Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFB5B36AA64A11EF917E3ABC762E951A.roa
File: EFB5B36AA64A11EF917E3ABC762E951A.roa (raw, json)
Hash identifier: M74Dix7HfcGC3RnPqeF/E8Tpkz72B9MYEeeKr+TxfpI=
Subject key identifier: 07:47:29:CC:B5:FB:D3:CD:49:58:94:3C:25:08:97:77:9B:BE:2F:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D560
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFB5B36AA64A11EF917E3ABC762E951A.roa
Signing time: Tue 19 Nov 2024 07:50:25 +0000
ROA not before: Tue 19 Nov 2024 07:50:21 +0000
ROA not after: Sat 21 Dec 2024 07:50:21 +0000
asID: 25160
IP address blocks: 45.201.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54624 (0xd560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 07:50:21 2024 GMT
Not After : Dec 21 07:50:21 2024 GMT
Subject: CN=673c4341-19c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:03:68:77:ab:70:36:9a:da:a1:91:41:57:
c5:22:25:50:04:5e:ad:01:22:e0:0b:6c:af:14:2c:
a5:22:2c:46:4a:12:d6:bc:3d:af:c1:7b:da:d6:6a:
6b:1d:35:a1:fd:c0:49:37:d1:f0:eb:b4:68:79:be:
7e:77:a1:9b:01:13:b1:2c:ca:20:5d:90:52:02:74:
ba:78:ae:6a:89:11:d2:e3:68:0c:b1:34:f3:df:47:
2a:9a:5c:cf:9f:26:fa:14:2a:6c:20:80:6d:ca:a8:
85:70:94:f8:85:26:4c:59:e5:14:3a:a2:48:77:f6:
b6:d4:b8:1e:35:75:f4:7e:cb:c7:bd:7c:e4:bf:7c:
bd:4f:9a:0a:95:57:0f:1d:ac:18:99:fe:09:f9:73:
01:35:59:71:e8:81:bd:b8:47:fd:70:3f:a7:2a:05:
c4:dd:e9:4b:1b:f9:d2:be:b4:fc:cb:b8:6d:21:ec:
0d:01:1d:b4:dc:a5:6f:ea:9f:67:8e:8a:d5:bd:3d:
f6:d7:0d:bc:c3:fb:8b:c4:f0:89:99:94:a2:7a:01:
20:9b:ef:8a:d0:a0:ea:c0:2b:4d:5d:a2:6d:d4:26:
7f:ee:4a:45:26:ed:dd:7c:ac:eb:58:3f:81:a2:c3:
46:c1:ed:d8:a2:af:0f:24:e5:5a:9a:66:a0:84:fd:
0d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:29:CC:B5:FB:D3:CD:49:58:94:3C:25:08:97:77:9B:BE:2F:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFB5B36AA64A11EF917E3ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
35:62:ff:1e:d7:86:03:89:dd:de:88:ad:b6:3b:bf:f9:2c:6b:
b5:d1:52:82:a5:9c:ad:f2:eb:c4:2d:42:5a:56:69:c1:5e:a9:
83:1e:dd:cc:6b:cc:fe:7c:b9:f4:47:f0:67:6a:ab:10:63:17:
1a:ef:d8:dd:8b:d5:f4:e7:6c:54:73:b9:79:77:d3:e3:c8:53:
dc:10:f3:4e:e1:9a:c8:96:df:dd:46:eb:01:d3:df:de:0e:1c:
ab:21:c4:bc:01:85:9f:7d:31:f7:74:4a:9d:c5:2b:59:2c:ea:
3b:3b:79:dd:ea:f0:9a:78:17:1d:3e:9e:24:2a:10:66:f3:1a:
ee:8c:43:8d:f7:03:00:94:1d:bb:56:fb:69:e5:0e:c0:2b:b3:
19:dc:ed:bf:14:38:93:60:83:44:1d:4b:53:75:b9:52:7f:c9:
df:b0:76:39:af:7c:1f:0a:43:08:c2:68:0b:e2:ea:fa:04:ad:
29:b1:8f:be:81:04:4f:94:8f:c1:90:a4:8d:11:d7:87:6c:71:
d1:6e:55:e8:8f:49:8e:8a:49:ad:a8:cd:8a:78:25:9b:6b:c0:
e1:04:c6:42:09:d7:10:04:4e:1f:e4:a3:6a:68:a4:a1:38:3f:
5d:39:2b:7c:d5:8d:18:6c:7c:35:b1:d7:89:5c:8d:86:c2:73:
03:ef:c2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:56 2024 by rpki-client on console-ams.rpki-client.org