Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D45383E8A72311EFB7D7178D762E951A.roa
File: D45383E8A72311EFB7D7178D762E951A.roa (raw, json)
Hash identifier: tJN8CkXpX7g+0olfU1glN9AMMaxq2ec1eF4hGAw1pew=
Subject key identifier: 59:CE:EC:84:7F:57:C7:E7:18:DC:7D:26:F4:B6:6D:2F:55:CA:CB:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D45383E8A72311EFB7D7178D762E951A.roa
Signing time: Wed 20 Nov 2024 09:43:00 +0000
ROA not before: Wed 20 Nov 2024 09:42:56 +0000
ROA not after: Mon 02 Dec 2024 09:42:56 +0000
asID: 5065
IP address blocks: 45.204.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54733 (0xd5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 09:42:56 2024 GMT
Not After : Dec 2 09:42:56 2024 GMT
Subject: CN=673daf24-5487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:88:38:58:a3:7c:b8:07:86:03:6a:6e:f8:
bd:46:18:ef:31:00:3f:43:9f:31:cf:15:bc:cb:3c:
29:6c:17:5f:cc:e1:4b:c6:cb:96:07:30:e7:cc:36:
23:31:cf:ae:c7:07:e2:89:a7:2f:04:ab:91:4f:71:
4b:ae:2f:87:d6:1a:ee:a0:30:6d:fb:53:74:a7:ec:
b3:15:d2:74:ac:d5:ab:9f:b8:f4:c3:06:5e:8d:df:
a2:2e:ec:66:9c:79:5a:03:1b:2e:6a:6a:15:61:0c:
0e:3c:ac:26:88:89:fe:dc:56:64:fe:66:79:b0:34:
29:e1:eb:ef:dd:59:a4:4f:6e:4a:13:5a:7d:85:e9:
2c:9f:2d:34:29:ce:3e:39:1c:7c:7f:14:7f:b0:e1:
c1:34:d0:a0:2b:4c:30:e8:d9:3a:e3:18:60:44:7a:
ab:81:df:fc:57:04:bf:91:08:f0:c3:a2:c6:0a:cd:
8b:b0:73:9e:2e:84:51:4c:dc:37:9f:df:86:57:35:
84:ce:00:2a:09:ac:b9:86:02:b3:d2:4e:2a:dc:5a:
7c:c2:3b:b8:3d:f0:7e:08:26:79:84:56:fd:6d:23:
71:c9:39:bb:42:7b:7e:3e:d4:a4:69:a8:3b:ca:11:
19:bf:9c:57:8b:f9:06:d2:aa:66:0a:fc:a2:c4:b5:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:EC:84:7F:57:C7:E7:18:DC:7D:26:F4:B6:6D:2F:55:CA:CB:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D45383E8A72311EFB7D7178D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e5:0e:12:3e:f8:66:c6:de:df:ff:64:72:49:7b:01:82:5c:
a0:39:d3:96:eb:6c:af:d1:85:03:18:9d:4d:70:61:c1:58:6e:
99:d1:d9:83:20:0b:22:30:c1:9a:e1:ac:c1:7b:ca:59:69:62:
63:43:45:ca:fd:a7:7d:2a:39:dc:23:5c:7a:86:b4:74:b7:15:
c0:08:59:58:9e:cc:37:52:9d:34:b6:fc:cb:7b:de:cf:2b:31:
c2:e3:a3:59:cf:09:ea:02:c9:7c:38:94:2f:ef:41:25:36:40:
59:4f:e6:73:b6:c3:a3:cf:fb:44:ed:64:db:aa:d3:87:44:61:
f6:95:7f:f1:89:d2:a7:fc:10:b3:4e:02:b2:eb:d4:63:81:dd:
dd:fa:c8:7b:d7:29:6a:8b:cd:45:bf:d4:8d:69:e2:e0:07:7d:
ec:7b:1b:ca:41:7a:31:4f:92:fa:39:e9:67:73:d9:96:63:72:
6c:0c:d0:79:1a:ac:5a:11:1b:4e:27:95:1a:a0:ac:c8:41:be:
cc:db:d5:62:cd:4b:1e:c8:01:33:98:4e:7c:86:c5:e4:c4:82:
7c:e9:15:74:74:f9:bd:0d:5c:a5:89:2d:60:a4:1b:b0:f6:bf:
96:1d:a4:48:d2:70:75:8d:a5:7e:69:df:f8:f6:c5:c0:71:b5:
65:e0:96:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:49 2024 by rpki-client on console-fra.rpki-client.org