Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD7CC4D08D2D11EFACBB505C762E951A.roa
File: DD7CC4D08D2D11EFACBB505C762E951A.roa (raw, json)
Hash identifier: KJW57SNuKkredwdJ0j9MzJpYkbDP0IziG3YVzm9FaNg=
Subject key identifier: B3:B9:E6:77:E9:05:23:B1:11:5B:15:B0:4A:E7:21:34:97:5F:3C:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C67E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD7CC4D08D2D11EFACBB505C762E951A.roa
Signing time: Fri 18 Oct 2024 08:49:20 +0000
ROA not before: Fri 18 Oct 2024 08:49:17 +0000
ROA not after: Sat 23 Nov 2024 08:49:17 +0000
asID: 44559
IP address blocks: 45.200.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50814 (0xc67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 08:49:17 2024 GMT
Not After : Nov 23 08:49:17 2024 GMT
Subject: CN=67122110-81bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:dc:ff:f9:fe:24:26:4e:4f:2e:3b:d9:76:
2a:7c:df:a2:95:11:74:5f:d8:0c:dc:12:0a:78:86:
bf:6f:6f:8a:b1:ff:6e:34:7e:aa:17:98:91:c9:ff:
c5:71:9f:30:c7:3c:ab:3f:6b:48:09:db:fe:16:74:
cf:44:aa:8f:bb:89:29:ef:f0:7c:d5:1d:45:de:f5:
11:25:26:57:47:8b:c5:9e:1c:34:25:cf:9d:56:48:
f1:c0:b9:64:a3:e5:6f:c1:22:de:1c:df:2d:1c:a1:
4b:66:51:11:ee:52:05:0c:40:ff:f4:c7:4d:3a:55:
dd:ef:8c:34:80:bf:6f:83:0a:4a:7b:0d:3b:65:da:
64:6c:74:5d:85:ff:7f:aa:52:e8:93:bf:b2:ac:e9:
2f:0a:e6:9c:0f:6c:30:17:9a:50:d3:35:0a:96:58:
3c:a3:61:69:b0:56:84:8d:52:d0:60:b4:fd:48:51:
fb:1e:1c:75:0a:a4:13:d1:88:28:5e:79:68:f8:fa:
20:93:9c:47:a2:9b:50:4e:59:a7:8b:6e:4d:63:54:
e1:58:e4:46:c9:a3:ef:6e:4a:d3:78:29:b9:10:95:
f6:18:8e:d3:1c:f8:cf:24:d3:8e:a2:c4:03:ca:17:
8f:bf:57:f0:4d:d8:43:6a:65:23:de:a9:c8:70:ad:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:E6:77:E9:05:23:B1:11:5B:15:B0:4A:E7:21:34:97:5F:3C:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD7CC4D08D2D11EFACBB505C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:de:ba:3c:1e:18:6b:e1:c5:e9:13:b4:e0:61:ad:d8:f7:f5:
94:27:e8:a5:aa:e7:f7:f7:8c:dd:bd:db:14:8c:1c:54:c3:1e:
db:ae:c1:05:d8:22:81:e1:ca:5b:b1:82:db:bf:7c:db:33:a8:
b7:55:e9:82:d5:ce:49:cd:18:0e:84:d6:6d:8d:d4:d1:c3:8f:
9c:79:8c:c1:83:7c:61:06:b7:4d:2f:dd:4d:1f:b6:47:ee:1e:
8a:fe:c7:21:bc:51:46:51:d1:21:76:d0:0c:a7:ca:6d:56:aa:
e8:bd:28:2b:05:62:e6:20:82:ba:ca:dc:6a:cb:fd:4a:e4:3b:
32:ed:8b:1f:9b:5e:cd:52:5b:c5:fe:b4:88:4d:20:12:82:27:
c3:b3:74:a7:0d:03:94:9b:1e:f8:2c:1e:c8:0b:48:f8:67:b7:
81:e8:77:56:47:39:b3:18:81:2b:df:3d:f9:df:5f:d2:a4:fb:
49:af:4e:95:5a:ca:44:96:9a:72:80:ac:62:03:12:ad:fa:d6:
6c:43:71:b4:23:0b:73:81:79:1d:5d:35:42:ff:90:c9:95:fc:
94:d3:e0:aa:09:f0:9e:11:71:41:97:5f:a1:50:d1:00:e6:0e:
4f:e5:6a:79:2f:d1:0a:e9:57:9d:ba:72:9e:a2:a3:66:c9:d9:
ea:19:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:50 2024 by rpki-client on console-fra.rpki-client.org