Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0C10F2A0E911EFA72846B3762E951A.roa
File: CF0C10F2A0E911EFA72846B3762E951A.roa (raw, json)
Hash identifier: 1BMz/r9ugEyPKj6QsLQEYwk65GQVpTHbfHNZyJSmf1c=
Subject key identifier: 61:BD:56:FB:82:1E:54:AB:C6:48:84:7B:CB:F9:60:44:F1:2B:19:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0C10F2A0E911EFA72846B3762E951A.roa
Signing time: Tue 12 Nov 2024 11:32:33 +0000
ROA not before: Tue 12 Nov 2024 11:32:30 +0000
ROA not after: Fri 22 Nov 2024 11:32:30 +0000
asID: 39600
IP address blocks: 45.203.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 11:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53713 (0xd1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 11:32:30 2024 GMT
Not After : Nov 22 11:32:30 2024 GMT
Subject: CN=67333cd1-d749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:49:82:7c:6b:14:ed:ec:0f:c4:7a:b2:76:
71:23:0a:d6:fa:1f:d6:3e:44:4b:00:d3:a3:60:8b:
3f:3d:73:85:66:45:5b:7d:8d:60:c2:5b:31:5f:0f:
ff:c9:48:86:7e:ce:b7:c7:eb:d4:73:8b:dc:8e:d8:
bf:f8:01:79:5d:0f:b1:42:21:f2:61:bf:04:9b:ff:
9c:ba:1b:f9:d3:2f:de:ff:30:1b:23:a1:30:5f:35:
1d:a8:7a:2e:dd:60:f3:d6:71:14:54:9a:df:82:cd:
d6:de:f9:2a:69:de:8f:3f:7e:a1:d7:79:a9:03:3a:
78:fd:cd:a8:e0:f7:fe:8d:ad:e9:22:dd:ee:2a:d6:
3a:fe:5d:92:b9:2e:6b:b5:b4:92:b2:26:ba:63:37:
d2:46:45:53:8f:99:d7:00:83:76:32:f6:f2:58:99:
3f:dd:c6:a6:a5:04:b3:c9:91:e0:2e:be:d5:a4:11:
0c:1b:12:ce:5a:91:33:02:64:86:63:50:f1:ba:a5:
82:8d:c5:7f:69:7c:b1:ac:95:64:89:ad:f4:19:19:
21:4b:44:cb:4e:c5:bc:1b:61:d0:d3:03:db:53:c7:
1f:82:b6:1d:ee:98:00:34:91:3d:13:55:c8:4f:0d:
fb:a7:3d:64:6a:11:e2:a8:07:cc:e0:41:25:bc:d0:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BD:56:FB:82:1E:54:AB:C6:48:84:7B:CB:F9:60:44:F1:2B:19:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0C10F2A0E911EFA72846B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.62.0/23
Signature Algorithm: sha256WithRSAEncryption
09:50:38:54:68:30:b2:c6:66:41:f7:42:c6:0a:fa:91:bb:61:
7d:0f:bd:e6:b4:96:3a:d2:68:50:2f:49:2f:b9:0a:57:9b:d7:
e3:70:3d:eb:ef:17:06:d4:e8:5a:23:d1:e9:af:af:24:1a:3b:
e7:c3:64:b2:dd:2a:e0:25:e3:4b:71:e6:e7:31:b7:ea:d9:b1:
fc:20:0f:56:5f:4f:13:dd:d9:0c:77:d0:a9:df:53:eb:ca:4b:
8b:75:95:d4:57:d1:a0:9c:4d:46:e6:3a:de:9f:f3:39:28:55:
7f:41:6a:1a:13:02:38:77:4c:93:76:a0:de:f5:f8:1e:4f:ca:
ba:61:b7:61:0c:78:3a:5b:24:58:2e:93:79:2d:ec:8c:35:e6:
80:96:d5:bf:9b:16:47:e1:8e:06:b8:eb:38:e9:51:82:8d:88:
d0:d0:f7:40:81:28:ba:31:b5:1c:1f:0c:e7:96:12:31:b1:76:
b8:b4:b3:ea:9f:1f:62:e0:ca:c0:44:bd:4d:ba:1c:38:cd:1d:
4c:62:76:ac:d3:04:77:31:2e:37:39:40:cc:fa:20:2c:b5:b4:
06:14:42:95:1e:ca:50:3e:d0:fd:dc:ca:77:cb:b2:fe:da:73:
a1:64:86:4c:3a:30:80:21:f1:62:68:ac:31:8b:1a:d3:b1:eb:
e2:4b:ff:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:50 2024 by rpki-client on console-ams.rpki-client.org