Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5071282A73B11EF9B0BFEA1762E951A.roa
File: E5071282A73B11EF9B0BFEA1762E951A.roa (raw, json)
Hash identifier: OSPB1P+1if5adGTu3m+OYILUWT+ApUbb9bMKjMSA2SA=
Subject key identifier: 60:3A:C5:45:ED:25:AC:E8:44:ED:22:0B:04:23:82:0E:0C:65:6F:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D615
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5071282A73B11EF9B0BFEA1762E951A.roa
Signing time: Wed 20 Nov 2024 12:35:16 +0000
ROA not before: Wed 20 Nov 2024 12:35:12 +0000
ROA not after: Sat 30 Nov 2024 12:35:12 +0000
asID: 136950
IP address blocks: 45.204.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54805 (0xd615)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 12:35:12 2024 GMT
Not After : Nov 30 12:35:12 2024 GMT
Subject: CN=673dd784-3af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:fd:2c:e9:c7:7d:11:c1:ab:db:14:be:13:
1a:97:de:93:58:7e:61:82:48:d6:a5:6f:12:95:08:
02:53:c8:88:0d:7d:fe:63:4b:53:e8:85:45:b8:b4:
cb:38:0c:dc:16:9f:b0:88:9f:a7:51:84:c5:54:61:
e8:46:c0:7b:d3:85:da:f1:27:9c:96:1c:4a:b0:22:
86:67:75:5f:51:82:1b:9d:87:73:a5:fc:4e:7c:9e:
13:cd:80:bf:14:05:88:55:42:21:60:a1:ee:e7:8b:
07:3b:b5:49:6f:58:ff:09:7c:11:3b:40:8e:a7:1d:
8e:0a:df:e0:47:96:91:59:1f:60:f6:f1:b9:ad:23:
15:5d:32:d4:12:bd:df:24:9d:2b:f9:00:27:20:03:
8c:75:14:76:f1:68:c7:6e:9b:29:a5:d9:48:a8:29:
4c:9e:fe:13:c5:30:6e:df:18:44:e7:a2:63:bb:85:
69:30:69:b0:e9:11:be:0d:09:09:1b:34:20:bc:e9:
09:a6:33:4a:c3:45:52:0c:76:ba:5c:81:5f:44:1d:
d0:2b:1a:97:09:8e:e5:59:56:a9:86:2f:c4:63:6e:
96:cb:08:57:1c:c1:e9:e4:b3:9f:45:97:e0:a7:4a:
e2:e1:09:b4:71:1a:99:21:74:02:b5:b5:b1:06:63:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3A:C5:45:ED:25:AC:E8:44:ED:22:0B:04:23:82:0E:0C:65:6F:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5071282A73B11EF9B0BFEA1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.83.0/24
Signature Algorithm: sha256WithRSAEncryption
64:6a:e8:59:f9:cb:42:db:70:7a:f0:26:00:56:7c:8b:ef:3f:
75:44:77:ee:15:4b:65:91:3f:6a:3d:2a:dc:1e:d3:55:7b:36:
e0:d4:3b:cb:95:29:de:d3:3c:fa:05:6e:c2:25:8f:6c:a0:03:
cb:71:be:81:f0:d1:97:e0:e2:a1:d8:5c:eb:2b:f7:db:f6:a9:
a1:3e:c8:c3:0e:27:c7:c1:60:ba:4b:15:09:7f:aa:b7:fa:20:
0b:aa:94:80:95:d7:cc:c8:13:3b:b1:9d:48:bc:8c:5f:2a:9d:
1f:ae:dc:4e:35:f2:22:89:7f:42:f8:1e:71:8b:be:ee:32:16:
6e:90:3f:89:bd:fd:98:64:11:09:d6:be:7d:f5:57:6c:d2:bc:
9b:6b:54:64:cd:db:b0:fd:c4:a7:a8:a7:c3:fe:c2:a3:2c:92:
c0:50:04:9f:7b:6d:14:98:33:6a:49:f4:0b:17:19:2f:87:9f:
2d:8e:c2:c4:3a:62:e8:cd:4f:35:d9:54:74:86:bc:f1:8a:82:
5b:8a:c9:20:56:b3:fe:b4:c8:c6:c1:1a:2c:d0:08:6f:96:15:
c3:41:34:27:1a:1e:db:07:c4:ff:65:81:89:0e:63:6a:d5:72:
26:6c:99:9a:df:e8:ed:2c:90:9d:a4:25:a8:1b:a2:d0:68:54:
d3:66:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:54 2024 by rpki-client on console-ams.rpki-client.org