Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F57B831E9B5B11EF8C2497BE762E951A.roa
File: F57B831E9B5B11EF8C2497BE762E951A.roa (raw, json)
Hash identifier: XYMRfc8garlrLwbaXKQZ6IqRrGBwnUST6b2IkvhI3n8=
Subject key identifier: 39:40:38:38:2B:FA:3B:8D:E5:13:0E:1A:39:C2:0D:15:43:ED:D9:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CE51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F57B831E9B5B11EF8C2497BE762E951A.roa
Signing time: Tue 05 Nov 2024 09:54:33 +0000
ROA not before: Tue 05 Nov 2024 09:54:30 +0000
ROA not after: Mon 13 Jan 2025 09:54:30 +0000
asID: 7018
IP address blocks: 45.202.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52817 (0xce51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 5 09:54:30 2024 GMT
Not After : Jan 13 09:54:30 2025 GMT
Subject: CN=6729eb59-9b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:e3:79:a6:ec:67:8d:2a:8d:49:97:d1:e7:
ae:36:0c:14:cf:f6:8d:36:a5:d9:76:b9:46:7c:63:
74:6d:6f:b9:17:a6:ab:f3:e0:cf:74:3b:7e:4b:20:
30:9d:74:46:9c:88:b0:08:a2:11:45:1f:30:b2:6c:
a1:fb:cf:7f:1f:f6:81:9a:20:41:ac:0a:a0:06:91:
f3:2f:8f:7c:85:29:3f:1e:5f:d6:50:43:84:d9:56:
06:a2:0f:4e:7c:46:d9:dd:bb:c5:e5:93:12:fe:46:
c1:19:16:42:42:7f:4c:3c:01:ef:ed:14:f2:d7:69:
ab:54:bc:ae:19:84:75:51:d7:68:7b:b0:44:c7:de:
38:67:12:26:9b:26:60:83:e3:46:3e:48:45:9e:8e:
f1:f9:13:a4:b1:d1:8b:2d:68:68:bd:af:bd:64:1b:
56:cd:08:e5:36:11:38:d5:98:f3:3e:45:ff:4d:b1:
33:53:eb:d2:46:db:b0:13:ea:cb:2b:c8:6d:f3:c4:
4a:b6:0f:32:85:c5:b5:47:92:f9:2e:66:6a:6d:22:
0e:60:00:97:42:c5:13:b1:53:7f:e6:f7:75:ef:db:
cc:f3:3a:c0:78:5a:77:27:a8:a7:79:0e:98:13:55:
d2:a1:c3:ba:51:33:76:5c:dc:a4:69:f9:c9:e4:dd:
da:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:40:38:38:2B:FA:3B:8D:E5:13:0E:1A:39:C2:0D:15:43:ED:D9:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F57B831E9B5B11EF8C2497BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:f7:b1:60:c8:7e:3a:89:78:f8:2d:5c:e1:a7:81:07:66:db:
9d:cb:ff:3b:4f:bb:8a:24:8c:6d:b2:dc:12:f1:37:a7:c5:95:
32:4e:05:46:e0:18:d3:eb:2f:ee:49:c2:9a:47:8c:73:71:44:
d0:3f:31:07:19:c4:cc:e2:f3:5f:0b:fc:c8:21:2c:58:0e:a4:
a6:ae:f5:55:4b:37:10:d0:73:d8:1c:ed:6d:fd:93:ca:b7:34:
86:8b:13:09:94:a1:5b:6e:74:2c:76:ca:ad:3b:04:ec:21:2a:
f5:90:fc:de:7c:05:17:40:1e:8b:58:7b:30:e5:03:95:dd:a1:
ae:1d:73:92:28:58:c3:35:34:12:9c:ca:b3:91:b1:a9:5a:1e:
d3:05:e7:e4:47:bb:11:27:15:6f:ef:a3:8f:1a:94:01:0c:01:
91:ed:6b:6e:c0:f6:3b:64:32:92:51:1a:93:aa:de:c1:a7:b2:
88:22:00:15:73:11:83:fe:1f:8f:61:e1:8d:ab:4d:e6:70:ff:
f5:16:12:ef:d8:4e:e7:11:60:74:c5:96:62:ac:85:29:39:87:
d2:04:d2:8c:22:bb:1b:0d:7b:0b:61:12:b0:a8:b5:bc:5f:b2:
4f:c0:5b:e2:7c:2a:14:27:0e:1a:13:41:4d:9d:05:55:08:eb:
a0:05:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:57 2024 by rpki-client on console-ams.rpki-client.org