Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFDEBCEEA45B11EFAF125A8C762E951A.roa
File: CFDEBCEEA45B11EFAF125A8C762E951A.roa (raw, json)
Hash identifier: 3hQ5oDbdejUGTwgmij6mxAaOUiwIUh1b60aYYsU2doA=
Subject key identifier: 15:79:29:EE:DE:DB:8B:E9:42:94:E5:4B:0D:9F:E4:C9:F3:BC:05:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D428
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFDEBCEEA45B11EFAF125A8C762E951A.roa
Signing time: Sat 16 Nov 2024 20:46:11 +0000
ROA not before: Sat 16 Nov 2024 20:46:07 +0000
ROA not after: Thu 28 Nov 2024 20:46:07 +0000
asID: 43350
IP address blocks: 45.200.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54312 (0xd428)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:46:07 2024 GMT
Not After : Nov 28 20:46:07 2024 GMT
Subject: CN=67390493-ef22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:d8:61:f5:f8:c2:1b:67:ec:ad:7b:b6:e9:
f1:de:31:b8:55:2e:ea:c1:c0:af:9f:65:b7:ed:18:
bc:bc:9f:ed:fe:d7:ac:4f:47:47:a7:6a:e3:90:fa:
c3:34:56:75:e5:c1:91:c0:79:b8:32:12:11:ec:30:
d9:dd:6d:66:db:51:06:d9:20:ad:04:b6:9e:d4:de:
96:df:4c:55:fb:92:da:55:f3:17:8f:9b:51:fd:44:
a3:6b:4e:11:3d:24:9b:2d:ec:14:b7:c1:ce:ef:95:
38:1f:bf:e5:e3:a8:bc:e6:6d:a6:15:0a:75:c0:32:
85:b3:8f:2f:66:d0:aa:5c:0f:5e:32:d8:36:e3:22:
ae:4c:23:d4:ee:6a:ba:99:cf:4b:fe:e1:96:e2:e4:
e3:e6:4d:f2:36:d4:67:80:f9:43:1b:c9:70:10:c7:
6b:f7:c4:71:de:24:55:ab:52:9f:eb:64:0d:a3:56:
78:08:b1:1b:c9:3e:a4:6a:51:6e:ed:dc:5a:a6:8e:
65:5a:e1:22:8e:01:59:e7:4b:31:04:61:c9:8c:74:
4c:30:ba:3c:28:a2:6a:0d:57:77:fb:2c:74:e4:c8:
2e:ba:5f:27:7c:3c:b1:25:e1:0d:a2:c5:cf:e2:88:
12:83:28:f1:50:79:3c:9d:f0:11:7c:5e:87:a7:f7:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:79:29:EE:DE:DB:8B:E9:42:94:E5:4B:0D:9F:E4:C9:F3:BC:05:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CFDEBCEEA45B11EFAF125A8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b7:82:2a:61:f4:a9:e9:52:4b:70:02:c4:dc:37:6c:47:95:
d0:48:84:b6:3b:ca:c2:2e:7b:f3:6b:38:82:84:93:d4:aa:c6:
c2:61:18:e9:44:cc:e8:2f:17:17:56:a5:bb:7b:f7:f4:a8:85:
17:64:03:58:ee:0a:1f:dc:92:70:14:72:41:9f:34:80:3e:5e:
70:30:c8:7f:fd:09:95:30:6a:3b:b5:ad:9f:5b:ef:67:fe:ce:
4c:e9:b3:f5:7d:1e:37:7b:91:f6:b6:39:63:88:04:e7:d3:dd:
2b:61:ac:9c:28:68:66:81:89:b6:78:28:d0:c6:94:6b:a5:e0:
c4:af:95:50:b5:a8:df:8d:b1:0d:fb:9f:d4:89:f0:0a:c0:6b:
94:d7:92:1e:95:a5:c0:67:ac:a2:4a:ad:72:e2:2d:f9:67:ba:
45:9a:ad:6f:ae:b3:a3:13:aa:8a:9a:1a:72:b1:ce:73:3a:5e:
21:0f:7e:dc:ac:57:33:02:fd:a4:43:f0:f5:dc:5c:3f:98:12:
cf:97:4c:24:26:92:34:93:8c:0a:f3:a4:db:72:90:bc:d2:b4:
90:ec:49:5f:23:7a:d1:77:1f:14:c8:b0:1e:ee:fa:de:11:87:
7c:fd:63:34:a2:74:ed:9b:f7:d6:92:2d:66:e7:51:d7:7f:78:
6a:24:63:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:48 2024 by rpki-client on console-fra.rpki-client.org