Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC0D3EDA9F7A11EFB38B7CAE762E951A.roa
File: EC0D3EDA9F7A11EFB38B7CAE762E951A.roa (raw, json)
Hash identifier: jFDIOtAvfGbXVex6SFGhNDDzTFuSQMCKrD4+XGtBRQs=
Subject key identifier: 54:68:01:84:AF:A1:94:5A:AE:00:C7:FA:DE:45:B5:E5:79:FF:6E:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D0E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC0D3EDA9F7A11EFB38B7CAE762E951A.roa
Signing time: Sun 10 Nov 2024 15:46:17 +0000
ROA not before: Sun 10 Nov 2024 15:46:13 +0000
ROA not after: Thu 12 Dec 2024 15:46:13 +0000
asID: 398823
IP address blocks: 45.202.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53476 (0xd0e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 15:46:13 2024 GMT
Not After : Dec 12 15:46:13 2024 GMT
Subject: CN=6730d549-2916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:f9:2c:65:74:24:b6:78:78:1a:8e:88:d6:
4c:fa:01:1b:a4:de:d9:55:41:2f:63:42:b5:fc:7e:
ef:51:5d:4c:c9:c5:56:77:1d:bf:bc:9b:90:4e:96:
89:46:22:48:c8:72:2d:47:9c:3b:45:51:2d:6c:3b:
b5:0b:db:15:3e:8c:93:09:84:1c:02:f9:46:bc:ee:
35:39:35:49:69:01:89:fa:c5:38:06:7e:91:fd:07:
e8:0c:2e:bd:af:47:b9:7d:df:86:41:0a:02:47:a9:
d5:3a:f2:78:77:29:c9:92:dd:bf:69:c5:49:82:5c:
a6:a9:0b:66:16:12:58:fa:ab:94:2a:13:86:7b:75:
98:a7:71:18:3c:7d:cf:7b:a8:94:72:f8:51:9f:48:
66:5d:c6:eb:e9:6a:04:dc:f0:77:cf:c9:67:2f:cc:
dd:f2:a4:61:2a:8a:16:f0:2a:99:98:59:8f:5e:f6:
97:1b:c6:b1:d1:af:53:e0:17:5d:9d:58:e7:cd:af:
03:73:9a:c8:94:d8:47:b4:23:61:8b:cc:3a:0a:9e:
14:f4:83:79:fa:3a:fa:03:90:6a:83:b6:68:5b:bc:
27:34:99:d2:20:4f:4f:43:1b:1d:69:5f:e4:00:b4:
6d:51:20:b4:dd:79:13:4e:39:8b:7c:07:df:98:c7:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:68:01:84:AF:A1:94:5A:AE:00:C7:FA:DE:45:B5:E5:79:FF:6E:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC0D3EDA9F7A11EFB38B7CAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:03:ef:d6:0b:dd:bd:6b:54:a0:b8:89:f0:25:f8:eb:18:c7:
8c:d8:e2:3b:c7:23:ac:a1:ee:5f:24:42:aa:2c:a8:69:4b:4d:
1c:73:78:c1:f3:7b:c2:ea:cb:c5:90:09:47:7e:3b:ed:a5:ca:
d4:5c:70:e8:50:57:63:ec:0b:5f:a5:a1:e4:56:e9:53:c7:0f:
ea:a4:5e:94:1c:7f:55:2c:11:b2:fa:bf:40:15:88:14:53:bd:
cf:8d:66:72:40:23:f6:33:bc:1a:c4:38:97:6b:60:c1:67:b0:
56:da:94:8e:17:d7:19:40:73:d9:4c:63:07:b1:2a:61:de:f3:
83:b0:43:75:da:18:d4:0d:40:61:d6:1f:63:f7:1f:c9:52:19:
20:14:d4:41:88:b0:d4:fc:16:7f:0f:36:0d:8f:af:fa:6a:eb:
24:56:42:30:57:94:f1:d0:15:85:da:c3:20:e1:43:08:25:23:
a7:a9:fb:33:fa:4b:39:48:a3:c9:05:62:d9:76:33:23:4f:82:
30:0d:5c:6d:5b:f7:6f:66:0a:5e:3c:d9:4f:86:6e:50:6c:07:
8f:90:66:31:c2:23:05:42:26:72:ac:bb:45:4d:8a:3d:85:b0:
7b:10:c3:38:ea:2a:71:3b:97:5b:81:de:f6:74:a3:ec:48:06:
28:27:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:55 2024 by rpki-client on console-ams.rpki-client.org