Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7C6AE2A4C911EFB175F446762E951A.roa
File: 3B7C6AE2A4C911EFB175F446762E951A.roa (raw, json)
Hash identifier: OvU6hj3tAxxLikvlhX1iDQPNWqOGuBnW8IqureGnSKo=
Subject key identifier: 30:91:C6:1C:D2:19:83:38:72:70:B6:DE:75:86:78:1B:2F:08:06:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7C6AE2A4C911EFB175F446762E951A.roa
Signing time: Sun 17 Nov 2024 09:49:26 +0000
ROA not before: Sun 17 Nov 2024 09:49:23 +0000
ROA not after: Mon 25 Nov 2024 09:49:23 +0000
asID: 9009
IP address blocks: 45.192.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54445 (0xd4ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:49:23 2024 GMT
Not After : Nov 25 09:49:23 2024 GMT
Subject: CN=6739bc26-0e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:75:9d:a8:ba:ae:57:93:30:27:ed:7c:bb:
2e:a5:64:d6:66:19:04:20:19:7b:50:28:9e:c4:5f:
fd:6c:5f:5f:f7:28:48:ef:52:19:30:ac:c4:e2:03:
77:1c:6e:58:d3:0a:58:95:1c:c8:50:ec:a2:ce:f7:
bb:9a:3c:20:94:d2:92:2b:4f:13:48:b2:17:bc:d7:
63:12:69:e3:3a:3c:cc:ab:08:c0:ea:d3:85:59:3c:
cd:3b:90:ce:de:bb:7c:9d:70:cd:61:34:40:c5:bf:
a5:0d:d1:16:0d:53:21:78:9e:2c:da:e5:62:49:df:
c6:88:b0:25:47:a6:a2:b5:90:d3:9b:fc:dc:b7:06:
80:48:92:21:52:fc:ce:ce:c8:69:a6:5f:8e:2f:7c:
33:1a:46:a7:16:5f:09:af:9a:a8:8e:b9:ad:50:ae:
59:4b:19:a2:8f:8d:4d:77:4e:ea:59:6d:dc:39:30:
9c:7e:1d:ed:21:53:0e:67:f7:bc:23:6f:4c:25:5e:
cf:1f:e8:cb:5d:08:af:55:e7:0e:20:05:0f:aa:73:
5f:b3:08:64:2b:d7:84:f2:8b:e3:5e:e0:98:3c:c0:
48:d5:3e:14:7d:c9:01:bb:e2:0b:b0:59:12:c3:22:
b9:75:77:56:d3:8d:f6:e6:a4:cd:a0:a9:bd:f0:d2:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:91:C6:1C:D2:19:83:38:72:70:B6:DE:75:86:78:1B:2F:08:06:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B7C6AE2A4C911EFB175F446762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.145.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a2:ea:86:5f:ac:97:b1:0a:dd:e7:30:45:d2:d4:c9:46:c6:
c0:d7:25:95:e0:4a:98:5e:92:52:d5:72:5f:fc:d6:ee:1e:e1:
6e:8d:85:34:43:d4:14:28:60:0c:03:e2:53:c1:08:6f:cc:24:
92:df:10:55:01:32:4a:19:d8:06:43:54:ef:52:b0:e0:b9:b4:
17:7d:7a:5a:4c:fb:56:52:b0:c5:0a:11:4d:bf:91:b3:6d:82:
07:b0:3b:d5:bd:60:c7:c2:21:1b:23:50:af:2d:cc:4d:9d:5f:
fa:95:11:73:8b:5f:10:5f:d7:b0:6f:75:22:9e:3f:86:d9:7a:
9f:66:7c:54:5e:26:25:8c:82:87:8d:70:79:6a:7c:2f:1b:98:
7d:96:14:3a:40:70:de:b6:98:ea:9a:92:63:48:4c:bc:8c:aa:
19:59:50:f5:ab:8f:dc:81:f1:3e:58:55:2b:a8:1c:70:30:3b:
89:f7:df:36:25:b7:0a:dd:15:60:54:78:fc:50:ce:7b:b7:80:
97:15:a6:cc:83:24:c4:31:97:2e:c8:ab:04:40:2d:4a:93:ef:
46:ea:93:bb:c5:73:db:c9:0f:5e:86:17:3d:ac:11:64:16:88:
d2:eb:e2:98:02:47:8b:61:09:89:9f:7a:43:06:62:53:91:00:
f9:1d:7d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:25 2024 by rpki-client on console-fra.rpki-client.org