Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6AD9C507E3B11EFA0557AA3762E951A.roa
File: F6AD9C507E3B11EFA0557AA3762E951A.roa (raw, json)
Hash identifier: i71Yuw80nO4gr6uy+Y/xLOK4Zyv0pcoeXLGMsX4yTUE=
Subject key identifier: 7E:77:78:4B:4A:5C:08:BE:C5:31:83:19:93:3A:9A:C3:96:5F:19:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6AD9C507E3B11EFA0557AA3762E951A.roa
Signing time: Sun 29 Sep 2024 08:22:28 +0000
ROA not before: Sun 29 Sep 2024 08:22:24 +0000
ROA not after: Mon 30 Dec 2024 08:22:24 +0000
asID: 17561
IP address blocks: 45.201.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48233 (0xbc69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:22:24 2024 GMT
Not After : Dec 30 08:22:24 2024 GMT
Subject: CN=66f90e44-d35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:62:d1:b0:2f:93:0e:b1:2e:17:4c:af:4c:
0d:3c:de:9b:a7:ee:a0:0a:d2:2e:07:d4:24:ac:b4:
00:a0:4d:be:e1:35:11:85:49:7f:a2:aa:c2:9b:b3:
c7:75:fd:f8:50:19:5d:44:65:31:5a:3c:6b:5f:03:
9d:3f:6b:06:68:bc:b5:4e:44:2c:49:98:09:69:60:
28:78:82:ff:ce:3a:c3:f7:ae:f8:b8:e4:b1:63:54:
a6:ed:6f:4c:d6:a0:22:6f:dd:95:d9:a4:8d:6e:67:
32:35:c4:8c:77:6e:07:30:a7:a5:42:9a:32:5d:cc:
43:74:e5:04:6a:17:82:d1:9e:b4:89:7a:7b:6f:00:
f7:56:ce:46:7e:a6:87:a0:d2:96:93:67:f2:73:cf:
94:0c:fe:97:69:59:6d:a5:8e:7b:3b:1e:d1:14:93:
3d:fd:69:b9:b7:7f:44:37:63:9a:22:08:80:af:7d:
65:9d:af:b3:62:89:3f:0e:d0:97:8c:c9:1d:0d:27:
5c:1b:09:65:5c:71:0e:16:a7:e0:6a:c8:fa:52:93:
f7:ee:0b:f8:56:8e:8a:90:4b:de:2d:e3:ab:4f:01:
d6:a9:3f:73:2a:51:12:61:7f:44:3f:2a:37:36:09:
a3:08:b4:8b:e0:3e:db:fd:60:d0:c4:16:69:03:5f:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:77:78:4B:4A:5C:08:BE:C5:31:83:19:93:3A:9A:C3:96:5F:19:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6AD9C507E3B11EFA0557AA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.237.0/24
Signature Algorithm: sha256WithRSAEncryption
60:86:ea:76:18:b3:40:9d:58:1b:ca:c1:4e:2b:99:08:90:6b:
37:e4:77:3e:7f:2b:1e:d6:d7:77:85:c6:9f:bd:0b:c7:9a:71:
c8:13:f2:f1:88:96:95:a5:4e:9a:1b:0d:7a:e1:10:39:cb:6f:
81:a3:c9:ee:9e:a0:e8:8e:14:36:bb:8d:64:32:99:ef:c5:0b:
de:bc:79:6c:1e:93:c9:43:4c:06:93:90:92:94:56:18:8e:65:
3a:a3:6e:38:c8:2c:7b:eb:7d:71:ab:36:96:10:3a:8a:17:e8:
2d:56:56:88:c8:95:96:43:7b:34:a8:e2:b3:bd:1b:7c:ff:3c:
c7:11:c9:ca:85:6f:80:e2:6b:d3:dc:25:ce:3e:ed:38:70:76:
ee:66:ee:9a:7c:a9:71:4e:24:c0:4c:a8:a1:52:77:3e:16:da:
4e:a8:83:b7:ba:d3:c1:86:8d:2f:ea:9b:3b:29:ac:92:0c:a5:
0f:9c:79:9e:48:17:4c:d1:b3:ba:18:19:dc:25:92:7e:6a:93:
3e:99:41:4a:66:1f:2f:49:d5:36:95:5b:d3:b4:02:89:1d:86:
43:a2:77:fb:32:c1:27:f0:ee:f3:ec:9b:fd:e8:05:b5:ad:52:
1c:03:bd:56:34:c3:6e:e9:b5:81:01:d5:80:cb:bc:76:31:05:
2c:fe:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:57 2024 by rpki-client on console-ams.rpki-client.org