Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46513CFC344B11EFBD7EBE82762E951A.roa
File: 46513CFC344B11EFBD7EBE82762E951A.roa (raw, json)
Hash identifier: xDKwtEOY2SgI59idTPP3zTveizBT8r6kG586nsLDS04=
Subject key identifier: 40:FC:16:9F:F2:55:EE:1F:70:5B:42:8C:0D:F2:33:AF:67:41:9E:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 959E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46513CFC344B11EFBD7EBE82762E951A.roa
Signing time: Thu 27 Jun 2024 06:05:38 +0000
ROA not before: Thu 27 Jun 2024 06:05:35 +0000
ROA not after: Mon 30 Dec 2024 06:05:35 +0000
asID: 984
IP address blocks: 45.201.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38302 (0x959e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 06:05:35 2024 GMT
Not After : Dec 30 06:05:35 2024 GMT
Subject: CN=667d0132-35f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:0c:b2:bf:4f:03:08:d8:09:31:e9:d6:de:
aa:db:62:2b:2d:4c:49:c1:63:76:f1:99:ae:6d:1c:
20:ed:0e:21:25:76:1d:61:15:da:ce:66:58:7b:50:
6b:f5:b1:23:52:3d:64:78:18:66:65:85:a8:b4:df:
75:0e:fe:03:15:b4:66:69:5d:e9:88:a6:79:cd:0e:
c5:f4:1d:d3:05:5b:cd:f1:2c:68:38:08:b6:90:89:
2c:50:06:e7:e1:b1:75:f7:fb:ce:f0:cd:27:cd:f1:
2e:8a:3f:db:9f:4a:61:29:02:d0:f2:63:c0:65:2e:
71:c1:8a:91:6b:fd:9b:f5:8f:8d:16:78:f1:91:5d:
e7:80:70:bc:b8:35:17:4a:a4:c6:2c:2b:54:14:d8:
ca:88:14:38:cc:90:11:ec:fe:b6:ac:6e:57:2a:3e:
6d:b3:b1:c2:53:78:87:93:4e:d2:a9:32:2f:a8:2c:
5f:7a:39:5c:78:c5:66:45:58:00:48:bf:83:3f:0e:
db:1f:ec:a8:cb:e7:54:3e:27:fe:6d:7e:5e:c8:7c:
a1:ad:2f:51:20:ec:dc:18:c7:c2:16:aa:1c:97:33:
52:b9:9a:5f:81:17:5a:0a:2d:2b:c2:66:bd:16:86:
57:6a:46:6a:45:a5:8b:64:24:ab:7c:3a:7e:1a:9f:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FC:16:9F:F2:55:EE:1F:70:5B:42:8C:0D:F2:33:AF:67:41:9E:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46513CFC344B11EFBD7EBE82762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5a:33:e8:93:47:97:2b:0b:b0:c1:5c:40:88:ae:21:18:a8:c2:
0c:45:e7:5c:80:19:b4:60:c9:7c:59:fe:e9:2e:2c:18:d0:62:
af:ab:aa:f9:fe:03:5f:04:b6:45:d2:c5:99:55:d4:25:55:3a:
20:5f:eb:ba:d0:a6:7d:0d:74:18:1c:07:2e:a7:79:48:3c:f7:
6f:a9:de:84:50:dd:13:66:61:df:d2:92:64:43:4e:7d:67:e0:
98:46:f6:97:df:8c:88:82:4d:8f:03:73:24:f7:d3:3b:49:fd:
1d:6d:3d:c9:34:1c:d8:61:06:24:8f:31:9d:ca:69:6b:79:63:
75:1e:f6:fa:de:09:cd:19:97:53:8c:b2:18:c5:3e:3e:d9:82:
f6:1c:d4:2a:8b:de:9e:ff:56:b9:f1:94:79:d8:d0:e8:75:43:
25:77:b2:27:58:e8:1f:7e:43:f0:80:08:a7:db:a6:7c:53:96:
e7:b0:20:ad:c3:ae:2a:20:fa:47:bc:51:69:30:13:9f:21:c1:
05:08:2d:38:c9:11:5e:a6:d9:2a:40:1c:7c:ac:70:77:4d:ac:
bc:28:a4:f7:56:40:cb:ad:a8:15:f3:23:d6:19:09:46:8c:e1:
bc:88:f1:e1:43:39:48:52:e1:cd:63:8b:11:41:d4:ab:e6:49:
e4:ce:0c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:31 2024 by rpki-client on console-fra.rpki-client.org