Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A036C18A74A11EF91A2857B762E951A.roa
File: 4A036C18A74A11EF91A2857B762E951A.roa (raw, json)
Hash identifier: UKqFYewmVGoNTMY7Y5JEXyZ8LG1Xcl254oRe12dGG8M=
Subject key identifier: AF:F9:4F:61:23:44:6B:D3:54:8A:60:5C:2D:B7:94:8D:2D:40:5F:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A036C18A74A11EF91A2857B762E951A.roa
Signing time: Wed 20 Nov 2024 14:18:18 +0000
ROA not before: Wed 20 Nov 2024 14:18:15 +0000
ROA not after: Sat 30 Nov 2024 14:18:15 +0000
asID: 202656
IP address blocks: 45.199.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54946 (0xd6a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:18:15 2024 GMT
Not After : Nov 30 14:18:15 2024 GMT
Subject: CN=673defaa-131f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:1f:a9:77:fa:84:ca:43:a8:c8:b4:a6:db:
44:61:7e:02:4a:29:6a:61:db:a8:fb:bf:17:94:24:
66:f0:48:51:96:40:6c:97:09:0e:65:fe:59:c0:99:
e3:19:c2:87:b8:d0:e5:85:87:33:de:13:19:61:f9:
0f:4e:22:54:09:3e:4d:81:45:d1:77:2a:ed:c5:26:
49:da:b0:2a:bd:b3:b0:12:cc:03:72:a0:85:1b:ce:
98:d9:df:e2:ea:98:6e:60:59:8e:f6:2a:de:33:98:
99:f8:ca:46:71:a7:cf:76:36:ed:eb:db:ff:d7:56:
7b:e2:43:19:6b:f3:1a:ed:22:56:0e:8f:86:ef:cf:
4b:a9:2b:8c:20:0f:85:62:b5:10:24:9f:3a:c5:59:
f9:30:5e:f7:ea:69:46:f3:15:41:82:1e:6e:bb:66:
e9:0e:c9:7e:3d:78:d9:81:b3:c7:f7:7b:76:bd:ee:
05:2d:1d:ef:6a:0c:0c:07:5f:45:2e:ab:8b:e2:34:
f2:73:45:c7:e2:26:06:13:fd:d1:9a:1e:4c:59:d8:
27:5e:1f:d3:dd:09:89:e8:f7:1f:a9:a5:0f:30:94:
4c:4e:38:75:98:6b:db:db:a3:e3:25:35:9f:75:13:
7a:ac:85:ec:7a:b5:9f:a7:39:79:22:63:81:04:46:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:4F:61:23:44:6B:D3:54:8A:60:5C:2D:B7:94:8D:2D:40:5F:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A036C18A74A11EF91A2857B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d0:67:1c:cd:dc:bd:d2:b8:03:e2:03:63:13:73:99:f4:1f:
b5:7e:85:83:53:63:26:8b:1f:59:0c:3d:23:db:95:f1:8d:64:
fa:94:93:40:4f:8d:37:14:b7:a4:28:c8:59:d5:d5:47:3a:1f:
07:03:30:a8:d2:da:cc:d5:f8:ac:bd:04:c2:c2:a9:1f:4e:df:
69:00:ab:34:92:1b:d9:0e:d9:0b:38:98:d0:22:7e:b5:03:34:
ff:8c:1b:35:3f:e6:c7:9f:89:4a:05:1e:73:6e:e0:2a:3d:c5:
f0:4d:9c:e1:0a:2f:82:0c:c9:14:48:78:49:5a:eb:76:88:ab:
1c:96:14:be:ea:bd:41:5f:5e:47:f1:5c:a0:8b:87:13:24:a1:
b5:0c:51:9a:50:f0:e0:da:be:b8:ca:03:fe:ec:69:4a:fe:7d:
c8:b9:4e:e8:68:7c:fd:0c:24:4b:a5:e8:34:8e:1e:c8:75:1f:
20:33:19:c1:23:72:16:9d:2c:8d:ce:c9:d4:84:84:9a:ee:52:
50:1a:ad:a6:1e:80:7d:cc:2b:a6:11:dd:ae:2a:a5:01:49:80:
39:1e:57:b6:71:2b:23:74:33:24:99:4d:87:6e:07:61:df:8c:
44:22:08:d4:2a:0f:21:66:a4:e5:c0:86:00:6a:31:6b:7c:45:
be:ff:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org