Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3573AF48A4CE11EF81614A65762E951A.roa
File: 3573AF48A4CE11EF81614A65762E951A.roa (raw, json)
Hash identifier: uF5aQ34o5otWZkBgcinsuXke8cobPl+900YkoWM9EIU=
Subject key identifier: 05:B4:1A:E1:8E:3F:2D:BD:59:F4:AE:62:AC:29:B3:7B:B6:52:4E:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3573AF48A4CE11EF81614A65762E951A.roa
Signing time: Sun 17 Nov 2024 10:25:04 +0000
ROA not before: Sun 17 Nov 2024 10:25:00 +0000
ROA not after: Mon 25 Nov 2024 10:25:00 +0000
asID: 9009
IP address blocks: 45.192.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54485 (0xd4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 10:25:00 2024 GMT
Not After : Nov 25 10:25:00 2024 GMT
Subject: CN=6739c480-eedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:4c:2a:73:51:1c:10:8a:3e:8c:da:72:fc:
44:69:ee:a7:a3:97:d9:dd:69:40:94:52:a4:cf:c6:
cf:52:ff:5f:ab:d2:ca:03:b1:5f:2b:4e:d4:fe:fd:
bb:59:fd:84:00:02:3b:11:d3:88:93:b9:ea:8b:03:
6c:4e:a6:01:be:81:8d:f4:21:67:76:87:2e:9c:92:
2f:b4:6c:fe:82:90:bf:e1:55:8e:4e:40:04:73:71:
cd:e4:ac:c3:d3:2f:ba:16:41:27:f4:0a:c4:2b:40:
4f:35:3e:23:d7:05:64:71:13:d5:75:fe:a8:de:7e:
cf:8d:b4:f4:44:10:0e:a1:2d:8a:16:b2:24:7e:76:
b5:df:dc:43:d1:15:c8:04:88:35:86:41:48:1f:cd:
76:88:97:11:c6:a7:65:ba:fd:d6:6b:50:75:11:d6:
ed:89:1d:4c:ec:de:c2:1a:d8:f2:19:35:6a:5f:f0:
24:cb:d2:a7:55:5c:f5:4e:b4:e3:e8:3f:a7:69:85:
dc:f1:91:6e:99:a4:50:90:07:ba:13:a7:db:63:9d:
a6:58:51:46:50:1f:3f:17:de:e6:b6:cd:73:0c:ba:
3a:f8:9d:2d:bd:79:02:38:97:10:7f:c4:ce:5d:d3:
7a:c3:3b:40:14:8e:8e:27:2c:b4:df:e8:40:c1:d2:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B4:1A:E1:8E:3F:2D:BD:59:F4:AE:62:AC:29:B3:7B:B6:52:4E:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3573AF48A4CE11EF81614A65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.156.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:68:ba:c0:3d:3e:b7:1b:59:f3:ee:76:dd:ed:32:ae:42:f0:
82:62:5a:29:8a:14:cd:1a:ce:aa:0d:10:1c:df:42:d7:af:5d:
ef:2b:58:66:f9:57:d4:19:c7:2d:1b:a6:b5:1d:f5:8c:80:b8:
24:7e:7f:d9:76:02:27:7c:d5:8b:16:c1:30:c0:cf:e4:0b:81:
f1:2c:e9:af:f5:ed:77:03:3e:98:70:59:99:cc:5d:c3:ce:61:
a8:66:a3:77:59:78:18:a0:b8:0d:d8:e1:32:fb:f3:1c:0b:b1:
9a:2e:17:37:34:f9:7f:0f:a0:8f:ce:53:4a:d2:6c:34:80:17:
31:d0:e2:31:63:1b:08:2a:47:fe:8e:ec:02:75:2e:7a:de:fb:
c9:9a:81:0e:3d:e7:b4:3b:64:04:e1:12:57:24:09:e4:95:57:
40:9b:2e:c5:58:1c:b0:88:b6:8c:ab:01:a3:fb:b3:65:bd:64:
98:62:70:7e:7c:44:a3:7f:4b:21:3c:ab:df:60:09:99:61:65:
9e:88:6f:18:fb:fc:e2:7e:80:31:ef:4f:5f:0b:fd:36:9f:eb:
08:48:7b:7a:43:03:d0:37:ed:08:cf:38:93:26:57:87:d8:95:
e4:49:fe:ee:dc:49:8e:52:b7:ae:ac:34:03:9e:b6:33:af:4a:
8c:00:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org