Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AC904C6DC6911EE819DC060775412E6.roa
File: 3AC904C6DC6911EE819DC060775412E6.roa (raw, json)
Hash identifier: 3s8VTf91i4GCHkafFQPEKndnvUnMziGhcYsp9ESCHHc=
Subject key identifier: 83:06:33:BC:52:E7:DB:37:97:C6:BD:45:C6:57:30:20:F6:1C:A2:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7D9E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AC904C6DC6911EE819DC060775412E6.roa
Signing time: Thu 07 Mar 2024 09:58:21 +0000
ROA not before: Thu 07 Mar 2024 09:58:18 +0000
ROA not after: Fri 07 Mar 2025 09:58:18 +0000
asID: 137962
IP address blocks: 45.195.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32158 (0x7d9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 09:58:18 2024 GMT
Not After : Mar 7 09:58:18 2025 GMT
Subject: CN=65e98fbd-f665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fb:93:42:cc:86:e4:1d:e1:58:a1:b2:69:8e:
b4:b3:02:05:b1:d4:68:d5:68:b4:fd:d4:62:d6:de:
9a:56:6d:2b:18:90:46:76:0d:85:a6:bd:a6:79:d9:
ec:d5:36:0c:0b:37:c1:de:fe:e8:ad:e4:eb:83:29:
b2:a6:c4:90:d4:43:22:89:44:4e:0e:3e:38:e2:bc:
ba:c6:54:c6:12:94:bf:a4:da:6d:fc:8f:6e:c1:05:
c4:84:19:f6:9a:c6:b2:f1:a0:45:45:b6:fe:1d:82:
f7:e6:05:e3:ed:e5:60:79:b3:1e:83:e4:01:df:a1:
19:6d:73:a3:2c:ed:54:69:5e:1e:e5:87:48:3d:ac:
db:46:4c:91:ae:68:b6:b3:dd:a2:0c:69:ef:6b:45:
99:64:81:ab:02:e8:64:8b:f4:21:60:5f:8c:15:7d:
cc:5a:a0:9d:74:04:dd:ca:19:45:29:fc:c2:17:95:
24:29:e4:19:27:99:29:e5:49:4f:d0:24:67:31:41:
3a:d7:ec:84:a9:e8:92:b2:fc:d5:cd:8c:44:cd:1b:
4c:48:57:01:26:92:ce:38:8a:11:9c:93:65:38:49:
02:5e:f9:0d:06:b1:bd:65:6a:33:28:df:7e:09:08:
ea:ab:15:69:4c:58:2f:a5:af:3c:ee:26:66:f4:e7:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:33:BC:52:E7:DB:37:97:C6:BD:45:C6:57:30:20:F6:1C:A2:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AC904C6DC6911EE819DC060775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.72.0/24
Signature Algorithm: sha256WithRSAEncryption
40:62:9c:59:dc:74:eb:d0:c6:42:ed:6b:46:63:0e:2a:87:75:
6a:10:a3:5b:3c:eb:48:b0:91:61:29:41:ca:82:01:78:d3:fc:
51:65:2d:1c:1b:f2:d0:3b:ab:a7:e8:59:af:41:cd:29:ec:ff:
7f:d3:43:4e:83:84:66:e7:cc:c5:de:a8:a3:c5:c5:ea:e5:29:
49:b6:1f:00:b7:00:3e:36:9b:2d:a1:18:ef:7d:4f:29:35:4a:
c8:ef:88:43:4e:ef:aa:a8:e1:69:e9:fe:ff:85:1a:5d:38:90:
19:b3:f6:85:dd:38:19:1f:55:75:0f:dd:6b:48:5a:5e:83:64:
2e:d9:95:2b:cf:58:9f:c2:71:99:4d:22:6b:da:ce:0a:f9:8e:
60:a6:ae:05:1d:71:2f:07:43:b4:9c:9a:9a:f4:69:93:ac:4f:
0f:4e:a8:40:4a:08:ad:52:6e:c4:ac:66:35:7e:2f:08:f6:f5:
67:65:0c:38:d8:77:fa:cd:65:9b:68:82:80:c1:f9:a5:68:b1:
95:4e:6b:83:3b:cc:b3:04:2b:cd:20:aa:3e:5c:65:a5:cb:e5:
aa:e3:39:9c:60:04:40:cd:78:14:59:ce:46:aa:95:e5:6b:e2:
4d:84:5d:8a:99:3e:96:c7:d3:94:58:08:e2:d6:52:b8:9e:67:
d6:b2:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:26 2024 by rpki-client on console-ams.rpki-client.org