Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44E39C308D2D11EF89252158762E951A.roa
File: 44E39C308D2D11EF89252158762E951A.roa (raw, json)
Hash identifier: GjQDWz1ZEMVrXwZPHARg8ErsbVALQiKdLk/ayMmowvg=
Subject key identifier: EC:88:43:43:4A:56:30:6B:8E:74:C2:CE:12:E2:CA:02:2A:53:93:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C67A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44E39C308D2D11EF89252158762E951A.roa
Signing time: Fri 18 Oct 2024 08:45:04 +0000
ROA not before: Fri 18 Oct 2024 08:45:00 +0000
ROA not after: Sat 23 Nov 2024 08:45:00 +0000
asID: 48031
IP address blocks: 45.200.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50810 (0xc67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 08:45:00 2024 GMT
Not After : Nov 23 08:45:00 2024 GMT
Subject: CN=67122010-4716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:ce:d2:e9:ae:73:3a:b0:1d:cd:82:7a:23:
0a:f9:3d:e5:c8:e5:23:e6:e1:fe:51:4b:bc:de:70:
11:57:f0:83:ab:91:28:63:64:ac:c4:aa:96:24:b9:
26:2c:73:7d:f3:18:a2:df:33:21:51:5f:81:c9:f4:
7f:e7:70:ba:bf:24:d9:48:1e:37:38:06:30:5b:a9:
7a:f4:b4:0b:0d:0e:07:9a:bd:5b:15:c7:3c:1b:ab:
28:9b:65:d4:7a:7d:8b:b7:f6:8e:9f:1e:00:06:a9:
00:dd:e3:15:75:2d:bd:5f:01:49:cb:a7:fb:c9:a0:
44:00:5f:20:82:fb:d9:9a:da:0c:67:d5:44:5c:a7:
2c:f5:25:c4:91:f8:a9:dc:c5:69:7e:b8:a1:a5:1e:
b6:55:f5:f7:27:9e:e4:80:5c:09:64:10:58:ad:16:
b3:5e:b7:20:87:11:0f:29:ca:c4:6e:b1:76:29:ee:
e2:05:6f:dc:31:11:d3:25:c4:c4:7b:7b:12:ba:cd:
15:b4:7e:98:2a:80:f6:14:53:66:2f:99:5a:b3:42:
de:73:83:e4:04:51:dc:aa:e5:20:7e:fb:32:ae:96:
94:56:e3:59:8f:f5:75:1e:37:77:de:53:fb:3b:78:
4f:1d:17:1a:ac:19:ac:a0:09:38:e4:f1:bb:16:18:
22:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:43:43:4A:56:30:6B:8E:74:C2:CE:12:E2:CA:02:2A:53:93:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44E39C308D2D11EF89252158762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.190.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:64:e0:3b:db:b6:41:04:09:db:e9:31:1f:c6:ae:42:59:2f:
46:f6:b9:d4:89:f7:a5:0f:cc:42:de:45:a8:64:f4:e2:5c:ea:
1c:c5:3f:fb:1f:22:33:f7:83:98:7a:d2:1d:4c:34:f4:82:dc:
77:b1:39:b7:66:9f:a7:08:cf:b8:9a:1e:cf:6d:ce:a8:b3:47:
e4:a9:3e:cc:5f:61:8e:cb:03:43:65:a1:11:5c:1b:da:16:94:
73:f3:f9:fc:2b:ae:e2:77:01:ac:0b:87:2b:61:a1:e5:b6:01:
7f:ef:9d:be:26:f4:b3:38:57:bd:76:8e:5e:71:89:ec:26:bd:
37:75:8a:b1:d8:b7:b6:b2:3e:ec:7c:c9:07:f0:d1:14:6a:9d:
b7:bf:8e:56:f7:eb:3b:50:4f:ca:48:d7:1a:61:04:8e:44:bb:
d4:eb:c9:1e:6b:73:d6:30:61:51:34:b9:1b:e4:9b:21:51:ec:
a3:fc:9a:af:6e:36:65:07:90:be:e9:a8:50:82:dc:7d:1b:5e:
3f:c3:91:5e:d4:e3:b8:59:4b:bc:02:13:c8:ff:ba:43:10:e9:
a1:ba:08:6e:00:67:b5:fb:6f:13:12:c6:dc:f6:7c:ed:94:34:
25:9f:28:b9:f2:2c:d8:7f:9b:f2:33:7f:b8:77:9f:ff:47:01:
eb:23:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org