Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01EB0AAA32E11EFBEB41EB7762E951A.roa
File: F01EB0AAA32E11EFBEB41EB7762E951A.roa (raw, json)
Hash identifier: kY8BkKfV6QHG3XfqHaTJS/cQf7/GmaOp6J7hq9Fe+5U=
Subject key identifier: EA:78:5E:C8:87:DE:81:EF:3C:E0:D8:7B:6F:C4:DA:9C:99:A2:FF:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01EB0AAA32E11EFBEB41EB7762E951A.roa
Signing time: Fri 15 Nov 2024 08:52:27 +0000
ROA not before: Fri 15 Nov 2024 08:52:23 +0000
ROA not after: Sat 21 Dec 2024 08:52:23 +0000
asID: 140869
IP address blocks: 45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53991 (0xd2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 08:52:23 2024 GMT
Not After : Dec 21 08:52:23 2024 GMT
Subject: CN=67370bca-789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:14:2c:26:d7:cd:45:a7:cd:37:49:e3:eb:
e4:45:b4:9a:42:33:a5:c8:c0:69:b3:f1:71:08:4f:
dd:e4:61:fe:11:d4:b1:b9:78:52:f1:58:e1:83:97:
dd:47:b4:e6:9a:3a:82:89:86:69:f2:5d:46:64:ee:
bb:52:a1:54:5b:16:2c:5c:74:a0:a9:15:4b:9f:5a:
5d:79:47:24:66:36:32:54:11:a7:14:ee:a0:db:61:
f3:00:34:b4:b3:40:76:5b:3b:58:5e:d1:67:e8:95:
c6:fb:a6:0e:a4:d2:de:74:33:a9:f5:a9:cd:9f:f5:
f5:1d:da:6e:90:43:68:31:41:f9:86:71:c1:ac:ae:
72:02:e7:42:58:e4:82:02:00:eb:40:3d:ce:3a:a3:
9e:c9:66:a8:15:81:c7:5f:f9:33:2a:c7:b8:45:ca:
fe:c7:f1:4e:35:c8:42:69:d0:7a:e2:d4:28:dc:49:
1c:de:22:ec:d8:c5:b7:05:86:7c:88:fb:48:d8:98:
b9:fa:ea:45:69:27:f1:fc:31:39:5f:57:43:1e:24:
93:11:f7:54:bf:d8:9f:c9:b1:93:3d:dd:f4:63:b6:
af:08:3e:3e:66:e4:ec:a3:7e:99:81:b6:84:d1:40:
e2:84:7c:01:57:a0:2c:93:9e:bf:9e:8e:52:94:b5:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:78:5E:C8:87:DE:81:EF:3C:E0:D8:7B:6F:C4:DA:9C:99:A2:FF:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F01EB0AAA32E11EFBEB41EB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.220.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cf:ce:8b:0a:77:53:26:df:e7:92:34:ba:cc:ce:3e:28:02:
47:81:b5:39:ff:8c:3f:f4:88:69:56:40:db:67:fc:1d:3b:50:
ca:2c:41:4a:65:57:b7:3c:71:bd:42:41:6c:f0:8f:7f:bd:9a:
94:45:e8:15:a4:4d:b9:30:5d:a3:d0:d1:f7:11:45:fe:63:e7:
3c:21:15:3d:bb:9d:45:7d:a1:b6:5d:ec:13:f2:9b:f7:8b:48:
f7:05:8f:01:57:5a:83:31:c4:81:f5:a9:01:6e:7e:f8:ee:69:
74:7f:b8:3d:e6:89:99:8f:57:6d:bd:78:51:94:6b:c1:ce:48:
a9:b1:29:3b:bd:56:19:15:af:21:72:0e:c4:84:73:01:14:92:
19:e6:ab:ba:c1:30:87:a3:45:70:00:16:97:13:67:7b:23:be:
5f:97:c8:c3:7b:0d:c7:f6:e5:8e:f6:27:4a:d8:5c:12:11:a4:
64:6b:a2:ac:d5:a5:da:ba:93:1e:09:3d:91:af:91:0b:b5:65:
c4:b7:41:eb:79:4f:fc:c3:4f:14:5d:d0:08:b8:07:75:9d:24:
80:e2:74:84:a4:46:f9:20:c9:f6:ad:dc:7d:13:17:5f:9e:45:
7c:d3:f7:61:94:09:2d:b1:85:e3:53:1d:f5:3a:fd:bf:2c:71:
02:93:54:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org