Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/005D4040A74811EFB172D26C762E951A.roa
File: 005D4040A74811EFB172D26C762E951A.roa (raw, json)
Hash identifier: eWWKGsyaWW1ns+yABZ5re8Y39VFNOeVSZk1x3pWVHyk=
Subject key identifier: 91:DF:E7:68:61:90:98:8C:36:70:7A:96:F5:88:DD:01:4E:ED:2D:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D688
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/005D4040A74811EFB172D26C762E951A.roa
Signing time: Wed 20 Nov 2024 14:01:56 +0000
ROA not before: Wed 20 Nov 2024 14:01:52 +0000
ROA not after: Sat 30 Nov 2024 14:01:52 +0000
asID: 202656
IP address blocks: 45.200.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54920 (0xd688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:01:52 2024 GMT
Not After : Nov 30 14:01:52 2024 GMT
Subject: CN=673debd4-eb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c0:e3:23:3d:0a:dd:6f:52:96:dd:f9:bb:e6:
38:7a:09:df:6b:6a:84:55:87:52:57:85:95:32:62:
37:b0:9a:46:c2:b4:a6:39:4b:54:1f:57:f5:15:fd:
2e:2b:5a:f8:9d:18:82:de:78:60:c4:21:97:51:53:
be:d0:8d:f8:22:83:ea:6d:1f:06:48:1f:1d:32:67:
ec:e4:7d:77:db:29:48:45:d0:6c:d1:5a:55:e1:e7:
4a:7b:fe:58:f3:96:71:12:5a:dc:d6:c0:dc:86:bc:
d1:d9:5b:35:68:ee:a1:3c:28:d4:8b:b0:d8:a1:35:
f6:47:0d:9e:99:04:d8:7d:59:e2:81:dd:f1:de:37:
78:0b:3b:2f:e6:28:e9:77:26:be:73:e0:fe:e1:04:
d2:c3:19:bf:a8:a5:4a:e5:d4:a8:e5:a5:ba:5f:e3:
69:25:6c:67:9c:42:9f:a2:0e:ce:48:76:23:4c:ee:
51:22:17:23:e1:26:f0:3c:30:ed:92:1b:b9:57:6a:
12:6c:4e:f9:35:be:8a:cd:ce:3c:2e:1e:e4:fc:67:
5b:2d:07:ff:c5:f5:a4:7d:fd:e9:e3:ed:d3:dc:5c:
0b:af:92:52:14:be:37:5d:1e:3f:0e:ab:86:ca:4d:
e4:0f:a5:a9:da:80:86:dd:63:87:15:c2:49:49:08:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:E7:68:61:90:98:8C:36:70:7A:96:F5:88:DD:01:4E:ED:2D:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/005D4040A74811EFB172D26C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.160.0/23
Signature Algorithm: sha256WithRSAEncryption
19:bd:ad:b8:b5:b1:3f:16:96:4e:4e:e0:be:09:a4:39:68:52:
c3:08:fb:b6:38:fa:72:be:a4:91:68:aa:29:fb:0f:e8:9d:33:
6a:4a:79:87:0e:b5:76:b2:fd:0c:4c:7b:4b:6e:6e:e3:bd:a2:
05:b9:ac:6a:46:2e:c8:2c:a6:a1:a5:08:d3:47:b3:69:5f:9f:
97:03:d3:25:a7:2d:03:ed:22:15:96:28:8b:59:31:e7:9e:32:
d3:53:73:f7:21:1e:c2:87:8c:b2:22:ea:cd:7e:8c:dc:33:a5:
4b:3b:c9:58:db:13:19:f9:50:be:3a:5b:a7:5a:b9:f7:a1:06:
55:da:88:36:04:75:65:13:09:7c:9c:a9:bf:b8:d6:0b:17:27:
ff:d3:bc:0e:ed:39:b9:ca:39:54:55:df:ff:eb:12:83:c8:6f:
18:c4:62:71:ff:5c:67:f1:01:b9:91:fa:5c:96:0d:77:e4:d7:
82:d9:9b:61:7e:dd:ce:a5:6b:80:a1:97:e3:7d:71:81:93:5b:
0d:fb:34:4b:ba:f4:e0:37:80:23:48:02:b7:cc:bc:ad:94:94:
a3:33:16:c6:9a:74:65:b3:ad:8a:5c:4d:14:c6:f1:bf:b1:d6:
d0:46:61:2a:c1:0c:0c:c1:2b:34:ba:46:df:48:24:53:55:6b:
7c:9e:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org