Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DB19056A45B11EF8DAC1188762E951A.roa
File: 0DB19056A45B11EF8DAC1188762E951A.roa (raw, json)
Hash identifier: tfqReKQHj3cbVTPTHeHfeE5eqSJ6dRKpZbNG06E7KzE=
Subject key identifier: 28:69:7B:19:83:8E:AB:E2:83:F2:C9:84:A0:C9:28:A2:3F:44:BC:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D420
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DB19056A45B11EF8DAC1188762E951A.roa
Signing time: Sat 16 Nov 2024 20:40:45 +0000
ROA not before: Sat 16 Nov 2024 20:40:41 +0000
ROA not after: Wed 27 Nov 2024 20:40:41 +0000
asID: 39600
IP address blocks: 45.194.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54304 (0xd420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:40:41 2024 GMT
Not After : Nov 27 20:40:41 2024 GMT
Subject: CN=6739034d-ce82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:8f:12:0e:3a:3e:f4:bf:a7:43:c9:97:45:
3c:04:3d:bb:a1:b1:a4:58:f5:2a:5f:f7:17:55:aa:
e7:15:02:e2:be:b3:14:85:1b:06:1a:4f:03:97:de:
37:b1:94:26:12:d4:18:76:e7:18:72:d4:83:0a:cd:
81:15:a0:9b:62:87:9f:e2:66:10:d3:ea:95:89:de:
5d:74:26:1d:ce:0f:14:4f:33:6c:53:d1:34:d3:43:
8f:72:25:49:4b:6d:7b:0f:96:bf:dc:fc:32:64:dd:
f0:85:06:73:d4:d2:8c:d5:3e:5f:8a:52:e6:db:66:
50:18:eb:d2:16:a4:5f:7c:53:0c:26:b7:14:ee:95:
c2:76:18:26:b8:f4:43:33:56:70:9b:0f:3a:92:cd:
a9:a9:10:ef:6b:28:3f:0a:f3:2a:95:5e:b1:4d:7e:
1c:61:6d:e7:2a:17:b9:3e:93:2c:fb:50:e1:44:fb:
e7:8b:ec:ec:2d:8f:5c:a8:69:45:22:88:a1:11:79:
e1:68:20:4c:e1:18:f0:a1:33:a7:5d:f3:68:87:4a:
42:e7:f3:91:11:50:45:78:d1:d2:3c:34:14:ef:c8:
75:54:24:cc:2f:88:fe:88:b6:d2:c8:a0:23:e5:71:
aa:c9:10:00:88:15:09:9c:89:ee:a5:b9:08:9e:f4:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:7B:19:83:8E:AB:E2:83:F2:C9:84:A0:C9:28:A2:3F:44:BC:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DB19056A45B11EF8DAC1188762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.72.0/22
Signature Algorithm: sha256WithRSAEncryption
69:50:87:10:03:3d:d3:e8:5c:ed:e6:39:22:4c:fa:57:c5:a1:
fc:3e:a4:e1:67:a5:5c:ea:9f:90:6a:d5:f9:5e:fe:79:44:f3:
89:fc:50:c5:ae:8d:0f:ab:07:c5:27:c1:2a:1f:33:bc:cd:4d:
7a:25:0e:50:41:cb:5a:00:8f:0d:f7:7f:f4:5b:ed:56:89:eb:
80:db:48:4e:52:14:f8:95:eb:62:a8:dc:c7:02:e0:bd:89:b5:
bb:b3:32:07:dc:97:d0:62:50:84:ff:cc:87:ae:77:3d:e6:11:
ae:1e:40:e0:ff:a2:aa:7c:1f:15:ad:24:ed:a2:ba:ae:95:50:
27:72:f7:8f:42:40:28:90:8d:1f:80:53:7f:fe:a5:04:16:40:
e3:74:73:aa:79:e2:6c:32:16:ea:c8:d7:fd:ec:08:aa:bc:67:
3b:94:ed:4e:f4:ba:84:6b:3d:6c:e8:e6:1f:6b:72:22:d6:f4:
b1:f3:6d:c1:0d:85:81:63:a2:a3:77:9a:b3:3d:3b:a1:ff:a3:
19:f8:a7:3c:d9:d8:92:bb:48:e2:62:44:e2:03:4e:27:90:82:
d8:07:df:11:ac:1b:a5:f4:84:d3:ac:d1:14:68:93:42:05:c1:
b7:aa:b0:d9:50:08:ef:93:c1:72:28:1d:a0:cc:58:4d:7e:40:
9a:e0:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:18 2024 by rpki-client on console-fra.rpki-client.org