Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DE17D6A8D2E11EF8CA6775E762E951A.roa
File: 4DE17D6A8D2E11EF8CA6775E762E951A.roa (raw, json)
Hash identifier: pc74yORhcgaNpQfQG5tWsunM7ow1f88khy13Sn8ILF8=
Subject key identifier: 71:0B:B7:DD:A7:A0:A0:F3:8B:0C:32:30:D1:47:71:AD:50:05:D3:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C682
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DE17D6A8D2E11EF8CA6775E762E951A.roa
Signing time: Fri 18 Oct 2024 08:52:29 +0000
ROA not before: Fri 18 Oct 2024 08:52:25 +0000
ROA not after: Sat 23 Nov 2024 08:52:25 +0000
asID: 202656
IP address blocks: 45.192.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50818 (0xc682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 08:52:25 2024 GMT
Not After : Nov 23 08:52:25 2024 GMT
Subject: CN=671221cd-7156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:5a:96:ea:11:fc:16:ff:91:6a:90:3d:4b:
a6:d6:a3:65:69:74:7b:67:07:11:19:76:52:cf:8b:
ed:77:e8:7a:ea:69:57:1e:67:51:88:cd:99:c3:57:
57:19:3c:f8:8a:10:b0:53:b4:22:8a:ad:8e:7d:d1:
2d:93:50:0d:d4:8a:32:ef:f0:99:15:98:21:4b:c0:
fd:2e:6d:9f:16:a5:72:99:c9:3d:0a:59:f5:a0:1a:
23:2f:69:01:69:af:a6:3e:c0:99:4c:8a:cf:38:b5:
3d:04:67:e9:59:54:38:86:09:3b:a7:dc:f7:89:c2:
f0:b6:46:bb:f6:7f:9b:61:c1:4d:7b:c4:5e:73:a8:
3d:56:d3:8a:05:73:e4:c1:57:e9:98:fb:4e:0f:4a:
3b:d5:3f:62:66:a7:79:7c:4a:79:68:b3:a2:9f:f8:
46:8c:cf:4f:9f:d1:80:06:c9:cc:84:81:cb:75:d9:
68:4f:c7:28:63:ca:29:eb:68:47:43:d6:9e:83:94:
76:64:21:03:1c:56:e9:70:41:f5:c6:bb:db:2a:81:
07:f0:e1:1b:f2:f9:34:ea:fb:04:02:a8:6f:de:40:
13:f3:75:ac:58:30:26:d0:6c:ec:a3:f7:70:19:10:
c0:91:ad:26:fa:69:9d:8f:63:6b:f5:8f:d5:48:84:
a0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0B:B7:DD:A7:A0:A0:F3:8B:0C:32:30:D1:47:71:AD:50:05:D3:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DE17D6A8D2E11EF8CA6775E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:3f:3e:ef:36:2b:99:9d:7c:10:41:5d:49:02:5c:80:c6:ce:
aa:b0:51:7a:d3:3c:81:c9:8c:39:7a:39:44:64:2c:fc:f3:eb:
08:e9:dd:98:1c:49:72:8f:c3:14:b0:43:4e:78:55:3d:d4:52:
1d:29:4e:e4:80:c6:5a:0b:42:9d:41:b1:ae:9f:ef:74:6d:1f:
be:99:17:d0:01:23:b9:5a:be:8a:a1:ff:d6:86:2c:58:e4:41:
05:09:e8:7f:63:0d:29:7e:04:65:04:88:7f:8c:5e:20:34:9e:
5b:81:e5:07:42:ac:3c:37:a8:51:62:19:4b:44:a0:ec:b1:6e:
41:f7:a7:fd:85:35:51:b7:3c:e4:40:e4:07:55:35:24:c6:be:
a2:d0:d4:19:95:a6:69:fd:3c:88:b5:4f:4e:c1:3d:08:02:0f:
0c:a9:e9:23:a2:f9:8b:70:26:7f:a4:86:10:b2:88:53:7f:44:
65:54:39:3b:b4:71:60:5d:89:23:65:92:6a:ce:08:d2:0c:ed:
44:12:30:11:1a:31:5a:8d:ad:cd:9a:ee:ef:de:c9:7b:b9:ca:
f0:fc:c0:4c:1e:94:ee:27:00:95:44:fc:63:6b:f2:c4:5f:30:
f9:eb:1f:1f:5e:95:1c:1e:9f:fb:2b:40:28:f4:12:df:86:d2:
06:80:b6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org