Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/229C6652A4CA11EFBA5A944D762E951A.roa
File: 229C6652A4CA11EFBA5A944D762E951A.roa (raw, json)
Hash identifier: bilWSv6oOpQGHuf2CQWmJYYD8FeA+TJcwieBO4WkJ5M=
Subject key identifier: 66:9D:FE:9B:C7:66:0F:A6:0B:D2:26:81:A8:1A:3B:74:87:2E:B9:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/229C6652A4CA11EFBA5A944D762E951A.roa
Signing time: Sun 17 Nov 2024 09:55:54 +0000
ROA not before: Sun 17 Nov 2024 09:55:51 +0000
ROA not after: Mon 25 Nov 2024 09:55:51 +0000
asID: 9009
IP address blocks: 45.192.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54457 (0xd4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:55:51 2024 GMT
Not After : Nov 25 09:55:51 2024 GMT
Subject: CN=6739bdaa-2240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:8e:f1:00:42:39:d0:9f:f1:98:03:97:eb:
58:a0:47:e4:39:32:1a:e1:03:bc:15:8b:12:b7:ea:
33:18:89:f4:4e:b3:69:8a:82:b0:62:f1:26:0c:ad:
07:f7:41:c0:6c:38:6f:9a:4b:1c:40:d3:26:68:3a:
af:9c:3e:5b:95:df:b4:40:b8:c7:cd:16:88:03:e3:
2e:21:4c:e5:f4:6b:16:d5:39:86:ad:13:75:dc:81:
54:3b:88:4d:4f:a4:38:7f:de:75:ea:a1:9e:4f:d9:
1a:26:6b:79:d9:bc:f2:d4:62:38:de:52:eb:ea:be:
4b:15:64:7a:be:e1:f6:aa:0a:e5:e1:66:27:4e:3f:
67:21:d3:bc:54:78:64:f9:ec:e0:c1:b5:c6:56:bb:
06:6c:e9:67:31:09:1c:2b:54:f0:b9:af:2e:cb:ab:
f6:1f:5f:28:26:bc:e5:43:1c:8d:7a:96:c3:69:b3:
ae:b4:51:8a:be:f3:33:e6:07:b8:51:d6:7a:10:3e:
87:4f:1c:f5:c3:33:67:49:07:6b:cf:1d:a2:7f:2b:
56:42:a0:99:ac:75:fa:1f:c1:1e:6e:2a:14:aa:ba:
27:e7:45:51:14:2d:e1:40:10:d8:b6:19:f4:4f:8f:
93:30:eb:98:fc:b6:50:17:f4:05:10:e5:e9:7b:82:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9D:FE:9B:C7:66:0F:A6:0B:D2:26:81:A8:1A:3B:74:87:2E:B9:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/229C6652A4CA11EFBA5A944D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.131.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:59:49:e7:f6:dc:e8:40:43:0e:32:ce:61:54:e3:53:40:58:
5e:b2:80:d3:fb:27:56:96:b1:34:68:4d:b7:5d:cb:20:17:b5:
a0:80:e1:f2:08:a8:ff:07:42:68:fe:22:9c:99:85:35:4e:d7:
06:e4:f8:4f:97:31:d9:d4:5f:b3:4d:8e:a7:39:ad:b4:f3:1a:
bf:ec:39:2a:f2:9b:2a:05:72:4f:67:56:25:3f:8c:a6:79:34:
77:bf:b6:1c:6c:35:e2:1a:2a:d0:84:6f:2c:4c:52:48:f5:be:
f1:6a:08:48:1f:9c:b6:1c:7a:98:c6:d0:f5:61:1b:59:9a:3b:
fe:fe:fc:44:4b:37:e8:ad:6c:e8:40:6b:0f:64:7e:78:4d:fc:
1e:45:cb:1c:c8:93:da:5b:fe:8f:d8:28:60:1c:70:8e:b4:dc:
b3:86:29:2a:7d:68:9b:4b:cd:b7:15:94:01:17:ce:07:40:58:
e7:36:09:7c:87:de:5e:d0:5e:58:11:9a:d8:d3:4a:2f:fc:34:
2a:aa:9a:ee:2a:6e:6e:c6:72:3e:09:b3:32:d8:8d:b8:91:ad:
a1:6b:41:d0:c5:90:d0:75:2b:ad:68:36:42:29:1e:e8:f5:38:
33:a2:9c:51:48:9e:d2:35:c3:57:d6:a1:e4:8b:10:9c:db:53:
01:ad:40:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:23 2024 by rpki-client on console-ams.rpki-client.org