Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/FC15DD3C783811EF9979F0BE762E951A.roa
File: FC15DD3C783811EF9979F0BE762E951A.roa (raw, json)
Hash identifier: MW47slV99G/yGTe9SKd2CHFA6+RVEIQxNsNq9ck50UI=
Subject key identifier: 82:12:31:EB:88:73:FD:17:88:CD:85:D9:8A:5A:51:55:35:5B:CB:0A
Certificate issuer: /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial: 15
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority info access: rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/FC15DD3C783811EF9979F0BE762E951A.roa
Signing time: Sat 21 Sep 2024 16:46:02 +0000
ROA not before: Sat 21 Sep 2024 16:45:58 +0000
ROA not after: Wed 26 Sep 2029 16:45:58 +0000
asID: 55933
IP address blocks: 45.221.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Validity
Not Before: Sep 21 16:45:58 2024 GMT
Not After : Sep 26 16:45:58 2029 GMT
Subject: CN=66eef849-8e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:01:0d:84:40:af:17:2f:ac:f9:0f:ac:3f:
d9:cf:7c:5d:77:c8:4d:a1:be:4a:5e:92:6b:f7:a1:
0c:0c:f9:ae:70:46:d6:0a:6a:f6:14:85:46:bc:e8:
9d:32:b1:db:0d:04:ab:60:50:c8:83:b9:93:fd:05:
95:ea:f7:90:1a:20:c1:2c:c5:1a:15:3a:2e:8d:9e:
5d:e5:ea:1e:3d:be:57:1d:e9:ea:dd:e4:3c:80:aa:
41:17:3e:c8:7f:1d:e7:2d:73:59:2a:a8:a0:db:48:
ca:5a:28:a9:45:95:2c:cf:1e:80:ab:34:69:7c:4e:
a2:59:c9:12:a9:bd:96:9e:cc:bd:88:85:67:f3:e3:
d8:55:d6:dd:04:a2:5a:49:07:32:cb:82:b7:39:8a:
39:0b:f4:f2:0a:70:c9:5f:24:c0:05:ad:1f:bd:8c:
06:ec:7b:09:95:fb:e8:03:f0:23:66:23:9f:75:81:
45:14:0b:40:98:47:18:d4:ea:ab:ea:1b:02:73:2d:
65:76:5b:b2:93:74:4b:de:e8:9b:6d:72:8c:57:5b:
22:d2:a5:dd:75:6c:ed:2e:f0:fa:2d:03:62:94:56:
5c:ab:3c:21:60:94:8b:ac:0b:78:07:9b:cf:a2:18:
bb:ca:47:80:6a:4f:d5:e0:88:44:37:a7:30:40:84:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:12:31:EB:88:73:FD:17:88:CD:85:D9:8A:5A:51:55:35:5B:CB:0A
X509v3 Authority Key Identifier:
keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/FC15DD3C783811EF9979F0BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.96.0/19
Signature Algorithm: sha256WithRSAEncryption
56:98:2c:05:de:39:c5:a8:fc:09:0f:41:1d:97:b2:29:88:6b:
d5:0a:6e:12:6c:ff:f7:44:7a:89:fb:26:c2:10:f1:7b:11:0c:
12:c2:14:a0:62:b6:66:d5:f9:45:3b:20:6c:8d:54:37:4d:85:
f6:69:2b:a7:a9:0a:63:cc:74:54:9a:b2:56:28:20:ae:7e:07:
6d:37:31:12:a1:fd:fd:c5:fc:dd:5a:d6:98:d8:c0:7b:0c:08:
8c:b2:3c:60:fc:28:ab:cd:6e:b5:21:2c:7a:52:8e:c2:7b:a1:
87:7c:57:ed:ba:58:45:4d:27:b2:24:94:ea:35:a9:6c:73:1e:
5f:99:ae:ac:a9:a7:52:c6:f9:0c:89:c6:b3:6d:e1:7f:72:46:
48:4d:df:3d:d9:f7:59:b4:85:0f:c1:a9:4b:23:58:c6:69:cf:
68:08:af:12:34:1e:a6:4d:05:e1:0c:cd:0a:21:3e:9f:5b:b2:
73:47:55:1a:50:87:54:37:c9:27:dd:32:52:6e:b5:d0:4e:d9:
cc:33:af:cc:1b:be:ac:8e:d6:65:83:42:b1:2a:7a:e2:0f:90:
77:f1:f1:2e:94:53:bc:2b:c4:db:93:20:a1:4a:e8:97:70:e0:
7d:a8:15:24:9c:77:99:62:19:52:53:e2:ac:12:77:ea:a4:29:
48:0b:99:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:17 2024 by rpki-client on console-ams.rpki-client.org