Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E38A620A73C11EF8AAF12A2762E951A.roa
File: 0E38A620A73C11EF8AAF12A2762E951A.roa (raw, json)
Hash identifier: 3ieyMQeEllIxxEpFn36YTC2Kp2Py02LCuQsYghBraKk=
Subject key identifier: 51:17:3F:5A:E9:56:94:1C:6B:29:04:DF:A0:B0:2A:52:58:8C:83:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D617
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E38A620A73C11EF8AAF12A2762E951A.roa
Signing time: Wed 20 Nov 2024 12:36:25 +0000
ROA not before: Wed 20 Nov 2024 12:36:21 +0000
ROA not after: Sat 30 Nov 2024 12:36:21 +0000
asID: 48031
IP address blocks: 45.200.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54807 (0xd617)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 12:36:21 2024 GMT
Not After : Nov 30 12:36:21 2024 GMT
Subject: CN=673dd7c9-0476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:bd:4f:75:6a:af:ae:0b:7b:50:43:59:90:
ed:77:91:7c:5e:6c:56:54:a4:dd:ca:be:56:21:04:
68:51:c5:73:64:d2:fe:ad:24:02:ed:15:10:12:1d:
a9:60:92:47:71:a5:db:e4:1a:a8:b1:22:33:b8:c8:
76:98:c2:36:c4:71:49:70:01:3d:86:78:2e:a4:f1:
67:9d:bc:d4:07:ff:ec:f1:72:65:70:02:4b:a1:ad:
a8:16:d5:49:53:17:49:eb:31:4e:72:fe:78:7f:33:
7c:9d:76:69:64:09:2b:34:d2:c3:4c:70:b4:4f:18:
6a:05:e8:f6:32:1a:ff:cd:f5:1a:40:a7:9b:0d:4e:
42:3c:d2:97:13:87:da:a8:90:d7:35:3c:91:70:de:
8b:af:62:f3:72:64:07:62:41:ff:77:bf:6c:a2:1b:
71:84:56:49:47:1f:39:cb:8b:5f:2e:90:a1:b6:87:
4c:d3:22:dc:61:24:df:53:72:a7:47:f9:21:56:32:
02:9a:de:9c:dc:2d:b6:d2:59:43:ec:26:08:bd:44:
ff:5d:f0:4a:53:33:a3:23:c3:48:12:72:d0:4e:b9:
45:96:f3:98:0b:2e:75:ce:e9:25:99:00:7d:c9:c8:
74:41:6a:84:b5:a0:25:5b:c3:16:57:de:19:ea:ba:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:17:3F:5A:E9:56:94:1C:6B:29:04:DF:A0:B0:2A:52:58:8C:83:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E38A620A73C11EF8AAF12A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.182.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:10:05:db:64:4a:81:c9:3e:5e:b1:ce:ad:ec:fd:21:24:ef:
c8:42:10:f0:43:28:31:cb:0e:91:ba:3f:dc:8c:41:38:c1:10:
75:fd:0c:9e:d8:b7:bf:fb:0b:5a:8e:a2:f9:91:6a:ba:65:c4:
cd:81:c5:96:80:3c:c8:2f:3d:98:01:d8:80:31:90:85:f1:38:
18:83:12:6d:a5:bf:86:3b:c6:6b:f5:60:fe:94:a2:85:1b:76:
44:27:ec:9c:ab:9c:9a:98:81:6e:84:b1:4c:f2:94:eb:8f:eb:
cd:0f:59:43:72:b2:06:24:5d:e3:e6:08:c2:b8:82:28:dd:a2:
d8:d3:76:28:ca:5e:5a:3d:d3:91:8d:3d:ea:9d:23:f5:15:c3:
bf:19:78:46:4a:90:70:ea:8c:6d:b0:78:44:77:50:90:e0:41:
bb:e9:77:22:20:38:5d:65:52:5f:a2:58:65:87:dd:c3:c8:9b:
b6:0f:c1:b2:e4:99:2d:f3:d3:01:89:00:55:04:14:8b:13:94:
5b:b3:ba:15:f8:ed:dd:b1:9a:7a:eb:c8:4b:89:69:1d:96:55:
22:95:9f:01:d8:ba:00:df:8b:a1:5d:86:6b:4b:6b:19:96:fa:
5f:62:b8:30:af:41:c0:21:6e:d2:a0:62:e8:80:f3:19:8c:25:
92:38:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:19 2024 by rpki-client on console-ams.rpki-client.org