Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C26718726A11EF90DEC55E762E951A.roa
File: F9C26718726A11EF90DEC55E762E951A.roa (raw, json)
Hash identifier: n5rjXQNnluF3ijFKtzMoRykFZscH8t7cPw5Q0iUvs+4=
Subject key identifier: EF:BE:0D:9B:89:B4:C9:17:55:BB:C8:60:CE:FB:A3:A9:B4:73:D0:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B5AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C26718726A11EF90DEC55E762E951A.roa
Signing time: Sat 14 Sep 2024 07:28:45 +0000
ROA not before: Sat 14 Sep 2024 07:28:42 +0000
ROA not after: Fri 08 Aug 2025 07:28:42 +0000
asID: 133861
IP address blocks: 45.204.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46509 (0xb5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 07:28:42 2024 GMT
Not After : Aug 8 07:28:42 2025 GMT
Subject: CN=66e53b2d-ea70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:41:b1:89:96:89:57:d5:ca:09:b4:23:ab:
e7:c6:53:d7:df:56:51:7e:78:79:02:4e:a6:59:6f:
d1:73:16:cb:ef:e8:e0:0b:99:51:27:00:38:cc:da:
d3:ee:31:89:68:bf:f2:40:a0:2d:4a:5e:33:5a:d8:
d5:74:d9:0f:b9:02:2e:72:03:8c:96:4d:32:40:b0:
2d:c0:e3:62:35:f0:80:cb:e0:9a:e1:0c:b7:a6:0b:
60:10:36:df:fd:16:89:b5:9d:eb:a4:79:b1:86:85:
fd:db:03:48:8c:a2:4b:3a:90:30:05:87:ba:a6:c7:
19:81:5b:84:86:32:ed:e6:9f:4c:00:3a:da:64:93:
b5:55:74:80:e6:0a:e9:a3:7a:bc:d4:a6:0a:69:1f:
6c:e8:04:b5:40:fe:6b:78:00:eb:e3:62:bb:83:37:
2e:ad:0f:76:ea:ea:ce:85:42:1c:cf:ac:c0:a1:bd:
1c:6c:45:98:cf:9b:62:f8:28:a6:b1:20:44:03:ab:
a5:a8:a9:ac:c5:73:c4:4b:4c:9a:f5:1f:66:07:c7:
4f:23:b8:00:ff:55:15:ee:91:4f:45:bd:b7:25:6f:
f8:df:f6:b9:91:29:69:4e:1c:b8:2a:60:28:f1:08:
bb:75:cf:ee:30:10:8c:7f:4a:f6:c4:71:8f:0a:23:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BE:0D:9B:89:B4:C9:17:55:BB:C8:60:CE:FB:A3:A9:B4:73:D0:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C26718726A11EF90DEC55E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.2.0/23
Signature Algorithm: sha256WithRSAEncryption
96:bf:94:3a:b6:43:f1:5b:ce:05:79:f2:0e:49:97:8d:48:89:
4c:0c:da:e3:bb:e9:97:1b:e3:4d:c6:3b:51:b8:0a:73:ad:0d:
13:04:82:8d:a3:31:b1:4e:37:a7:bf:31:d1:bd:1e:e3:1c:55:
fa:90:8b:71:d4:79:2b:f3:b7:2c:da:e9:3a:06:95:d9:e9:a9:
8f:94:45:0b:e3:a7:21:73:6b:11:8b:bd:11:cb:1c:81:cf:74:
d9:54:68:a3:06:43:71:4b:81:fe:02:ef:ee:10:79:d5:00:36:
89:4e:a1:3a:47:ae:fe:47:9a:ae:e0:c1:33:a1:28:1f:46:47:
b7:c3:f0:32:5d:05:bd:8e:93:4e:b5:a3:90:17:55:39:1c:92:
13:42:a7:91:6c:6d:69:03:ac:60:ed:57:7a:37:02:db:a5:5a:
d4:c2:be:07:38:97:be:e6:93:35:4f:02:ba:db:75:a5:e5:3e:
e9:c8:70:5d:a0:8e:7d:63:48:bf:55:d8:1c:33:9d:45:0c:f0:
24:55:32:ea:e7:a9:3a:5f:60:4e:ba:1c:6a:d8:83:fc:b2:44:
4d:0f:43:7f:1f:31:e9:40:6c:d4:37:94:bd:bf:d5:ef:90:cd:
b4:21:6f:2d:98:41:51:d8:b0:19:ee:64:a8:29:3f:7c:10:85:
a4:2b:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:55 2024 by rpki-client on console-fra.rpki-client.org