Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F863496A74411EF8D884D57762E951A.roa
File: 4F863496A74411EF8D884D57762E951A.roa (raw, json)
Hash identifier: i8LIBjtgaStokJy14LRDsyEleY/gnVOT72J8/SXJ818=
Subject key identifier: 7A:44:5A:26:45:DE:16:DD:2F:E5:6D:AD:7F:B9:6A:E8:58:CD:09:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D65D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F863496A74411EF8D884D57762E951A.roa
Signing time: Wed 20 Nov 2024 13:35:30 +0000
ROA not before: Wed 20 Nov 2024 13:35:27 +0000
ROA not after: Sat 30 Nov 2024 13:35:27 +0000
asID: 62240
IP address blocks: 45.192.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54877 (0xd65d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:35:27 2024 GMT
Not After : Nov 30 13:35:27 2024 GMT
Subject: CN=673de5a2-6be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:06:95:af:ed:8b:6d:11:d9:98:f4:b0:11:
65:4d:46:92:06:93:02:30:a4:c0:99:d0:21:83:f7:
d4:0c:ea:f8:3e:b7:66:91:f3:c6:bb:45:63:06:11:
9a:18:0d:cc:e4:a5:68:fd:06:bb:48:1c:3b:29:b2:
f3:0b:b6:8f:14:14:09:92:51:0e:26:be:84:2e:f9:
7c:fe:a3:67:27:a4:c7:9d:42:11:2e:27:89:55:d7:
c7:97:01:38:b6:5e:3e:72:79:f3:67:c9:5d:04:5c:
47:b0:6d:2a:82:09:dd:7f:0f:db:82:55:b2:85:2e:
8f:d7:f5:a3:48:86:9d:26:df:db:ae:3b:2b:99:68:
a5:d4:ee:ba:e6:5b:c9:05:70:cd:3f:8c:16:92:f3:
de:60:e8:bf:9c:50:83:6d:0e:0b:43:83:a7:7c:44:
ed:c8:e0:79:f7:65:57:03:44:e2:39:af:a9:c6:ba:
21:ae:28:9d:c8:59:ed:3f:71:d4:74:5c:88:a0:1c:
0f:61:f9:d7:b8:f4:e8:e8:55:8e:81:ac:b7:a9:17:
42:a7:1b:73:9a:9d:8a:d6:5b:fa:f1:2c:89:c7:53:
51:6a:b1:8f:99:f6:82:13:9e:56:b8:65:b5:82:2a:
08:25:25:a2:6b:ca:06:a7:e9:71:d5:b0:3b:1c:3c:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:44:5A:26:45:DE:16:DD:2F:E5:6D:AD:7F:B9:6A:E8:58:CD:09:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F863496A74411EF8D884D57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/23
Signature Algorithm: sha256WithRSAEncryption
72:6e:79:d8:a5:ff:ba:3c:60:59:00:b6:20:2b:2d:83:78:82:
4e:c2:fc:3e:90:04:35:38:85:da:86:f0:5a:9e:f4:2a:ac:94:
0e:d3:db:7a:36:ca:3e:9f:5d:cd:17:f8:47:d5:c2:01:4b:2f:
e3:a0:4f:ce:72:4e:bc:60:b9:64:8b:0d:c0:61:0b:6f:ed:a7:
e2:24:8c:88:77:38:2d:0a:db:0d:4e:85:49:c7:9d:01:f0:b9:
b0:80:f8:3c:ce:e4:67:fd:b8:c0:57:2f:7c:c6:59:2d:3f:4f:
4b:62:56:33:86:36:39:2b:df:81:3b:5f:33:0e:0a:28:87:c1:
65:f6:e4:a1:13:a4:ad:16:7a:6a:1c:6d:f6:84:3e:f2:f2:60:
c3:39:4b:98:12:09:bd:af:91:ef:44:a8:d4:29:db:b9:0d:fa:
21:c4:17:13:c1:f0:fb:8c:31:18:ce:a0:a8:1e:7b:7c:1c:07:
f1:70:c1:8e:90:d2:79:cf:1d:d5:77:b3:0a:b6:50:19:b5:bd:
d1:17:a8:51:e1:5a:78:57:a6:40:23:f4:0b:32:09:1c:75:58:
53:bf:59:86:be:b0:70:b3:b8:49:d1:f6:c4:c8:5e:36:f2:f1:
02:6c:0e:8c:35:9c:4e:17:db:50:a9:6f:f4:4e:36:fa:5b:5f:
4c:a5:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org