Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/457C78C8A4D011EFAA3BFC71762E951A.roa
File: 457C78C8A4D011EFAA3BFC71762E951A.roa (raw, json)
Hash identifier: tym0WPA30gTSkSMuS/N4Y3skv3uTN7POyLYcatu2m1E=
Subject key identifier: C4:D3:47:70:46:F0:5E:3C:8F:C8:A0:66:39:44:36:52:77:27:B0:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/457C78C8A4D011EFAA3BFC71762E951A.roa
Signing time: Sun 17 Nov 2024 10:39:50 +0000
ROA not before: Sun 17 Nov 2024 10:39:46 +0000
ROA not after: Mon 25 Nov 2024 10:39:46 +0000
asID: 3561
IP address blocks: 45.194.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54493 (0xd4dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 10:39:46 2024 GMT
Not After : Nov 25 10:39:46 2024 GMT
Subject: CN=6739c7f6-91ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:99:37:31:5a:59:f8:dc:66:95:a6:ee:d4:
4f:1e:c8:a4:da:eb:11:bf:9a:be:f8:b7:ba:b9:1d:
ca:f9:10:53:de:30:b7:16:32:91:93:9f:03:2a:a1:
7d:43:91:7c:c8:fb:ae:d5:37:6f:7c:d3:f2:5e:0a:
f9:b9:86:ba:ac:b1:e1:66:b4:7b:9e:ae:7f:17:9f:
73:b3:9f:f6:b8:c8:5b:e6:15:59:75:45:34:46:a7:
46:b7:43:15:89:c5:b5:ec:39:3a:d2:8d:a0:a9:c7:
8e:24:33:c9:f3:af:20:34:c8:ce:04:ad:6f:1e:61:
b7:06:e4:f2:15:03:14:a8:58:c6:01:a3:b3:eb:be:
c4:6d:54:2f:74:e8:09:95:46:48:34:70:f9:da:90:
21:a9:61:8f:68:74:5a:bc:f0:36:55:5f:fa:93:92:
e3:47:bd:1d:cd:d8:7a:14:09:61:6a:69:f3:bb:37:
a5:40:80:dd:57:c1:35:0a:31:22:2d:1b:c8:9e:ef:
25:20:87:d6:f1:d3:55:ac:4a:a8:15:35:71:3b:70:
d9:c3:c3:78:d3:f8:a8:72:83:e9:9c:58:a8:31:80:
58:32:8b:d4:7a:a0:6d:6f:f0:18:14:6b:f0:0d:58:
e4:7b:07:b2:2d:b7:61:a3:fc:dc:4e:1d:99:eb:1f:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D3:47:70:46:F0:5E:3C:8F:C8:A0:66:39:44:36:52:77:27:B0:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/457C78C8A4D011EFAA3BFC71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.100.0/22
Signature Algorithm: sha256WithRSAEncryption
80:32:1d:e2:07:18:e4:07:af:fc:0d:86:c4:d0:2b:a9:c5:6b:
3b:a4:9b:6b:ff:88:3f:cb:45:9b:20:c2:4c:37:9f:f7:4b:75:
b7:2e:4a:61:fe:9c:87:f5:eb:b8:a4:c7:82:6c:9d:4c:a7:c6:
ac:52:42:b9:40:99:6e:50:70:32:d2:d9:1d:1d:98:a0:71:ea:
0e:3f:a8:5b:ca:df:c3:6d:d7:03:cb:f0:9f:ae:fc:f4:ef:17:
e7:17:08:45:50:c8:2b:21:58:6a:2d:80:67:95:6e:08:5e:1b:
32:2b:8d:79:26:eb:3b:b6:e9:95:e1:8a:df:78:74:bb:66:38:
a1:7f:3b:52:d5:bb:49:4e:0d:73:1d:27:8d:0a:5f:84:0a:02:
bc:4d:c4:fe:64:30:4f:18:86:24:58:85:a9:29:80:19:61:1d:
11:43:b8:c3:d3:ce:6b:68:87:0c:c1:8d:5d:b8:a7:35:f7:73:
98:0b:8d:b4:a2:95:bb:70:e8:c5:93:6a:d3:19:69:6d:93:d4:
55:79:89:ef:35:e6:23:dc:01:ca:d8:a0:0a:1d:d3:85:1b:1d:
04:7c:41:a7:0c:0b:ae:28:12:91:a4:7d:cb:5d:62:82:1f:13:
a4:6f:fe:8d:11:f7:29:dc:2b:f1:59:26:4b:49:94:1b:77:72:
2a:fc:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:27 2024 by rpki-client on console-fra.rpki-client.org