Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45AFAB2EA4CD11EF80A0A760762E951A.roa
File: 45AFAB2EA4CD11EF80A0A760762E951A.roa (raw, json)
Hash identifier: P2OWJJLm3IJJhKicQO8LjbbfOG85lIgI+tTGlOaPU/s=
Subject key identifier: 05:CA:78:86:47:CB:8B:FF:BA:04:49:2F:43:BF:A5:70:AE:DD:6F:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45AFAB2EA4CD11EF80A0A760762E951A.roa
Signing time: Sun 17 Nov 2024 10:18:22 +0000
ROA not before: Sun 17 Nov 2024 10:18:18 +0000
ROA not after: Mon 25 Nov 2024 10:18:18 +0000
asID: 9009
IP address blocks: 45.192.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54477 (0xd4cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 10:18:18 2024 GMT
Not After : Nov 25 10:18:18 2024 GMT
Subject: CN=6739c2ed-0157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:2e:82:71:a2:ef:80:78:be:91:0d:b6:e7:
68:aa:90:88:96:e6:ac:f2:e7:f1:1e:fe:1c:cb:ed:
a5:af:a4:e9:56:ab:1a:25:23:b1:93:2e:a1:f7:c1:
3c:ff:d3:44:3c:ee:b1:7a:80:3b:0a:29:9b:bb:e4:
c4:74:f9:f7:b8:74:11:c9:d3:9f:f6:eb:d7:90:71:
19:0d:a7:cb:77:9d:6e:5f:e4:40:11:25:34:8c:15:
ad:82:65:72:a6:ed:56:1e:41:70:a7:00:06:fb:31:
6f:55:e9:5f:60:38:b2:b5:e8:b7:27:de:8a:1b:3f:
ff:cf:b3:e6:b8:fc:36:9d:27:64:22:2e:3c:2a:44:
da:d9:e2:30:0f:07:48:b1:38:57:c5:94:6c:d0:e6:
07:2a:ee:82:64:0a:e3:9a:8a:70:6c:be:16:68:e2:
ba:dc:94:36:ae:fb:5e:fc:39:df:20:21:f3:5d:d6:
57:b7:ea:9a:61:4f:10:fd:4e:ce:4f:81:cc:e4:10:
3e:2f:6b:c1:c4:bc:02:63:5d:7c:f9:cb:6e:d2:d9:
c9:3b:b1:bc:b4:d2:cc:33:b1:48:a7:b0:e0:91:19:
16:0b:97:e9:0e:a5:03:b0:ae:aa:70:f1:26:67:1d:
d7:0e:7d:4d:90:b2:8b:d9:5d:2e:fc:fc:e1:52:e6:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CA:78:86:47:CB:8B:FF:BA:04:49:2F:43:BF:A5:70:AE:DD:6F:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45AFAB2EA4CD11EF80A0A760762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.132.0/22
Signature Algorithm: sha256WithRSAEncryption
03:1c:84:2f:ed:c0:ff:da:05:92:ef:8e:6b:49:a9:a5:76:a1:
68:23:d2:8d:48:cd:59:25:07:1c:a3:51:7c:b7:e9:39:1c:2a:
59:56:bf:dc:a3:e4:9d:48:50:8d:ff:ea:b9:d1:83:cc:7f:28:
05:27:ed:2c:da:a1:3c:6a:1e:b5:ca:88:31:02:32:69:f1:b1:
95:71:71:be:c1:3f:ca:18:b1:21:76:c8:8c:40:6e:51:57:ae:
34:3c:c7:3e:e2:6e:5f:6f:a8:2e:6c:a6:01:03:61:e7:27:14:
97:90:05:77:20:7d:5f:fe:e7:69:03:6e:52:47:eb:a4:84:86:
e6:01:62:2b:bc:20:cb:b5:cc:da:5c:31:f7:87:97:b9:a4:61:
c4:72:cb:a1:54:fa:aa:72:cf:e1:16:d2:15:c8:09:5f:b9:5b:
cc:ae:bb:73:56:84:28:3c:43:b1:9b:20:3d:3f:78:e5:36:7f:
92:38:c2:90:fa:46:5c:74:de:d1:c3:15:c1:47:d0:1e:98:93:
66:19:f9:32:57:8a:ae:f3:88:4c:6f:c3:4f:5c:3e:36:8e:ff:
4b:23:ee:64:fc:44:e7:66:c8:13:41:f2:3f:83:51:05:7b:89:
61:1b:f3:ca:d2:30:f5:64:12:f8:f5:7e:57:a1:32:4c:a6:54:
33:ad:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org