Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF2B6C58A19E11EF9B30E355762E951A.roa
File: CF2B6C58A19E11EF9B30E355762E951A.roa (raw, json)
Hash identifier: jTDvKJdu+GRviuboOkjfRtofUV3Q5KuXuOFILil+fh8=
Subject key identifier: D4:CA:01:41:40:5A:07:3E:E7:4C:13:6C:69:A5:7E:ED:B9:97:FE:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D268
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF2B6C58A19E11EF9B30E355762E951A.roa
Signing time: Wed 13 Nov 2024 09:08:12 +0000
ROA not before: Wed 13 Nov 2024 09:08:09 +0000
ROA not after: Sat 23 Nov 2024 09:08:09 +0000
asID: 39600
IP address blocks: 45.196.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53864 (0xd268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 09:08:09 2024 GMT
Not After : Nov 23 09:08:09 2024 GMT
Subject: CN=67346c7c-4b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:70:03:0c:b3:8f:7d:b3:08:a6:c7:1d:64:
dc:90:6f:86:b5:a7:21:2b:16:36:af:45:d3:c7:9b:
b1:ee:72:e3:6a:62:b0:08:d1:81:e9:bd:aa:48:18:
f2:06:3a:ce:69:f9:d9:31:ab:35:ab:f0:cc:47:eb:
6c:b7:3a:8a:1a:f9:2f:6e:de:f0:85:4b:f2:99:d7:
d8:7b:84:82:cd:23:85:27:5c:35:94:93:63:ce:32:
26:d2:cd:1e:e2:e5:81:e0:14:9d:33:cf:f1:7a:01:
ae:57:e4:4c:aa:f3:92:22:f6:dd:4c:18:c1:f3:22:
39:ad:8b:00:03:81:b2:f9:89:42:5b:ce:7e:ea:7d:
f5:9e:1e:75:b9:f5:0a:f4:92:a4:59:9f:ed:88:dc:
6e:51:e9:1b:7d:e2:77:4d:68:b9:f8:ed:c2:9a:e0:
e7:2e:ba:7d:35:5a:11:93:3b:6b:cc:d8:dd:89:7f:
b7:21:b2:09:78:64:88:a8:dc:01:eb:12:58:fd:4c:
93:f1:52:c8:f3:13:83:5e:34:da:e0:b0:23:50:57:
ec:e4:b5:d9:9f:38:50:39:72:3d:e9:6f:0e:fd:be:
09:a3:6c:db:f7:ed:5c:1f:df:a2:d3:bd:af:19:67:
9a:68:a7:16:f2:72:cd:e9:4a:ee:d2:4c:35:03:dd:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CA:01:41:40:5A:07:3E:E7:4C:13:6C:69:A5:7E:ED:B9:97:FE:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF2B6C58A19E11EF9B30E355762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.128.0/22
Signature Algorithm: sha256WithRSAEncryption
67:4e:34:d7:0c:d4:b6:57:30:74:71:49:8f:c3:42:1e:01:b9:
02:4b:bc:3f:6b:62:a8:41:a3:58:c2:34:27:92:b4:d5:6a:d3:
ad:0e:dd:29:a0:77:89:21:a7:5e:e6:78:17:d1:b8:58:93:28:
c4:f8:5e:5b:5c:61:60:68:49:b1:bd:d1:20:85:5d:43:86:e0:
56:a5:a8:dc:bb:91:c5:3b:d9:14:02:e8:26:ec:e9:49:01:47:
5b:fd:0d:6e:e6:a5:e0:68:02:c3:ad:82:14:ec:df:66:ea:5f:
10:e0:89:bd:f5:5c:54:36:a6:ef:9a:69:8b:2d:99:80:7b:73:
36:e5:82:2a:a6:58:24:00:ed:63:60:0d:b2:cf:1a:ba:a0:33:
7d:1d:93:db:4d:08:12:1e:d0:f1:51:f5:58:da:73:78:7c:bb:
a8:a9:5a:0f:2b:89:63:fd:a0:33:81:a0:13:91:4a:7c:95:6d:
a2:f1:7c:27:5b:ee:90:65:61:be:bc:87:e7:3e:1f:c0:1b:7d:
da:4a:2d:40:78:b9:ee:9e:33:21:91:ff:22:a4:ad:6e:86:50:
0c:79:89:87:1d:b0:23:42:48:8d:4e:f8:e5:7f:c4:96:a9:7b:
ab:8b:ea:dd:fc:ad:1a:3f:1e:51:df:fb:57:f2:65:26:3c:9d:
6a:c1:93:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:48 2024 by rpki-client on console-fra.rpki-client.org