Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA180609AB011EF9A67CB83762E951A.roa
File: CDA180609AB011EF9A67CB83762E951A.roa (raw, json)
Hash identifier: 0M7cc3CFrsgV3T9j/VGQwXB0mGy1CfBfcVdlOVoe/fs=
Subject key identifier: 98:EA:4F:26:AF:CB:58:8B:95:10:1B:79:3F:88:FA:C5:E0:38:EC:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA180609AB011EF9A67CB83762E951A.roa
Signing time: Mon 04 Nov 2024 13:29:23 +0000
ROA not before: Mon 04 Nov 2024 13:29:19 +0000
ROA not after: Tue 03 Dec 2024 13:29:19 +0000
asID: 141883
IP address blocks: 45.200.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52676 (0xcdc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:29:19 2024 GMT
Not After : Dec 3 13:29:19 2024 GMT
Subject: CN=6728cc33-bcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b9:0b:84:24:39:78:cc:27:f9:3f:f1:2b:1c:
68:06:e9:d4:7f:f7:16:6e:49:00:ef:2a:95:63:17:
ef:09:47:1c:ff:e0:17:e2:ee:03:8b:ea:38:15:51:
d9:4d:dc:2e:0b:20:65:a1:c7:3a:25:28:66:05:05:
64:46:22:b1:13:5c:f9:86:7e:b1:4a:9c:e9:5d:8e:
5d:cc:0a:80:ca:e9:02:db:6f:c3:20:e1:d9:6a:a8:
25:63:8e:4f:1d:0a:40:7c:74:a8:70:66:d2:af:6b:
62:91:47:63:c4:7f:a5:fd:cc:40:be:97:41:af:93:
ee:75:89:22:50:ad:ed:01:6e:c7:77:bb:80:5f:a4:
ec:71:e8:e7:72:e4:cd:d0:c3:5a:20:c4:16:1a:b2:
3c:b9:31:bd:b4:7b:5a:ce:c7:d0:e3:30:94:eb:4b:
65:83:05:65:12:b8:c6:46:56:fa:7f:d1:ed:6e:4e:
6a:08:b9:bc:f1:62:cf:d8:f5:91:33:43:10:00:1b:
a3:2d:f4:90:82:29:f2:43:fb:10:44:2d:cc:a1:6f:
f7:dd:bf:84:cf:30:9b:1f:2d:94:a1:05:92:51:7d:
9a:15:47:27:47:04:fa:e1:c0:40:f6:3b:4c:2c:fb:
94:bd:9b:73:46:fd:7a:4f:5e:5d:65:6f:52:46:33:
eb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EA:4F:26:AF:CB:58:8B:95:10:1B:79:3F:88:FA:C5:E0:38:EC:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDA180609AB011EF9A67CB83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.18.0/23
Signature Algorithm: sha256WithRSAEncryption
92:76:ca:48:82:8b:cb:f1:9a:11:d5:90:ab:28:ec:d4:04:87:
5d:9b:71:52:02:7d:b9:77:5b:c7:72:d4:a0:8f:4c:ca:b3:2a:
45:9c:79:3c:9b:0f:68:b3:75:60:48:01:45:94:de:ad:76:32:
46:85:4e:b2:a9:93:1d:a3:d1:f6:95:8f:59:ff:16:4f:1c:02:
67:01:e7:1e:25:a8:8b:ea:cb:c4:85:0f:fb:f0:35:bd:d7:0d:
12:8d:5b:4d:0a:c6:77:86:c7:0f:d8:a9:c8:d6:52:04:7e:3c:
68:04:7c:0a:9e:3d:70:98:42:d5:90:92:a6:f7:70:b7:3c:5f:
d1:b0:02:c0:62:4c:52:34:c9:06:d5:39:fd:3d:83:3c:64:e5:
2b:b9:0d:43:1b:4d:29:5b:c7:9a:c9:ec:69:31:85:90:13:4c:
71:44:e0:89:d4:fc:25:39:9a:df:32:a9:bf:bd:f4:64:7c:2f:
70:95:58:6b:00:f8:d8:72:ae:fe:32:2b:05:7b:89:ae:10:96:
75:da:77:eb:a4:49:1d:fe:3c:33:d8:fc:08:8f:90:27:f8:0f:
e0:c6:3c:87:d3:b9:9b:46:93:fe:ea:01:23:81:51:d6:f7:ae:
45:88:08:40:fc:a5:3b:06:41:5f:57:23:b7:41:9b:e5:cc:69:
16:cc:64:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:50 2024 by rpki-client on console-ams.rpki-client.org