Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38715312A4BF11EF86F0A187762E951A.roa
File: 38715312A4BF11EF86F0A187762E951A.roa (raw, json)
Hash identifier: DOr0Au2WOZehgwFFq43eTCdNln4l3DWmzg3tS7Bfbxc=
Subject key identifier: 83:34:94:6C:E5:E2:F2:97:64:4A:A1:FA:6E:75:5D:8D:54:84:5F:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D46D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38715312A4BF11EF86F0A187762E951A.roa
Signing time: Sun 17 Nov 2024 08:37:46 +0000
ROA not before: Sun 17 Nov 2024 08:37:43 +0000
ROA not after: Thu 19 Dec 2024 08:37:43 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54381 (0xd46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 08:37:43 2024 GMT
Not After : Dec 19 08:37:43 2024 GMT
Subject: CN=6739ab5a-7daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5a:7a:0d:7d:43:c7:f9:ba:e9:0d:13:4e:de:
ef:11:7f:db:46:33:61:1c:04:57:86:10:b5:12:b3:
83:a7:9b:53:2c:e9:73:23:c9:2c:df:db:5b:99:97:
48:3e:56:a1:1b:76:cd:4b:15:c4:22:76:44:d4:32:
70:a9:6f:76:62:58:a9:91:46:ea:d1:ab:43:4e:c9:
0d:4b:78:3d:12:14:55:fa:97:8c:72:9c:37:8a:9d:
79:61:cf:e5:f7:2b:7e:84:f0:20:32:45:e9:28:5c:
de:31:dc:e4:6d:1f:e3:24:d1:d9:ab:d4:ad:54:46:
3f:7a:cf:8e:46:c5:6e:0f:6a:a6:dc:05:17:c8:03:
c2:01:70:70:1d:5a:7a:25:f1:f6:1c:a8:27:ca:c5:
b7:75:ac:e2:31:52:67:41:36:ed:24:eb:95:d0:a7:
cd:a0:a8:ce:9b:28:74:cb:22:3f:0f:01:86:28:66:
00:50:1f:0f:12:2f:ad:c8:8b:73:d3:e2:20:05:de:
41:77:e6:a5:3d:8a:67:38:83:86:6c:95:45:0a:fb:
c7:d1:6b:c3:42:f4:84:07:44:9d:51:4e:9b:8a:2e:
cf:20:0d:4d:41:29:55:88:33:0d:0c:63:df:3d:9d:
43:5b:f4:2d:fa:7f:ff:4c:e2:33:17:3e:ab:a5:a1:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:34:94:6C:E5:E2:F2:97:64:4A:A1:FA:6E:75:5D:8D:54:84:5F:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38715312A4BF11EF86F0A187762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c7:c2:23:8a:6f:2c:6e:e9:27:80:1c:29:c5:99:92:f4:eb:
f4:61:8f:d2:82:df:2c:a4:c0:1f:f6:b9:88:22:c2:25:62:cc:
7d:66:3a:c1:11:f3:38:68:d6:53:ef:08:92:64:6a:05:35:5a:
2b:c9:31:5a:44:a4:84:6f:fe:ef:a4:eb:8c:b8:8e:64:b0:1d:
9b:29:4a:39:2d:39:d3:53:44:4e:ff:ad:92:f5:9c:c3:89:c5:
22:4f:57:88:d2:08:3a:5a:5f:ff:b6:c3:2b:83:85:d1:fd:98:
f1:dd:af:73:bd:d7:be:17:ff:eb:fc:54:33:5f:d7:10:65:97:
da:a9:00:f3:6e:a1:69:d7:da:ac:a6:d7:63:e0:e4:83:e5:5e:
a4:a8:d7:bf:f1:35:bd:6c:73:71:0f:9a:6e:be:8e:c3:00:2a:
f0:fa:0e:05:b2:89:60:d5:6b:3d:39:bf:65:1c:88:78:28:df:
22:0e:c5:5b:57:bb:38:55:db:9f:5c:aa:dc:c9:05:28:6a:40:
67:ab:74:ab:3e:f2:06:f2:0e:12:d0:00:4c:14:34:b2:5f:b0:
96:40:d5:71:37:20:71:cd:8c:1d:65:b3:bd:e1:99:4c:26:e2:
8d:2b:07:de:b0:f9:c3:da:7f:45:b8:35:e0:5a:e3:d0:ed:4f:
97:03:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:26 2024 by rpki-client on console-ams.rpki-client.org