Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/532D190E977F11EF90CC6360762E951A.roa
File: 532D190E977F11EF90CC6360762E951A.roa (raw, json)
Hash identifier: fPVtmjEVQbgj+2ycHOVLmuyTIG5dONl3Pw5WxxIoLUk=
Subject key identifier: E1:76:DC:91:3C:E7:56:D9:33:57:DC:C4:94:45:3E:A0:8F:CF:49:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/532D190E977F11EF90CC6360762E951A.roa
Signing time: Thu 31 Oct 2024 11:57:39 +0000
ROA not before: Thu 31 Oct 2024 11:57:23 +0000
ROA not after: Fri 27 Dec 2024 11:57:23 +0000
asID: 20473
IP address blocks: 45.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52046 (0xcb4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 11:57:23 2024 GMT
Not After : Dec 27 11:57:23 2024 GMT
Subject: CN=672370b3-345a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:71:ca:1c:d4:3c:f6:f2:8b:ee:91:f1:0b:
12:4f:6e:8f:33:51:c0:97:69:ee:5a:5a:22:c4:40:
86:e5:5b:9e:ab:13:0e:d4:35:6d:48:87:56:56:22:
3b:c8:1b:a5:c1:ff:90:dc:d1:6a:da:10:6b:43:e7:
d7:25:1a:91:27:47:27:29:97:7c:14:ec:64:c1:17:
dc:3e:b4:ba:50:e9:04:d4:ac:06:97:6d:66:c8:a9:
6e:49:da:eb:4e:bf:15:57:7a:48:ee:89:5b:40:35:
33:0c:04:7e:9b:c3:88:59:ca:17:44:5c:bc:03:f7:
3f:73:f8:7c:b8:d2:2c:c2:c5:82:be:ac:e0:8d:a8:
8e:71:b8:bc:58:7b:eb:86:f3:6f:f9:03:08:e1:46:
90:71:a5:05:6f:42:a1:59:55:f9:6d:45:25:e1:87:
a9:02:9f:06:cc:d3:8e:84:19:65:d5:36:1c:ec:2d:
c7:78:0e:cb:33:81:f7:e3:d3:09:8f:a1:21:d3:e2:
16:d2:77:c2:3d:51:37:61:88:56:78:ed:d8:a9:8a:
01:ed:22:da:e0:e7:38:2a:1a:52:02:c8:06:72:48:
0a:1b:49:e1:e7:24:a9:8e:13:ec:53:e4:e4:fa:59:
c9:bc:bd:65:f5:27:5c:59:29:a4:8f:07:e1:86:13:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:76:DC:91:3C:E7:56:D9:33:57:DC:C4:94:45:3E:A0:8F:CF:49:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/532D190E977F11EF90CC6360762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:90:c0:35:6a:9a:2e:b2:47:ba:cd:26:70:27:09:50:dc:ac:
e9:9e:8a:59:d7:b6:99:b5:84:c3:a8:58:f4:c3:26:58:28:a2:
b2:98:e5:46:82:35:1c:66:12:6a:eb:cc:95:20:ff:e0:15:a4:
b7:ef:bd:65:8a:1c:7e:3e:b3:c6:b7:53:8b:c5:de:68:64:66:
c9:e6:c3:a3:9b:8a:e5:85:b7:d0:cf:9b:16:13:09:83:f1:23:
03:d0:14:98:a2:f3:5a:76:75:b2:be:a1:ac:32:e7:07:74:10:
f2:f3:4f:c3:ae:19:fd:11:65:ea:03:62:7a:26:a4:f5:cd:0c:
ae:2a:8c:a9:dd:81:f6:eb:93:d3:13:7c:e7:49:02:80:e8:13:
5a:d9:73:ef:85:92:ff:dc:49:c4:ab:ef:74:2a:e9:55:45:da:
9b:36:f4:f7:a5:4d:59:be:2a:c2:d7:bd:33:07:26:0a:b5:d6:
a6:13:95:d6:e2:b7:bb:ca:18:34:27:be:a4:d4:4e:1e:e5:6f:
7c:fb:32:c1:60:9f:b7:f8:d4:fd:72:99:5f:d1:90:5b:3a:a5:
74:bb:5e:39:cb:14:a9:fa:c5:57:5b:58:52:5d:0d:dd:97:c9:
e9:1c:ce:03:cc:58:69:39:30:b4:2d:e1:23:6e:3f:2d:ec:23:
d5:67:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:30 2024 by rpki-client on console-ams.rpki-client.org