Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA3E3EC633A011EF844C1D79762E951A.roa
File: CA3E3EC633A011EF844C1D79762E951A.roa (raw, json)
Hash identifier: CLUw24ywdt6A21WkbuawZbhDlo+VaMkhrrOCwlTb3Kk=
Subject key identifier: 1E:B2:F8:53:B9:BE:E1:6B:C9:21:FA:4A:33:F6:C6:35:3A:3C:1E:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9583
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA3E3EC633A011EF844C1D79762E951A.roa
Signing time: Wed 26 Jun 2024 09:45:15 +0000
ROA not before: Wed 26 Jun 2024 09:45:12 +0000
ROA not after: Mon 30 Dec 2024 09:45:12 +0000
asID: 984
IP address blocks: 45.203.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38275 (0x9583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 09:45:12 2024 GMT
Not After : Dec 30 09:45:12 2024 GMT
Subject: CN=667be32b-562c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:fa:c8:bd:ec:59:78:3f:4b:86:0a:f7:8f:
cf:5a:a3:85:a5:d9:fb:d5:3f:98:15:0b:cf:52:03:
bc:f1:d1:db:99:a1:35:14:e7:b8:c4:08:dc:a2:0b:
f4:5f:f2:4e:90:bc:0d:e5:6d:79:62:4a:3c:60:f0:
93:e5:1d:d9:7d:15:88:25:35:9d:d1:ce:15:85:c6:
a2:09:63:94:cc:6d:cb:27:9d:a7:b4:03:e0:0f:84:
7f:4b:7c:23:40:89:db:ad:00:0a:87:b7:b3:bb:eb:
37:47:79:c8:79:db:ea:6e:68:a8:7d:87:93:2a:a0:
59:05:f4:ac:b4:c6:65:b9:22:4a:4e:8a:4f:4d:12:
65:f7:98:7c:a5:ff:9f:29:bc:84:4f:09:93:ce:70:
36:bc:ef:13:f3:c0:6c:13:92:42:5d:b9:98:41:e3:
14:bc:9a:6a:14:0e:f0:3e:f5:57:2a:f5:18:5c:b9:
18:75:c8:4a:24:7d:99:e1:fe:af:66:c9:dc:38:16:
16:94:b8:77:19:44:6b:61:a1:a9:d4:70:91:88:f9:
14:dc:ff:72:bc:64:9e:cf:d4:79:e9:8f:8e:d8:75:
dd:3d:5b:84:83:f1:c3:ab:2b:0f:35:16:25:53:e7:
3a:ad:04:d3:d3:b0:72:a2:70:3b:39:53:8a:12:73:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:F8:53:B9:BE:E1:6B:C9:21:FA:4A:33:F6:C6:35:3A:3C:1E:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA3E3EC633A011EF844C1D79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.128.0/17
Signature Algorithm: sha256WithRSAEncryption
46:b7:a7:6c:a5:41:e6:30:42:6d:24:2e:2a:7f:94:ae:c3:40:
30:51:02:cc:7f:a1:12:f0:71:f4:bb:ef:ed:5e:38:91:db:13:
5b:db:c0:87:7f:ff:ce:74:41:05:fc:a0:de:f2:a8:8f:d3:1c:
22:1c:61:57:94:49:9b:03:bd:5d:a8:3d:73:e1:2d:e7:41:c0:
ac:ab:2e:95:ab:67:d3:17:2f:85:96:ab:7c:77:d4:b5:67:8b:
f0:cb:5d:b5:b8:a3:8c:41:c0:34:01:c5:f7:b8:1b:2e:e3:3e:
23:10:db:88:c3:f5:b5:47:b1:f6:01:2b:88:6f:68:6d:db:1f:
18:bf:f7:b8:00:35:17:76:72:c3:bc:95:bb:38:da:48:9f:82:
c8:12:f2:33:be:73:3b:6b:81:43:08:ce:0e:74:1c:5b:63:61:
ad:32:10:6f:fb:92:47:15:2e:e8:11:eb:2e:33:bf:63:f5:33:
a5:38:c7:f8:a2:2f:54:d6:e6:70:1d:26:a7:3e:9c:3b:ea:0d:
f1:b4:de:5e:34:b9:27:cc:14:27:ba:e3:aa:a8:cf:dd:d8:a5:
65:69:a6:63:f0:d1:6b:0e:87:1a:de:41:5e:16:fd:f4:26:b0:
20:0f:89:b6:2a:d9:e1:a1:1f:67:9b:f1:9b:6c:f4:7d:f0:04:
71:33:1c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org