Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3B0CD7EA64811EF850F44AD762E951A.roa
File: C3B0CD7EA64811EF850F44AD762E951A.roa (raw, json)
Hash identifier: YpKcF4chuo+tVEquCl4+7dwcSzLAOudiSWzaUy20hPE=
Subject key identifier: CD:FB:DF:ED:D8:AD:DE:E3:7A:EC:19:65:11:13:63:48:A2:E2:69:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D554
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3B0CD7EA64811EF850F44AD762E951A.roa
Signing time: Tue 19 Nov 2024 07:34:52 +0000
ROA not before: Tue 19 Nov 2024 07:34:49 +0000
ROA not after: Wed 04 Dec 2024 07:34:49 +0000
asID: 57456
IP address blocks: 45.202.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54612 (0xd554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 07:34:49 2024 GMT
Not After : Dec 4 07:34:49 2024 GMT
Subject: CN=673c3f9c-c449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:28:96:55:99:a6:a4:ba:d9:98:92:e0:08:
9e:9d:2e:3e:07:3a:86:67:d2:a2:84:63:3a:ea:98:
b3:c9:a7:3a:d1:ba:6b:34:bb:cd:1a:39:e4:fb:11:
57:c9:36:05:58:5f:64:ab:2a:ae:1f:ad:44:9b:53:
2e:e0:44:88:03:26:91:60:3d:d9:ec:f0:33:66:26:
31:71:50:8e:26:d1:45:e5:14:b1:35:4d:f4:8a:a6:
00:ff:ed:9a:3f:63:cd:25:c9:2e:18:32:b9:46:30:
ef:ae:ba:0a:07:d8:67:f5:01:39:e5:66:b1:f8:7e:
17:98:04:84:43:f6:92:65:6b:4f:6f:b5:c0:54:fb:
81:7f:1d:cc:b9:6d:fe:65:9b:14:c4:22:cd:b5:dc:
e4:f0:1d:cd:cc:55:6e:5d:41:8b:b9:ce:e0:42:f3:
68:83:0e:3c:c7:f4:58:b5:70:5d:f0:0f:94:4f:d8:
4f:04:2c:a8:98:bd:b5:a7:fa:62:29:5e:dc:32:de:
6f:f9:4a:55:85:a6:70:5a:00:77:e7:3c:3e:98:eb:
13:40:26:e9:38:26:f4:ce:87:61:88:43:ba:90:5c:
78:ec:aa:e9:14:cd:95:2c:8e:bd:4d:b1:b3:51:2d:
b9:84:c4:82:2e:cc:2a:79:d8:94:19:13:e8:7d:17:
45:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FB:DF:ED:D8:AD:DE:E3:7A:EC:19:65:11:13:63:48:A2:E2:69:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3B0CD7EA64811EF850F44AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.44.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:65:15:d1:62:d5:44:8e:8f:b0:24:ee:4c:38:1c:fd:64:b8:
47:98:b0:eb:e8:6e:e8:ae:b2:be:21:c3:af:51:3a:5f:1c:94:
a7:00:6d:98:3d:28:a1:6e:e5:ca:ac:21:de:80:8e:88:76:af:
2a:1d:bc:ae:4a:f6:19:08:e1:52:82:86:0c:33:b4:40:04:22:
5f:6b:0b:4e:6e:68:2b:a1:41:c4:1e:34:72:b0:61:29:85:12:
cd:cb:c1:fd:89:b5:ef:ae:63:cf:99:17:df:45:51:36:11:52:
16:c8:8e:3c:53:2c:8c:01:22:f0:65:5f:7d:29:4e:15:3a:42:
02:43:2a:bc:8f:da:8d:6a:45:15:65:82:bf:56:a9:d4:50:5c:
c0:4c:1e:9d:0e:41:9b:93:72:f3:ed:17:2f:1d:e2:fe:b0:63:
84:d9:3f:6a:65:99:e6:3d:77:eb:cc:5b:86:5c:7d:70:80:13:
ab:c7:21:11:ca:10:c6:ed:a8:f6:a2:3a:49:b9:aa:c2:22:97:
78:38:f9:5a:97:12:9a:e4:4a:92:58:aa:02:b5:2e:b8:59:36:
78:bb:ab:35:e3:8b:91:01:9d:7b:ba:ce:ba:74:ea:d2:7b:30:
4c:2e:bb:cc:9e:71:9f:69:d6:16:95:89:46:54:7c:2a:c2:86:
f1:eb:ea:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:46 2024 by rpki-client on console-fra.rpki-client.org