Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A443A70A64811EF946729AB762E951A.roa
File: 4A443A70A64811EF946729AB762E951A.roa (raw, json)
Hash identifier: W/I/B/VslAQM+QFWIESSLhvgrFF6VA5h5TVBLJmwtkg=
Subject key identifier: 1C:A6:C9:03:64:3E:25:B6:6A:80:13:06:83:CE:FB:22:05:91:2E:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D54E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A443A70A64811EF946729AB762E951A.roa
Signing time: Tue 19 Nov 2024 07:31:29 +0000
ROA not before: Tue 19 Nov 2024 07:31:25 +0000
ROA not after: Sat 21 Dec 2024 07:31:25 +0000
asID: 2914
IP address blocks: 45.202.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54606 (0xd54e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 07:31:25 2024 GMT
Not After : Dec 21 07:31:25 2024 GMT
Subject: CN=673c3ed0-55ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:06:c0:f8:73:9f:ec:49:dd:2f:cb:ea:0e:
9a:4a:8d:8a:32:ed:dd:4a:2e:75:9d:0b:dc:8e:35:
28:c6:ea:d1:23:a2:81:26:41:74:ea:21:f0:98:5b:
86:c0:52:96:41:cb:ae:42:bc:5c:7c:bc:ef:48:4f:
65:61:d3:f8:e6:53:2d:c4:e0:ad:5b:cb:ec:35:6c:
58:91:63:f8:b4:bb:82:ea:98:57:dc:e1:ba:37:31:
81:3b:88:de:f6:9a:fd:88:2b:a3:a3:1d:a2:e8:89:
f1:a0:8b:9f:fa:1f:cd:92:65:6b:ea:35:1c:0f:43:
e6:ce:3c:77:2b:80:63:68:c1:6e:9f:d6:24:13:2c:
15:86:b6:c7:48:20:15:8c:a7:43:3f:bb:46:d9:2d:
2b:9d:03:96:df:a4:63:88:9d:70:f6:bb:6a:56:48:
19:cc:48:0c:e3:ef:ee:88:f3:5c:5a:bf:42:f2:6f:
3e:4b:1f:22:ac:f5:b5:b3:bb:f2:13:b0:42:4f:f3:
d3:39:a7:72:e4:15:d5:1a:08:e0:2f:b1:64:ae:c3:
e4:5f:cf:b5:93:0f:6a:81:a6:58:a9:9d:af:21:bf:
94:ce:2b:0f:9b:d6:85:e0:6d:33:3e:85:62:a0:15:
23:bf:63:53:84:e0:9d:62:94:4c:c7:20:a7:81:84:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:C9:03:64:3E:25:B6:6A:80:13:06:83:CE:FB:22:05:91:2E:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A443A70A64811EF946729AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.74.0/24
Signature Algorithm: sha256WithRSAEncryption
71:80:70:3e:4c:3d:d1:86:a9:4e:15:df:d9:80:d8:0f:86:86:
59:ee:83:80:11:fc:48:27:b5:60:c2:78:e2:0e:5c:e5:70:30:
bf:ce:bd:96:2d:03:e5:2e:22:3c:bd:90:cd:6c:a6:16:bd:ae:
3c:a3:10:67:01:c4:06:46:19:ab:4a:46:7f:fa:d6:06:e6:60:
a9:fb:4d:6a:93:bc:60:30:79:b3:40:29:b8:db:d0:fd:25:75:
65:f9:d6:44:2e:39:50:c4:88:d6:f5:80:05:d5:7f:ff:79:c0:
eb:00:95:8d:c4:fd:52:03:85:22:ff:c3:11:a3:65:d8:d0:95:
24:a6:46:de:9b:19:0c:63:44:15:d2:df:63:6c:cf:b1:5e:8d:
56:e4:ed:04:a7:66:26:e7:7e:1c:4f:bf:c5:f9:d1:45:ad:72:
7c:8b:bb:7f:95:74:44:70:ef:0b:27:b0:fe:e7:60:9c:8e:df:
35:da:c0:0f:7e:95:57:d3:c4:52:90:f3:3f:27:f7:24:72:ae:
47:1f:cb:24:8b:2f:16:3a:59:92:f1:5b:bc:07:87:7f:53:d6:
10:5f:19:75:da:66:7a:8b:70:cf:76:21:cb:8d:a6:dc:03:32:
e7:51:df:94:56:ec:5b:a3:57:f5:77:b0:13:b4:b0:28:05:12:
b7:7c:3e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org