Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1469943A9AAF11EF86C21279762E951A.roa
File: 1469943A9AAF11EF86C21279762E951A.roa (raw, json)
Hash identifier: /ceH8H+PyLpSlmAmCS3ccWHd6x8ufLm985etd9gjGsA=
Subject key identifier: 9E:A7:8D:77:2E:B7:C9:A7:EB:4F:DE:E5:88:E0:5C:D1:65:A8:CC:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1469943A9AAF11EF86C21279762E951A.roa
Signing time: Mon 04 Nov 2024 13:17:02 +0000
ROA not before: Mon 04 Nov 2024 13:16:59 +0000
ROA not after: Tue 03 Dec 2024 13:16:59 +0000
asID: 139646
IP address blocks: 45.200.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52660 (0xcdb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:16:59 2024 GMT
Not After : Dec 3 13:16:59 2024 GMT
Subject: CN=6728c94e-8b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:50:ff:ee:66:bb:37:0c:5f:98:5b:4d:46:
81:4e:a6:29:a4:cb:c9:74:58:2b:f8:d9:64:b3:0b:
5b:5d:da:6a:fe:ab:c1:41:28:f2:c5:ea:83:3e:92:
83:fd:6c:ea:90:48:0a:72:6b:49:84:68:de:84:14:
1d:44:60:cc:a0:5e:e8:1b:5f:77:b3:33:eb:5d:43:
3e:96:a2:e6:6f:75:65:26:8e:b5:23:fa:8b:9c:90:
06:ac:a5:28:f5:a3:72:55:5d:9c:05:ea:3c:c3:c7:
cb:d6:f5:5c:3c:a8:99:52:16:2e:19:5e:c3:f0:4e:
89:cf:b6:ef:c7:35:c5:ae:80:e0:7f:73:5d:30:59:
04:cf:89:08:e3:f4:23:29:93:a4:ea:98:ac:88:64:
1e:24:22:0d:fb:f8:06:e4:c2:a5:ef:8e:76:85:f4:
cd:13:ee:a1:8a:5a:fd:a0:d7:bd:34:fc:dc:fa:93:
33:18:88:b4:12:81:4a:59:63:b8:d6:07:59:27:f4:
cf:6b:ab:98:5a:51:dc:1d:22:5a:41:da:cc:9d:c5:
6b:9f:fe:66:f3:a3:6d:5d:0d:e8:e0:d5:0a:15:30:
26:7d:32:f1:53:bc:86:7b:41:1a:3b:49:4c:d4:cc:
19:c5:c6:45:5f:bb:6e:6c:6a:0a:6b:10:32:a9:93:
60:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A7:8D:77:2E:B7:C9:A7:EB:4F:DE:E5:88:E0:5C:D1:65:A8:CC:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1469943A9AAF11EF86C21279762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0/23
Signature Algorithm: sha256WithRSAEncryption
34:af:1a:4f:83:e1:c0:ce:e9:19:33:f5:fa:d9:4a:1f:8b:72:
f8:f5:68:ea:ac:c0:13:05:56:6c:8e:61:4e:86:34:b8:bf:a4:
da:5b:ac:01:a3:dc:e1:dd:9f:89:b2:00:52:ae:fc:22:7c:df:
cd:9c:c1:8d:2d:cf:0c:22:f5:03:b7:7e:44:5d:45:6f:b9:8f:
3f:ac:33:1e:c4:5f:d4:b8:ff:c0:e6:e8:04:e9:de:f5:a4:a3:
a2:79:2e:b5:e6:d2:7d:41:4e:c0:18:e6:64:01:ca:03:15:4f:
7d:67:3f:86:27:43:df:8e:94:f4:57:75:98:9e:98:5a:b8:6f:
6f:c6:0b:4b:94:3d:f0:bc:57:d7:67:1c:0a:70:31:c1:b1:1d:
18:fb:17:45:88:fe:fe:95:7e:0a:7d:15:15:17:67:05:0d:63:
8b:23:5c:14:28:65:f2:e6:10:ec:b8:7b:8e:e3:e8:8f:14:20:
0b:05:56:e6:36:6a:42:90:75:0e:5d:eb:18:fa:f1:ef:48:83:
c0:47:b0:0e:a7:3f:44:e9:66:24:a2:6a:bd:55:86:64:b7:60:
dc:73:e8:a4:31:b4:b6:a0:26:a9:0d:0f:8d:1f:04:85:de:92:
27:1e:05:64:a8:0a:dc:bb:29:94:6f:c1:38:23:9b:d7:ee:67:
49:fd:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:19 2024 by rpki-client on console-fra.rpki-client.org