Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C2A664433A111EFA1676C7D762E951A.roa
File: 4C2A664433A111EFA1676C7D762E951A.roa (raw, json)
Hash identifier: GTlwo8vczDlLWybrYVhlQGua+Nkhv+p5srlHmDZB//k=
Subject key identifier: 11:13:A3:50:66:64:16:C8:E8:6B:1C:56:9E:6D:11:81:AC:27:D4:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9589
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C2A664433A111EFA1676C7D762E951A.roa
Signing time: Wed 26 Jun 2024 09:48:53 +0000
ROA not before: Wed 26 Jun 2024 09:48:50 +0000
ROA not after: Mon 30 Dec 2024 09:48:50 +0000
asID: 984
IP address blocks: 45.205.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38281 (0x9589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 09:48:50 2024 GMT
Not After : Dec 30 09:48:50 2024 GMT
Subject: CN=667be405-2d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:f7:b9:1e:1b:b2:06:7c:da:b7:28:b8:86:
e2:2c:b0:67:a5:01:c8:e8:50:ff:d3:aa:71:75:03:
39:05:22:cd:e2:f3:aa:22:0e:81:e3:e0:75:11:02:
bb:b3:45:e7:bd:cd:7d:97:6d:43:a5:f5:9e:d6:4f:
df:8e:56:3d:01:87:91:42:f5:33:9f:3a:b9:a8:b5:
be:f9:73:20:8e:1a:f7:c4:43:60:4c:59:e7:a9:90:
e7:94:25:f6:e3:fb:53:20:4b:23:f1:f3:05:ad:c3:
d5:b8:54:de:c8:75:f3:c2:b9:06:23:5e:60:f0:48:
f1:a0:89:a8:94:95:bf:fa:ee:f6:1c:48:f8:d2:3b:
60:45:f1:70:be:e6:59:63:9b:d9:0c:51:70:f2:f3:
0c:a9:73:e7:ba:2b:73:c8:19:00:e8:e2:7b:be:87:
ec:55:1c:e3:15:92:8f:d4:35:41:5b:39:59:5c:f3:
9f:5e:2c:20:6c:59:b0:73:00:2b:52:a2:72:fd:48:
b3:e0:a5:8b:c9:18:93:f6:69:6c:db:45:dc:8a:ed:
6e:b4:1f:ae:25:df:d3:64:62:18:19:e3:2d:aa:e6:
c9:2f:f1:6d:ad:03:7c:7b:7a:06:c9:93:aa:24:70:
9a:a1:07:6b:3e:13:41:06:68:90:8c:3d:79:37:c7:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:A3:50:66:64:16:C8:E8:6B:1C:56:9E:6D:11:81:AC:27:D4:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C2A664433A111EFA1676C7D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.64.0/18
Signature Algorithm: sha256WithRSAEncryption
46:45:a5:50:76:57:23:92:40:ae:5f:18:12:ba:9e:80:c3:7c:
a4:71:b9:66:f6:86:b8:03:18:d8:1a:ff:e6:84:f9:e1:b4:2b:
51:79:a7:f8:9b:15:51:8f:be:92:5d:71:06:81:3b:42:62:2d:
86:97:bd:d2:c4:f6:c6:22:5c:1e:ef:e0:7a:94:56:45:22:d2:
97:96:8c:9e:27:df:db:38:fd:2b:66:7f:bb:a8:d1:12:0d:e3:
c9:4b:9f:d1:62:72:e4:6b:44:ae:80:2e:98:e9:99:92:32:7e:
6a:5c:fe:91:07:bf:c2:82:69:58:82:59:21:7e:91:dd:b9:c3:
21:0d:a5:cc:73:83:a6:57:42:1c:9d:76:29:fe:cf:4c:f1:d8:
d5:0c:c2:c8:fd:e1:e4:13:5a:69:ba:78:c5:6a:84:c3:83:e7:
78:87:84:8f:57:e7:9e:8c:8d:c3:05:67:1a:4c:f9:e5:82:55:
69:89:c6:08:f8:03:0b:2a:35:d9:a9:bd:3d:6f:80:eb:4e:60:
bf:49:97:f7:6c:be:3a:34:d3:7c:31:73:c9:fa:e0:07:99:21:
e1:58:4f:bb:2d:ae:31:40:1c:69:0c:55:49:65:74:4c:7d:ca:
d5:2c:64:b5:ea:1c:5a:fc:49:be:41:30:12:5c:e1:9f:c2:8e:
ba:23:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:02 2024 by rpki-client on console-ams.rpki-client.org