Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47B27B10A43F11EFAAEA2C5A762E951A.roa
File: 47B27B10A43F11EFAAEA2C5A762E951A.roa (raw, json)
Hash identifier: bEu73jUYyPzLyz5gdd4nWuFQ1eNg0r8OS6EP7SC4xCE=
Subject key identifier: 5B:3D:9B:0F:70:CD:74:9A:95:59:7E:D9:76:06:DB:97:90:1A:9F:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D356
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47B27B10A43F11EFAAEA2C5A762E951A.roa
Signing time: Sat 16 Nov 2024 17:21:56 +0000
ROA not before: Sat 16 Nov 2024 17:21:53 +0000
ROA not after: Sat 21 Dec 2024 17:21:53 +0000
asID: 138456
IP address blocks: 45.202.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54102 (0xd356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 17:21:53 2024 GMT
Not After : Dec 21 17:21:53 2024 GMT
Subject: CN=6738d4b4-bbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:12:07:b9:ea:65:df:20:48:63:b6:86:64:c9:
bd:43:59:48:48:00:ff:50:d0:0a:06:c4:7b:b2:0f:
ba:5e:58:37:79:05:b5:56:0a:f6:a8:77:e0:38:ce:
2b:ce:9b:0f:6a:e2:b0:94:ed:2c:e6:9a:70:01:4c:
93:33:e7:ec:2f:0c:31:77:cd:c7:46:fd:76:02:24:
1b:08:52:4f:85:c5:6f:22:bf:c0:c4:5e:92:92:19:
b5:eb:20:b4:a5:f1:89:7f:f4:6b:8d:6a:57:b3:39:
5e:51:d4:6f:50:7d:73:68:0f:02:74:5d:2a:8a:11:
30:0f:fa:bc:4a:70:df:0d:3b:81:af:28:16:25:a9:
93:df:dc:fe:3f:fc:49:9b:9b:de:c5:8b:83:82:43:
22:da:a5:ff:cb:94:48:51:5c:c6:38:d3:a8:d6:88:
cf:ff:50:b1:88:9e:98:e9:a4:a8:45:3d:03:2b:e5:
b3:fa:63:57:69:ba:a8:38:be:70:88:a5:c0:3e:92:
7c:b6:49:80:ec:ba:0e:9e:e6:cc:ae:6f:78:87:b1:
68:86:3f:7a:27:aa:72:f8:77:43:d4:db:1c:6a:b1:
f4:8c:4e:ba:d1:57:ef:c1:3a:37:66:b7:17:9c:7c:
61:b0:0b:05:2a:6c:0d:e7:71:f7:59:d3:b0:48:78:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3D:9B:0F:70:CD:74:9A:95:59:7E:D9:76:06:DB:97:90:1A:9F:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/47B27B10A43F11EFAAEA2C5A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.196.0/24
Signature Algorithm: sha256WithRSAEncryption
73:7e:4d:46:91:cf:d3:ed:3f:fe:d9:f7:1e:b3:13:af:16:0f:
cb:09:54:cd:d2:33:c3:af:09:a6:79:94:0d:01:24:11:a2:9b:
8d:21:1a:ae:34:19:f2:e9:c8:aa:4f:9e:fc:64:ad:41:80:6e:
83:40:e0:41:33:c4:37:2d:c9:92:f5:13:26:47:be:74:cd:78:
ed:15:74:18:bb:24:0b:81:0a:e3:51:a7:55:24:fb:26:64:e0:
5f:6e:7f:1d:0d:4f:b1:03:4b:b6:ac:b2:98:68:de:1c:8e:0e:
46:36:e2:51:20:a8:61:f1:3f:09:55:07:21:42:23:0c:98:5c:
09:88:6e:dc:9a:84:18:d8:78:ed:a3:0a:10:73:24:7a:0b:09:
51:a1:34:58:76:e7:a3:3e:14:6a:92:06:a3:66:05:d1:83:dd:
a4:ad:e9:89:71:d2:38:a9:c0:b5:1e:b1:12:69:91:23:c0:6b:
1c:cc:42:3f:70:f9:88:5e:29:3b:4c:5b:56:8b:77:50:c5:ee:
03:71:d2:94:68:8a:7b:7e:50:ce:2e:b6:24:71:c9:7e:5b:47:
f1:bf:53:e2:26:3e:53:3f:d5:71:58:7a:b6:3b:0d:9d:7d:81:
f7:26:f0:a0:e3:78:f5:41:fc:1d:49:d1:1e:6a:16:10:57:97:
66:e5:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org