Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA0FACEC9CDF11EFBB5BA854762E951A.roa
File: DA0FACEC9CDF11EFBB5BA854762E951A.roa (raw, json)
Hash identifier: Nk3MKeijguc1J6xJ4h1yaFgSUcAvKqBvCCOQL31Pbzc=
Subject key identifier: 14:10:D9:32:BE:58:D4:BC:EA:8B:53:69:8D:CD:83:A4:A4:16:A7:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CFC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA0FACEC9CDF11EFBB5BA854762E951A.roa
Signing time: Thu 07 Nov 2024 08:11:12 +0000
ROA not before: Thu 07 Nov 2024 08:11:08 +0000
ROA not after: Sat 30 Nov 2024 08:11:08 +0000
asID: 984
IP address blocks: 45.195.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53188 (0xcfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 7 08:11:08 2024 GMT
Not After : Nov 30 08:11:08 2024 GMT
Subject: CN=672c7620-a36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:e8:23:39:27:95:7c:36:ba:2c:a8:c0:dc:
3a:cd:8b:bc:2e:4f:de:09:ed:e6:c6:32:9d:3e:2c:
db:c4:d0:08:d6:54:50:c4:ca:0d:ff:96:d2:64:13:
cb:68:1a:70:4e:b1:20:64:bb:75:51:c4:a6:78:d7:
46:6f:57:cb:f9:b5:ec:f4:a1:1c:ee:0e:47:6e:09:
ed:04:8b:37:1c:a5:05:aa:32:be:9d:02:d3:ca:04:
c5:9f:4b:da:94:65:de:77:29:88:0c:9f:6e:f1:9b:
77:fd:b1:e7:88:fb:9a:60:58:47:48:0a:c1:7c:1c:
26:de:9f:17:4a:43:e2:d5:5a:24:c5:77:80:ee:56:
96:45:04:62:32:45:5c:52:d8:80:09:42:d0:64:e0:
b1:fa:50:50:13:cf:d1:90:4b:7f:11:d6:b2:d9:7c:
0e:ee:cc:e9:c3:5d:4c:7e:e6:11:68:4c:72:16:7b:
a9:30:7b:ba:0a:48:a7:4f:66:1e:3b:d6:ed:ae:b2:
99:61:c8:fe:91:9f:5e:ff:95:03:96:7b:8c:19:b4:
39:92:03:6a:85:7a:7a:e8:d7:c1:79:06:8d:68:70:
a5:aa:24:23:09:9c:9d:b0:3f:d1:f7:99:78:33:66:
9d:bb:32:42:e7:ab:ca:4c:42:7c:c5:7f:32:78:cf:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:D9:32:BE:58:D4:BC:EA:8B:53:69:8D:CD:83:A4:A4:16:A7:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA0FACEC9CDF11EFBB5BA854762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.247.0/24
Signature Algorithm: sha256WithRSAEncryption
38:56:8e:83:64:b9:3e:58:67:75:ca:83:e5:51:42:f5:a4:2e:
f7:c5:ae:1a:8a:07:a4:53:03:aa:b3:b2:fb:c6:a4:1b:07:89:
98:e5:3f:db:fe:ed:38:d9:fd:62:14:72:03:ee:df:17:18:25:
4f:38:1a:92:c8:4b:10:91:fc:d2:4b:f9:ad:61:82:fa:b9:1e:
7b:4b:71:5d:e5:a1:6d:cc:9c:af:6d:50:69:20:bd:47:18:d7:
90:df:ca:51:0d:14:59:9c:1a:1b:5a:7d:27:f4:7f:5b:bd:9e:
52:ea:2d:26:4f:b6:25:d8:1c:dd:55:f1:37:37:27:7e:02:87:
96:4b:6a:69:73:7b:6c:c9:b9:0b:ee:bf:54:80:70:43:c0:c2:
ff:83:23:7e:1e:2b:bc:55:54:d9:cd:40:8b:3c:76:e8:14:98:
a1:e5:32:8f:cf:38:be:79:7d:29:b3:e5:d3:dc:31:a6:9a:c6:
0c:af:d2:3a:58:fe:eb:5d:61:9e:d0:b9:0f:33:e0:78:86:90:
df:ce:51:dc:be:eb:0d:7d:22:8e:df:fb:50:9d:4c:00:42:25:
15:a8:9e:b2:71:a6:a1:19:37:ab:0e:7b:9d:77:94:66:c5:9a:
6d:42:ef:80:7e:5b:6e:2e:16:d5:3e:b7:2b:c6:40:60:67:df:
c2:21:d6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:52 2024 by rpki-client on console-ams.rpki-client.org