Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23FFDB6A8F8911EFABD4E2B5762E951A.roa
File: 23FFDB6A8F8911EFABD4E2B5762E951A.roa (raw, json)
Hash identifier: htZ4DbuxzJhbf505vYn2UvmZ2S4UFYKb4+19+GKwspQ=
Subject key identifier: B5:3E:C2:26:41:55:7E:7B:09:4B:65:AC:D0:C1:C5:55:36:C5:64:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C745
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23FFDB6A8F8911EFABD4E2B5762E951A.roa
Signing time: Mon 21 Oct 2024 08:47:45 +0000
ROA not before: Mon 21 Oct 2024 08:47:41 +0000
ROA not after: Fri 22 Nov 2024 08:47:41 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 08:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51013 (0xc745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 08:47:41 2024 GMT
Not After : Nov 22 08:47:41 2024 GMT
Subject: CN=67161531-2d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4e:f0:be:70:00:fe:7b:f8:aa:8c:e9:52:b2:
5c:ba:f9:6f:5e:bd:da:ce:c2:30:3f:1e:d9:9f:20:
1c:f1:af:a4:83:12:ca:f1:37:33:13:9e:f8:4f:98:
37:5a:db:d2:e1:9e:0a:bc:13:b8:39:19:a0:ec:2c:
3e:1d:82:0c:c0:b9:76:06:88:bb:42:cd:e8:98:0b:
d3:3d:7e:1f:bd:89:ef:05:33:2e:dc:c7:c5:9d:cd:
d5:1a:2b:5c:f5:3b:d9:9c:02:d1:56:16:00:51:c1:
47:7a:34:76:7a:0e:5a:78:f3:79:37:02:dc:a6:11:
09:6e:48:34:73:8e:25:3d:cf:11:a0:30:0f:3b:a4:
f0:39:eb:1f:a7:32:74:27:62:cc:bc:84:bc:57:74:
f7:25:f2:5a:24:4d:9f:4c:b7:44:26:98:01:de:f8:
2c:db:36:1c:ed:ad:b2:93:7e:c5:5c:bf:5b:36:7f:
ea:e3:b4:05:2b:34:23:8d:6f:4b:36:9e:0b:c2:a6:
22:b4:92:fa:2a:a1:f5:74:e5:dd:c7:17:14:55:c5:
88:4e:61:cf:b3:42:8b:0d:3b:be:53:19:be:a8:08:
d8:d2:fa:e0:29:9e:c8:ca:13:5a:bf:8d:62:60:b6:
a6:db:d2:a3:b2:a0:0b:ea:0a:71:18:f7:b8:06:d8:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3E:C2:26:41:55:7E:7B:09:4B:65:AC:D0:C1:C5:55:36:C5:64:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23FFDB6A8F8911EFABD4E2B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
40:e4:89:ba:9b:db:b6:cf:0b:ff:7d:14:c7:03:f3:77:7a:e0:
5d:d8:24:c2:e0:17:b0:5e:b5:e9:61:c4:59:57:7c:fd:0c:b0:
b0:51:8b:1e:d3:a5:eb:96:89:2e:12:8e:8f:d0:41:e1:90:d8:
1d:68:25:91:d6:02:c4:f2:74:96:3e:7c:1d:e0:53:6b:7a:df:
02:17:7c:38:f3:8c:77:56:36:b1:e5:dd:2d:54:4b:5f:a9:aa:
34:92:7b:f5:7a:46:5a:2e:58:89:d6:a4:6e:e0:dc:8f:4f:7e:
ba:a0:37:03:3d:b5:b8:08:5a:10:a7:34:e1:8b:2e:f6:c2:7a:
33:d9:db:73:0b:5a:a1:f1:0e:8d:4f:63:54:14:f8:f5:81:6f:
16:63:90:98:35:19:bf:8c:45:42:93:9a:38:87:ae:09:c4:0f:
43:cf:93:0e:ad:07:ee:20:89:69:b7:4d:0e:11:11:0f:98:a6:
7e:18:ed:49:10:f7:5e:66:e9:7f:cd:1c:9e:cd:2e:1f:a3:95:
53:b4:22:05:07:e0:d4:a9:2c:08:ac:00:8e:aa:3a:26:b3:b4:
ca:1a:a8:93:9c:89:e8:91:80:f6:23:df:22:b6:71:54:01:bf:
fe:c9:72:2a:9f:5b:8d:b3:eb:1a:c3:90:f6:02:0b:9a:d3:2d:
1c:8d:da:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:21 2024 by rpki-client on console-fra.rpki-client.org