Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04EC9538951011EFAD71E586762E951A.roa
File: 04EC9538951011EFAD71E586762E951A.roa (raw, json)
Hash identifier: 9LDwqc6gK8sBGueXXE2TwibtkSP/pJdtrruKKEKfdlw=
Subject key identifier: 4B:CF:E9:49:5D:74:B3:CD:DC:51:A6:03:F2:C0:CC:A4:99:0F:2C:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C92A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04EC9538951011EFAD71E586762E951A.roa
Signing time: Mon 28 Oct 2024 09:35:51 +0000
ROA not before: Mon 28 Oct 2024 09:35:47 +0000
ROA not after: Thu 28 Nov 2024 09:35:47 +0000
asID: 211871
IP address blocks: 45.195.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51498 (0xc92a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 09:35:47 2024 GMT
Not After : Nov 28 09:35:47 2024 GMT
Subject: CN=671f5af7-5b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:6f:bb:fa:7f:1a:f4:be:7a:f0:f0:6c:c5:
16:b3:9a:42:da:a6:63:f9:d2:ab:af:bb:cf:19:97:
d5:b6:a7:7d:e8:3b:f9:c5:d2:07:3a:f9:85:35:82:
54:71:0a:18:51:ae:0b:32:3d:1f:d8:e3:b4:80:40:
1b:e0:91:de:f5:57:46:1e:d8:a8:9d:08:fe:03:2b:
9c:cb:66:b2:32:06:4b:0a:5e:2b:be:a4:0a:d5:c3:
70:18:92:7e:85:83:ff:09:6a:7b:c6:05:51:26:fb:
32:3a:05:3f:93:6b:04:a0:f4:11:12:fd:e0:1f:5f:
0e:a0:d7:8d:71:0f:bb:94:ae:0d:aa:8f:cf:19:25:
cf:d2:26:39:fb:cc:46:b4:50:b9:e1:93:68:e7:3e:
a1:2e:c0:e0:77:4b:94:b3:1a:0e:6f:6c:d7:4e:c9:
0a:f9:95:a7:9f:2e:3b:94:53:c2:14:8a:64:4c:e3:
58:f2:f5:f3:17:82:3c:46:fb:43:0a:d9:1a:3a:b6:
dd:91:0f:af:76:43:04:03:ef:67:70:f1:df:21:b8:
dc:98:b7:d4:b9:fd:27:bb:35:d7:31:e7:ef:59:f5:
3c:00:03:5a:77:4c:31:49:f7:7e:00:50:5d:66:a7:
ad:4e:57:1d:23:2b:1d:84:50:ed:32:db:4f:af:2a:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CF:E9:49:5D:74:B3:CD:DC:51:A6:03:F2:C0:CC:A4:99:0F:2C:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04EC9538951011EFAD71E586762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.25.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6f:a6:17:2a:1b:3f:77:cf:89:59:b8:37:93:e8:da:aa:fd:
54:b0:c2:b7:3d:72:19:45:e7:71:bf:20:f2:d6:b4:ed:6a:56:
7e:32:85:8b:c2:07:ab:92:ce:d6:4d:84:7d:9f:bb:e0:77:7d:
b5:c2:25:39:66:d3:ab:9a:0b:9c:20:3c:38:48:42:4c:fd:25:
2e:b5:ec:8e:45:11:3c:54:d3:34:46:74:f6:3f:46:ad:79:c5:
51:17:9d:9e:41:24:da:3c:59:20:51:df:d2:0a:b0:dd:81:24:
af:2b:05:d5:7c:82:9f:75:41:be:81:1d:86:56:29:8b:e8:14:
70:9b:b4:76:ce:23:fb:2b:3b:48:9a:97:9d:75:92:f8:6a:4c:
b8:a0:c4:fc:c7:44:14:11:af:29:a9:9e:e0:99:5d:32:a9:3e:
20:ee:aa:38:84:37:b5:5e:e6:01:d9:a8:b5:2d:b1:12:ff:89:
75:96:1f:44:99:39:40:e4:61:c6:db:88:33:03:0d:fe:34:ac:
ec:d8:6f:5b:93:b5:be:f3:58:1f:fb:ce:54:48:7b:04:c2:b5:
25:cf:1b:14:d3:70:3a:04:74:0c:3a:39:80:3c:0e:9a:98:09:
78:fb:ee:83:ee:93:14:d0:79:0b:cb:0b:03:33:28:5f:f9:12:
fb:f3:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:18 2024 by rpki-client on console-ams.rpki-client.org