signing time: Wed 06 Nov 2024 08:18:53 +0000
ROA not before: Wed 06 Nov 2024 08:18:49 +0000
ROA not after: Sun 08 Dec 2024 08:18:49 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53000 (0xcf08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 6 08:18:49 2024 GMT
Not After : Dec 8 08:18:49 2024 GMT
Subject: CN=672b266d-c222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:19:52:1b:23:37:cd:60:fd:df:8f:08:4a:
48:23:46:2c:6d:6f:22:ac:23:39:a8:7b:f7:08:66:
33:a4:a5:77:67:bf:f2:52:5d:bb:17:98:80:2e:6d:
f6:7e:78:ad:45:95:3b:00:55:57:15:bc:37:55:d2:
8c:95:3c:29:1a:72:5c:62:6a:d5:56:bc:2a:c9:4e:
90:c3:3d:68:92:96:1d:ab:55:fd:98:80:52:36:78:
0a:7f:e5:97:5f:3d:24:18:80:27:52:97:7d:a8:55:
f9:2a:9a:bb:f1:53:b8:5f:83:30:a8:0f:3d:18:5e:
33:c1:7f:4a:c7:4f:97:c9:01:b7:7d:f8:d5:76:21:
b9:c7:d4:e9:a2:73:95:87:2b:24:28:b0:1d:60:05:
ec:48:d3:7a:1e:8a:f8:32:f7:03:90:e3:76:40:e8:
51:14:ce:02:63:15:4b:a4:b7:8f:bd:ed:fb:1a:ef:
9d:1a:47:ed:84:78:e0:47:8c:70:a2:f7:13:42:3b:
1c:dd:dc:9c:7f:2c:7a:52:b4:aa:65:98:d7:54:35:
82:f9:c2:d8:c1:92:0c:65:10:95:74:58:05:23:1f:
bb:e2:09:9c:c8:de:5d:c3:cc:9f:4b:d9:ac:15:f1:
18:fb:87:29:9c:bd:e3:41:15:d4:99:04:be:91:8a:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:76:80:C4:8C:76:EE:21:DF:36:F1:C3:84:EB:45:89:C3:09:2A:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C24D44489C1711EFA0C8D462762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:fb:98:2b:8c:01:f1:be:10:d8:ca:e5:b5:e3:57:9c:79:d4:
ec:8d:49:7f:6b:75:7f:72:3a:fc:f4:6a:94:c5:5f:66:83:26:
3e:31:f3:77:28:32:6c:0e:79:5c:4d:8b:30:c3:5a:cc:cd:45:
e2:d3:e7:2f:48:1c:4c:b6:26:27:6c:91:52:27:99:9d:b2:0d:
94:78:b3:48:d4:a0:92:ba:c8:5b:c0:97:40:11:39:73:c6:d6:
20:77:86:5d:88:a0:30:26:51:dc:53:e6:21:7f:d6:ac:56:c4:
ed:fc:43:7c:63:61:e2:07:ba:26:fd:1c:45:c4:7e:22:3d:25:
3d:71:6e:07:34:e9:6b:28:82:6a:4d:18:8c:90:86:9f:3e:91:
72:8a:53:c8:73:e2:7a:fd:05:92:05:d1:6d:db:39:b4:d0:0a:
9e:d8:5f:de:a3:47:3d:0b:c4:c2:a5:e2:5f:8c:b2:39:10:ed:
4b:8b:4c:4e:8c:e4:25:31:95:8c:79:ff:fe:83:53:ce:70:10:
eb:7e:6c:4a:5c:62:e3:df:ce:00:45:49:48:1a:d5:d4:59:55:
f4:0a:4d:12:ea:d1:ac:a0:b5:26:38:d2:a2:77:32:fe:91:df:
30:0b:73:b4:3e:51:10:46:47:e0:a5:96:4d:41:aa:b4:d6:3a:
1e:c2:1d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:46 2024 by rpki-client on console-fra.rpki-client.org