Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F566A366A72411EF84D9BA93762E951A.roa
File: F566A366A72411EF84D9BA93762E951A.roa (raw, json)
Hash identifier: 7BrF0iZndKzv72optSnU7EOmNsIZ+wpe1I7CkyvTKD0=
Subject key identifier: C7:E3:C7:56:89:B2:41:8E:69:03:1C:73:65:E2:4C:B8:67:28:70:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F566A366A72411EF84D9BA93762E951A.roa
Signing time: Wed 20 Nov 2024 09:51:05 +0000
ROA not before: Wed 20 Nov 2024 09:51:01 +0000
ROA not after: Mon 02 Dec 2024 09:51:01 +0000
asID: 39600
IP address blocks: 45.204.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54741 (0xd5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 09:51:01 2024 GMT
Not After : Dec 2 09:51:01 2024 GMT
Subject: CN=673db109-a38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:5b:e1:17:aa:68:76:7c:e8:cd:7f:07:5d:
98:69:66:55:f7:85:b8:9e:f8:01:9d:da:28:42:fc:
d6:33:33:92:2a:ab:ae:4d:37:5b:98:b2:b0:ad:66:
44:66:37:15:66:b9:b0:ca:b9:a1:be:05:27:1d:d9:
f6:ca:74:f7:a1:84:90:41:02:8e:f8:4e:29:01:d8:
51:f4:d4:dd:24:7c:2d:e3:1e:52:58:d7:9d:7e:96:
fe:94:a9:c0:f7:02:f9:c5:6d:19:12:3b:89:4c:49:
16:51:7e:49:67:2d:12:42:6b:ef:e6:1f:6d:86:63:
a4:7c:ff:a7:10:ed:09:87:1d:c6:13:64:28:ce:31:
66:11:dc:94:a9:72:f7:88:8e:3b:75:0e:eb:10:6f:
a1:ba:c1:b2:1b:6b:0a:90:ab:c4:26:b9:af:4c:33:
e1:15:64:49:15:5e:58:c0:0e:85:05:1f:50:51:c7:
49:b9:0a:8c:86:bf:8b:78:2d:e5:fb:ef:f2:b2:af:
39:b0:4b:2f:f3:7e:95:14:e2:f7:f7:52:1d:0b:c8:
8a:04:bb:89:d9:7d:3a:52:63:01:a9:05:6c:39:39:
44:c5:af:d0:18:bf:7a:cc:ec:ab:eb:6b:b1:9e:3f:
6c:68:47:6e:e2:3d:c0:ae:3f:02:02:8d:ef:31:9c:
57:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:C7:56:89:B2:41:8E:69:03:1C:73:65:E2:4C:B8:67:28:70:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F566A366A72411EF84D9BA93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.72.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:52:52:73:97:11:20:47:a7:61:32:35:a9:49:4a:fd:c3:35:
e6:bf:b7:6e:9d:0c:b2:a5:32:47:79:08:82:b6:db:52:49:e4:
49:f5:36:0a:9a:0b:68:b9:eb:13:3e:fd:be:16:0c:46:a5:b8:
c1:cf:f0:41:4a:dc:b7:54:e3:49:d8:57:b1:75:a0:e2:c3:df:
f1:fe:42:b3:2a:da:d8:cf:cc:5b:d2:7f:4f:83:98:36:4d:ae:
27:2e:93:a4:f3:8d:af:cd:7f:7d:b8:ae:64:07:66:e6:28:6e:
4d:50:1f:14:44:66:34:8d:04:14:5e:32:8b:5f:b2:3a:49:e6:
a1:4c:04:57:34:82:fc:01:60:7d:1b:d2:9c:89:ae:af:e1:2c:
8c:18:1c:32:9b:8c:f1:6e:7b:17:9e:df:9f:e5:60:20:eb:80:
8b:38:a1:40:4d:d0:3e:21:fd:bc:de:c4:97:24:6f:6d:24:ff:
62:8e:b9:fb:ff:0b:95:19:c1:c9:ec:ae:c7:07:89:6b:3a:90:
8f:85:4b:17:54:f9:e1:62:b0:bd:4d:a2:67:e9:54:50:e1:fa:
69:b6:85:fb:46:cf:ba:66:b6:19:39:ec:35:2b:93:0a:d4:40:
48:b9:fe:7b:f1:dd:b1:51:4c:ec:0d:4f:75:94:a9:03:db:e7:
03:e3:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:54 2024 by rpki-client on console-fra.rpki-client.org