Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED24894CA72511EF81E5E199762E951A.roa
File: ED24894CA72511EF81E5E199762E951A.roa (raw, json)
Hash identifier: L+EbdRh1bXUEcnL8Uo+VPi9MVjXG97vKdVdSkOe9rzc=
Subject key identifier: AF:A6:9D:2A:9D:AF:74:B8:1F:05:8C:07:D4:CB:B3:F7:CF:A9:AC:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED24894CA72511EF81E5E199762E951A.roa
Signing time: Wed 20 Nov 2024 09:58:01 +0000
ROA not before: Wed 20 Nov 2024 09:57:57 +0000
ROA not after: Mon 02 Dec 2024 09:57:57 +0000
asID: 39600
IP address blocks: 45.204.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54749 (0xd5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 09:57:57 2024 GMT
Not After : Dec 2 09:57:57 2024 GMT
Subject: CN=673db2a8-27b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:8e:a4:90:3b:e8:f7:95:65:a2:05:da:e0:
c8:79:2a:97:74:9b:b0:2b:35:b6:f0:0e:e7:15:c9:
62:e5:55:c2:67:4e:e4:5a:07:a0:65:e9:9b:76:10:
2b:aa:32:d1:1e:3e:b3:93:42:e4:c5:92:9a:1d:af:
c4:b0:13:b7:43:29:01:a7:de:3f:3f:e7:15:28:43:
48:96:50:99:38:8e:69:43:1e:5b:13:4b:c1:9f:14:
7d:7e:fe:93:7e:3b:21:07:79:44:b3:0a:11:cc:39:
6e:2a:b1:03:c4:68:45:1b:07:bd:63:3a:d8:0d:af:
45:b0:16:0c:b1:de:92:90:de:d5:51:3e:36:e8:56:
e6:d3:7b:32:66:28:99:3a:11:19:53:69:1f:bc:39:
7a:a4:c3:e9:f8:a5:61:25:14:f2:a8:2f:ce:a5:68:
6f:4e:e5:40:d5:78:15:ff:12:1b:82:98:f4:a7:1f:
cf:f6:8b:48:13:6e:68:5c:e2:15:02:ab:6d:ff:b6:
ca:93:7d:d7:ca:87:cc:6c:a7:2c:15:f6:01:41:0c:
d9:cc:81:28:7f:bc:26:4a:19:d4:f0:a3:3b:81:09:
34:98:a8:dd:38:33:0b:5a:1e:87:ff:0b:22:25:23:
17:98:c1:7e:e5:84:d8:70:c1:b7:dc:a8:b2:50:8b:
bc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A6:9D:2A:9D:AF:74:B8:1F:05:8C:07:D4:CB:B3:F7:CF:A9:AC:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED24894CA72511EF81E5E199762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.26.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:70:2d:c7:74:ae:bb:8f:86:fe:40:88:08:e9:9e:0a:98:11:
8c:83:ad:86:a5:8d:86:a4:bb:8a:f2:f8:ee:7f:84:54:2a:af:
57:df:0b:e0:51:74:fd:ef:f0:31:c2:8a:29:de:99:3c:32:35:
6d:c6:f5:d8:0f:d6:e2:a4:ed:dd:2a:39:3c:e9:79:2b:79:8e:
d2:38:78:d4:e0:9b:c5:51:43:ec:63:04:56:c2:5e:44:68:7f:
e2:1c:c3:1c:19:1f:c2:a0:4e:f2:a4:35:ce:bc:d0:96:5e:e0:
fd:cd:31:cc:15:4c:9f:cf:77:72:58:48:4e:6e:dc:76:b2:20:
08:66:a7:9c:07:55:5e:be:bd:1c:39:5d:1e:b8:d3:a8:c9:fd:
7e:90:6a:79:c1:ad:1b:df:3f:6c:dd:72:55:02:99:5e:ec:f9:
0d:d4:00:61:6a:f6:b1:73:ca:ec:9f:e2:79:7f:0d:55:51:57:
2c:93:a3:39:ec:0a:97:b1:3a:84:1a:63:87:60:6a:56:2a:ef:
5f:48:dd:fe:c6:a9:63:86:01:40:b5:75:29:80:fb:42:83:3b:
bf:15:8c:07:d9:15:97:bb:86:39:7f:1f:e2:68:d9:73:05:b1:
3e:e8:20:55:ca:63:5d:47:31:8c:39:6f:b6:94:5b:60:42:0a:
a7:bd:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org