Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45B3765AA72511EFB60EA395762E951A.roa
File: 45B3765AA72511EFB60EA395762E951A.roa (raw, json)
Hash identifier: uxuw9ti14YkvK820SwSImiH21Tei6N/jerIDr0Uiydk=
Subject key identifier: 2B:C8:29:BF:55:9E:3F:FE:AD:80:8C:00:81:2B:AB:6E:1C:37:31:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45B3765AA72511EFB60EA395762E951A.roa
Signing time: Wed 20 Nov 2024 09:53:20 +0000
ROA not before: Wed 20 Nov 2024 09:53:16 +0000
ROA not after: Mon 02 Dec 2024 09:53:16 +0000
asID: 39600
IP address blocks: 45.204.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54743 (0xd5d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 09:53:16 2024 GMT
Not After : Dec 2 09:53:16 2024 GMT
Subject: CN=673db190-17d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:0b:04:c0:30:af:e8:98:9f:82:98:86:8e:
ba:c7:9b:1e:68:5b:00:fa:5b:c1:a0:83:7a:7f:13:
43:2b:6c:5e:38:3f:8f:76:40:07:cf:08:d6:4d:64:
dc:ef:b2:16:64:cc:04:88:a4:ba:94:66:18:5a:33:
83:1a:05:c9:a0:cd:5a:c8:99:77:bc:3a:b4:98:bb:
a9:b8:6c:d8:60:b9:33:30:72:74:a5:3c:42:8c:f3:
be:6d:16:1a:bc:7a:f0:17:30:40:47:66:35:54:1b:
52:94:3a:3f:c4:10:53:71:ae:50:cc:38:62:01:8f:
a5:d1:b7:e9:cb:66:b0:fb:d3:4a:dc:23:81:4c:25:
ff:8d:5d:55:80:1a:82:f1:7d:12:13:19:24:f3:ea:
8b:00:55:6d:40:0a:f6:65:43:5f:eb:09:07:3c:ed:
88:a6:d0:97:87:81:fe:fa:d0:0f:fe:d9:b1:61:65:
40:eb:1e:b6:ea:23:a8:d6:f9:ff:b7:6f:4f:fe:ee:
87:33:ae:7b:04:78:6f:a4:be:da:80:6c:87:22:6c:
32:dc:e5:7d:bc:dc:38:46:5d:02:54:f0:13:aa:09:
bd:7e:88:fd:46:fa:9c:97:26:db:cf:79:08:3e:00:
a7:c4:3e:6b:09:5b:e8:b6:3c:e1:5d:37:00:d6:10:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:29:BF:55:9E:3F:FE:AD:80:8C:00:81:2B:AB:6E:1C:37:31:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45B3765AA72511EFB60EA395762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.30.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e6:d1:7e:1c:67:ff:68:0e:44:53:f5:4a:6b:e2:c9:24:77:
a2:10:4e:3c:30:c9:a2:d6:51:51:58:d6:89:72:c3:72:94:e0:
19:19:48:a2:7d:93:23:7a:2d:57:c0:80:31:23:82:a5:d6:e5:
14:e0:0b:43:3e:a9:72:f7:1e:8b:f1:ea:f6:6c:e4:45:e5:f3:
ae:5b:68:bc:34:3c:08:e6:d8:2a:8d:3a:2c:ef:c2:f3:bc:1e:
13:9a:16:db:0b:28:8f:4c:45:7f:ac:9f:30:e9:16:08:a3:36:
75:9d:2d:cc:4d:7e:22:74:5f:a6:40:e1:c7:76:b2:54:9d:e0:
6f:cb:fd:18:62:ed:7a:14:e4:71:e1:73:3d:bc:77:cb:fc:18:
1c:3b:a9:af:40:b3:49:f6:47:f2:a1:12:1b:6f:db:0a:65:f9:
31:0c:34:f2:f5:82:e8:4b:72:96:15:93:23:58:a8:38:e8:7d:
2d:d6:08:1a:21:70:9a:ef:ee:5a:89:34:c6:c9:7d:26:67:33:
47:8f:0f:02:34:2a:90:0b:b7:f3:f1:04:91:c4:94:ec:d9:1b:
40:24:bb:ee:95:cb:1b:dc:60:11:e9:48:cc:54:8f:eb:d0:2a:
c7:44:1c:5f:a4:08:3a:1e:a7:c8:fd:27:8f:07:5c:9b:72:93:
54:63:a5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org