Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C47FFFB49AB211EFBC217C91762E951A.roa
File: C47FFFB49AB211EFBC217C91762E951A.roa (raw, json)
Hash identifier: qilI01VIZy1GoW/HKZ5+b8eRd7RWKhnzLT2LXfY3JNo=
Subject key identifier: 99:CA:68:18:E9:B0:52:34:1A:65:B6:C6:9D:CF:76:E1:17:C3:5C:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C47FFFB49AB211EFBC217C91762E951A.roa
Signing time: Mon 04 Nov 2024 13:43:26 +0000
ROA not before: Mon 04 Nov 2024 13:43:23 +0000
ROA not after: Tue 03 Dec 2024 13:43:23 +0000
asID: 139646
IP address blocks: 45.201.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52694 (0xcdd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:43:23 2024 GMT
Not After : Dec 3 13:43:23 2024 GMT
Subject: CN=6728cf7e-8a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:20:44:6f:cb:ac:0f:02:61:96:f9:54:54:
ab:c3:00:73:f9:93:46:09:9e:6f:28:73:0f:63:c3:
21:bb:b5:13:40:96:32:8d:02:79:8c:65:9f:cd:d0:
f4:e0:63:23:c5:8e:a8:16:a6:ac:85:cf:ac:b7:7d:
cc:0c:9e:b3:c8:2d:f6:f8:a4:36:70:82:33:3d:2a:
d3:d6:e4:df:67:cf:d7:5a:3d:b6:05:a8:41:63:01:
87:8f:2a:36:2e:5a:f2:fa:a5:66:9a:d6:4d:a1:7b:
7b:d8:f2:19:f3:62:a9:5f:bb:1e:88:c0:bb:7b:a7:
b1:cc:4a:42:42:df:b2:31:0a:a5:0b:5e:5e:4d:83:
f1:21:c9:de:ed:87:d9:9d:93:5c:b4:c8:79:b2:f3:
65:54:c7:ef:b6:a9:06:a8:10:ab:1f:8f:67:ef:25:
3b:64:97:21:98:9e:d4:41:30:9a:07:60:fa:80:61:
f7:15:52:3e:e8:17:10:38:94:5e:44:da:b8:ec:e4:
6c:bc:79:fd:d0:85:76:00:07:ee:3a:88:ea:49:4e:
fb:3c:6c:e8:7e:47:39:17:64:51:fb:4e:f5:cf:29:
5f:58:59:bb:a5:d6:d9:97:30:a6:b4:cd:8f:8f:10:
04:a1:9a:8c:ef:8e:9a:af:76:7a:1b:41:ff:9b:3e:
de:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CA:68:18:E9:B0:52:34:1A:65:B6:C6:9D:CF:76:E1:17:C3:5C:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C47FFFB49AB211EFBC217C91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0/21
Signature Algorithm: sha256WithRSAEncryption
31:fc:9d:48:d2:b9:5f:f7:05:af:76:ed:32:35:bf:41:75:ca:
c4:cb:a0:19:57:bc:6d:48:4b:4a:d8:52:9c:c4:be:74:18:a6:
6e:47:e7:b0:7d:1a:11:70:21:b7:da:9d:a3:19:d9:6a:84:3e:
24:12:b8:02:18:3a:7f:57:58:b3:9d:68:27:16:d3:a1:63:c4:
5a:5f:a7:90:5f:ee:14:7c:63:5e:5c:2b:f1:be:f7:89:11:3d:
9d:f6:1b:5c:60:47:0c:5f:88:8c:42:c3:0e:29:0c:47:f3:dd:
9e:c4:3b:9a:1f:50:d9:8c:66:ed:75:9d:dd:70:6b:7f:93:4f:
15:dd:82:2a:5e:76:3a:fb:bf:2b:d5:0c:16:00:0e:28:5e:81:
88:31:96:58:3f:bf:f5:f2:66:e6:44:37:1e:b7:ce:2b:3c:eb:
9a:c0:22:4a:94:14:ec:67:17:ae:3b:d5:80:fd:6b:f3:dd:6f:
69:b8:e4:ab:af:7b:54:f2:69:c5:74:e8:22:f2:e0:eb:58:ba:
71:c2:f9:a8:6e:d0:cd:24:b4:8a:e8:73:d9:28:36:3b:32:3c:
aa:86:96:9a:4d:c5:dd:f7:a0:1e:5c:45:3f:3c:e3:c4:0e:28:
19:5b:34:65:9c:db:5f:1e:81:94:f7:43:16:41:3c:f3:8e:e5:
ca:b4:5b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----