Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F38C7498A0D611EF964725BE762E951A.roa
File: F38C7498A0D611EF964725BE762E951A.roa (raw, json)
Hash identifier: X9UiXjHsV/VVaPAJXhTeD+EleAXCdGqsoeZBQEFvW2M=
Subject key identifier: E5:13:10:78:AC:B4:3D:5E:EE:1C:A0:1A:51:C6:F3:CD:D4:BF:B2:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D185
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F38C7498A0D611EF964725BE762E951A.roa
Signing time: Tue 12 Nov 2024 09:17:34 +0000
ROA not before: Tue 12 Nov 2024 09:17:30 +0000
ROA not after: Wed 18 Dec 2024 09:17:30 +0000
asID: 141159
IP address blocks: 45.205.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53637 (0xd185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 09:17:30 2024 GMT
Not After : Dec 18 09:17:30 2024 GMT
Subject: CN=67331d2e-913a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:9b:6e:b5:dd:2f:b9:b0:3a:67:e4:10:de:
b9:9d:60:a2:bb:4e:42:ce:94:3a:91:59:cf:72:a1:
97:02:bc:8e:d8:ae:18:cc:69:f6:a8:51:09:79:71:
8f:d7:89:4c:17:9b:4c:ab:98:a0:88:2c:44:0d:2b:
4d:0b:70:8f:ce:4b:3c:c7:d1:1f:93:2f:90:7d:33:
6e:c4:87:82:20:27:ab:77:e7:f6:fc:62:ad:cc:79:
27:de:26:a2:6d:05:d1:a8:4e:46:57:c9:07:37:31:
cf:6a:17:75:1f:9b:a1:44:e3:e4:a7:2b:40:65:e1:
dd:02:d6:7b:06:8f:6c:c5:66:50:54:54:2b:95:51:
96:17:4a:1c:d9:8f:dc:f3:b7:a3:71:e4:38:16:95:
51:8f:88:dc:d2:0b:05:af:36:ad:09:56:19:f6:18:
3e:df:4e:63:87:d4:a4:d5:20:91:52:27:69:f0:c8:
e3:1a:3a:37:bc:f1:50:d9:14:b6:9c:03:fd:7a:5b:
83:9d:fe:90:d3:53:24:ea:6c:e6:9d:39:59:37:21:
10:ed:ce:7b:7a:f4:5f:87:fb:ee:f5:5a:18:e5:73:
26:d2:6c:4d:c4:18:3d:d7:99:d2:0e:c8:4c:bb:a0:
6c:14:6d:57:6b:ec:fc:1d:81:90:f6:02:68:20:7f:
cb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:10:78:AC:B4:3D:5E:EE:1C:A0:1A:51:C6:F3:CD:D4:BF:B2:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F38C7498A0D611EF964725BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:d7:94:8d:74:c0:87:c5:94:61:74:01:ac:66:29:aa:d6:b4:
4f:e5:e1:e0:ae:66:f8:76:9a:39:8f:68:4d:72:cd:a7:c4:d5:
a2:24:11:e9:7a:89:da:f7:fd:71:94:4a:21:93:13:17:7b:d3:
36:61:e2:63:20:8a:37:a7:ac:8b:79:0e:fb:4d:12:5e:59:47:
31:f2:8d:f7:78:dd:09:b0:9a:e0:57:e4:14:fe:a8:ac:44:7f:
dc:90:17:ab:fa:6b:c0:06:e7:1c:49:93:e1:56:45:61:fd:74:
db:0a:01:17:4d:16:f0:38:5f:40:64:90:21:51:06:60:1f:f4:
00:8b:0c:85:d9:c2:49:87:ad:aa:8d:34:7b:ce:50:d3:0d:2f:
1d:59:64:4a:88:6f:51:3f:f8:cf:16:eb:2e:ed:93:e3:1f:95:
76:55:84:b5:8b:2c:ab:f0:37:cb:d0:c0:f4:eb:a0:f6:c6:0c:
a2:db:37:07:5f:cf:fe:35:e2:a8:53:3b:2f:b6:96:f1:d3:c7:
e2:23:9e:f4:b4:d0:f7:1f:81:dd:6d:d6:a9:d0:77:e7:2b:fb:
4c:78:1c:b5:cb:e7:ed:07:68:ad:b7:96:1a:14:25:b1:fd:b8:
62:4e:47:44:97:56:d2:ad:ec:ea:67:c8:e4:da:a9:3a:ca:96:
e9:9d:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:54 2024 by rpki-client on console-fra.rpki-client.org