Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0847DCB4A74511EF9610975B762E951A.roa
File: 0847DCB4A74511EF9610975B762E951A.roa (raw, json)
Hash identifier: lu5JjvAoItgq7iFWWuhvCkrRlMo4/c626Miocd5h3eE=
Subject key identifier: 9B:1E:E3:F2:C7:5F:94:15:5A:A4:4D:2F:31:B2:1A:DE:38:35:B7:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D665
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0847DCB4A74511EF9610975B762E951A.roa
Signing time: Wed 20 Nov 2024 13:40:40 +0000
ROA not before: Wed 20 Nov 2024 13:40:37 +0000
ROA not after: Sat 30 Nov 2024 13:40:37 +0000
asID: 62240
IP address blocks: 45.192.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54885 (0xd665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:40:37 2024 GMT
Not After : Nov 30 13:40:37 2024 GMT
Subject: CN=673de6d8-aa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:64:16:8b:00:65:da:a2:12:09:6f:c2:25:
b3:43:b8:9e:26:ab:ae:34:0a:c7:9e:c7:f8:b7:fb:
ad:4c:a0:4d:75:4a:1a:7e:0a:f9:2a:f0:70:a4:47:
fe:e1:64:55:cf:b4:42:14:5c:c0:3e:fb:0b:0e:1a:
9c:7d:20:1a:f6:8a:41:25:6e:6f:3a:5e:43:0d:a6:
c1:d1:17:0c:b1:6b:b2:05:b1:21:1a:45:a6:11:26:
78:9a:02:ee:85:4b:e2:33:2a:54:c6:d6:de:07:40:
5c:c9:1f:01:d8:d1:c4:bf:e6:b6:d2:9f:5b:97:81:
96:07:f7:a7:ba:1e:12:7d:7c:a4:76:24:1e:69:90:
c9:b0:87:da:01:da:84:2b:e1:bb:44:ec:45:2f:15:
ec:e0:7c:22:3b:8e:3c:05:ac:b0:28:e5:cd:c7:5b:
25:0f:17:db:d1:2d:ca:d5:4c:b8:d6:98:e7:89:bc:
4c:f7:ef:5a:7c:c7:ea:35:02:68:78:a6:d6:4c:b1:
67:38:f0:65:d9:f2:54:5e:f5:97:89:b2:b8:63:a9:
25:78:6b:1a:9b:ac:c1:bb:a8:32:0e:81:f6:ca:35:
6d:e2:e8:00:c8:29:f9:2a:db:b9:a3:ba:04:94:5b:
de:09:eb:27:00:6f:a3:7c:bc:3b:a8:37:9f:4b:d5:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1E:E3:F2:C7:5F:94:15:5A:A4:4D:2F:31:B2:1A:DE:38:35:B7:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0847DCB4A74511EF9610975B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.40.0/23
Signature Algorithm: sha256WithRSAEncryption
18:c6:ff:f3:ca:f9:7a:9c:31:67:a1:8e:ec:aa:12:53:ed:c5:
b2:fb:33:8a:ea:33:a8:37:f8:d8:3a:e1:fd:d1:e6:da:0a:72:
3b:a9:c9:9c:46:b4:60:26:b3:a1:e2:20:65:7b:0f:39:df:88:
3e:be:d2:9d:5b:68:ef:5a:03:f0:38:e0:9f:08:01:48:73:ac:
ef:f0:b2:89:7e:27:aa:72:c2:64:86:8f:78:c4:cf:22:22:24:
85:89:86:43:28:4f:5f:d9:ca:76:bd:76:ac:c4:1d:80:bb:f7:
17:78:f7:3a:8b:02:41:5b:44:b6:eb:92:7c:83:22:e5:ac:13:
c4:0b:d5:b8:d9:75:e3:fa:25:e0:51:1e:a3:61:f6:d1:2c:b1:
9a:d8:fc:7a:52:62:4e:92:d9:ea:b3:b4:fe:64:3b:88:00:60:
6f:23:52:6a:ac:85:38:cd:95:c0:d1:2c:dd:c4:74:10:3b:30:
cf:a3:94:ca:23:d1:35:03:15:1a:0e:e6:71:94:c3:62:6f:5a:
71:93:31:84:f7:8d:08:de:3b:a7:bd:36:82:4c:4d:78:95:56:
24:29:ac:30:9e:07:b3:fb:ff:35:4a:03:00:5b:95:1a:c0:03:
a0:bd:3d:15:5a:83:ab:99:65:5e:c9:cd:26:60:19:69:bd:bb:
1d:9d:a0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:18 2024 by rpki-client on console-ams.rpki-client.org