Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFCA15289AAE11EF9C6C0679762E951A.roa
File: EFCA15289AAE11EF9C6C0679762E951A.roa (raw, json)
Hash identifier: sFdxXtiZ6FHDIummDe7oiv9BwgUdp7yX9cE1MhMo+N4=
Subject key identifier: 9C:48:C4:6D:DF:73:D5:7E:D2:EE:BB:5D:93:7E:2B:EC:61:40:AC:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFCA15289AAE11EF9C6C0679762E951A.roa
Signing time: Mon 04 Nov 2024 13:16:01 +0000
ROA not before: Mon 04 Nov 2024 13:15:57 +0000
ROA not after: Tue 03 Dec 2024 13:15:57 +0000
asID: 139646
IP address blocks: 45.200.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52658 (0xcdb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:15:57 2024 GMT
Not After : Dec 3 13:15:57 2024 GMT
Subject: CN=6728c911-726d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:23:6a:a2:41:a7:a6:11:92:17:be:50:b8:
de:16:96:6e:ef:89:3f:a6:43:c5:52:91:85:e9:1f:
a9:36:9f:75:99:7a:c1:2e:ef:dc:c9:79:d3:98:06:
9e:84:22:92:db:91:0c:2a:b3:57:f1:6f:0e:36:b5:
e9:ce:7d:f9:00:61:5a:58:0b:2c:f6:3f:4a:7c:fb:
c2:07:38:75:74:0c:4f:2c:fc:05:83:ae:0a:63:cb:
c9:ea:c5:7f:da:d6:de:c6:94:7b:93:0b:27:cb:a8:
fc:cb:91:5d:08:c8:fe:50:3e:37:51:28:52:6e:c5:
ac:ad:0a:c7:82:0d:ea:20:88:0c:08:cd:43:11:8c:
98:2b:3b:af:59:ee:3d:81:c7:e9:e5:44:f6:46:e4:
3c:28:b2:cf:ea:4d:52:77:6b:0c:5b:a6:c7:ae:0f:
5f:0a:d4:81:8b:42:4e:5c:60:85:bd:1e:74:4d:60:
e7:d8:f4:f2:3f:f0:ec:3b:7d:43:e4:3a:2b:03:f6:
d0:a4:d5:a2:3d:b8:89:74:0d:41:34:6d:50:a7:a2:
8e:ed:7f:08:95:82:d7:be:e5:68:13:a9:9b:75:97:
b5:c8:c9:d2:b1:2c:b4:6a:50:1b:fd:ba:81:59:91:
d3:ca:6c:ec:14:d0:79:ad:db:31:26:cb:c0:61:47:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:48:C4:6D:DF:73:D5:7E:D2:EE:BB:5D:93:7E:2B:EC:61:40:AC:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFCA15289AAE11EF9C6C0679762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.16.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:b8:01:f5:8f:2f:23:66:a5:fb:c3:06:ac:4a:77:bd:08:38:
1c:a7:d3:8c:02:16:2f:12:3a:86:37:ed:8b:f0:85:4b:51:3b:
1b:db:d2:c5:62:98:54:90:54:78:9d:22:a6:dd:19:16:17:9f:
0f:a3:bd:e4:9b:d0:a7:22:e2:03:23:ea:cd:d6:02:33:11:7b:
d3:ef:2c:41:9d:49:03:8b:f8:18:d8:f8:88:69:82:dc:df:92:
48:44:a4:8b:0a:2e:21:55:07:f9:72:40:fc:66:3a:c3:d7:37:
0e:d6:e0:a2:10:d8:ee:a8:1e:dc:74:0b:34:a7:b3:0d:3e:1c:
d6:60:78:a9:bf:af:39:31:5c:a8:d8:c0:3f:d9:23:71:6f:bf:
1c:b0:b9:a0:45:69:15:9d:ed:39:f0:f5:88:6c:b3:89:bf:f0:
dc:d4:5d:0e:ed:12:a1:88:21:d7:d5:90:bf:df:d7:93:6f:58:
fb:8b:0a:f1:eb:17:9b:80:49:45:34:d8:52:a3:f0:4d:ff:41:
b5:4e:90:8f:c4:b0:b2:14:d6:3f:d1:2d:17:76:02:da:57:35:
73:37:47:b9:03:d6:96:ae:c9:d2:a7:39:a6:e0:ef:e5:b7:ad:
54:7a:e1:bc:80:8e:5e:01:12:5c:2c:bb:f4:c1:b2:de:b3:35:
21:a7:d7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org