Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54387614A4C611EFB57FDBB3762E951A.roa
File: 54387614A4C611EFB57FDBB3762E951A.roa (raw, json)
Hash identifier: MiCSlkxd7t2G/LuHF0lrqRmLO6Kp0EQmvJbXFukGWtg=
Subject key identifier: 46:00:55:6F:2B:7D:CA:2F:16:54:FC:B3:A2:2E:45:F2:1D:3B:DE:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D487
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54387614A4C611EFB57FDBB3762E951A.roa
Signing time: Sun 17 Nov 2024 09:28:39 +0000
ROA not before: Sun 17 Nov 2024 09:28:36 +0000
ROA not after: Mon 25 Nov 2024 09:28:36 +0000
asID: 5650
IP address blocks: 45.196.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54407 (0xd487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:28:36 2024 GMT
Not After : Nov 25 09:28:36 2024 GMT
Subject: CN=6739b747-d5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:ed:65:e4:e1:d1:4c:20:4e:6b:00:22:65:
6b:4e:69:95:7c:f0:27:bc:c8:82:02:0a:64:67:db:
4b:ec:ac:b1:59:11:36:cc:a6:bb:a8:04:60:6b:f9:
c2:dd:8f:01:d0:7c:80:89:f4:d6:e5:ef:fa:0b:6d:
c2:04:2d:61:21:78:d9:72:4b:e5:3a:27:bf:17:0d:
41:20:9b:49:dc:0c:81:e0:c3:17:21:ed:33:6d:79:
92:1d:39:5a:50:a9:ee:90:63:bd:8c:4b:2a:d7:33:
8b:93:f0:66:82:3d:a9:ad:6a:1c:46:6c:a6:2d:51:
5b:bf:7e:1a:d6:13:fe:b0:06:55:13:2b:60:07:d6:
df:f1:32:1b:d5:d5:16:05:80:5a:ed:a1:af:b9:6a:
30:d2:99:0d:5e:3c:5a:45:13:9e:44:e6:6c:18:fc:
4d:46:dd:71:b1:49:4c:61:01:0b:02:b7:cd:96:00:
28:f8:f1:73:aa:48:08:9f:dd:8d:7f:35:5a:e6:62:
be:63:e5:f7:92:8e:5b:66:63:e0:52:b7:06:82:84:
76:0d:d0:8b:46:55:9f:98:63:f1:3b:8d:09:4b:54:
73:22:aa:ea:13:fc:9c:95:b7:95:0e:40:d6:7c:81:
be:4e:10:25:0f:8d:62:83:61:a9:4a:13:73:b8:c2:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:00:55:6F:2B:7D:CA:2F:16:54:FC:B3:A2:2E:45:F2:1D:3B:DE:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54387614A4C611EFB57FDBB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:37:2c:a1:cb:25:ad:7d:2e:13:4e:a6:be:af:8d:b4:59:a3:
40:66:be:58:6e:08:59:3b:18:98:1e:eb:a5:df:3b:d1:f3:96:
29:13:fb:cd:79:9f:e7:46:f7:79:4d:22:50:44:f7:8a:37:a7:
ea:a9:0b:96:4b:f3:be:a8:cd:a2:82:e8:cf:5b:25:83:57:71:
ca:c6:cd:8e:64:ab:ea:b0:1c:6c:77:11:2e:81:a6:df:76:8b:
9c:07:08:e0:81:3c:2c:21:67:09:df:d7:8e:49:b8:7f:45:f0:
22:97:c2:5c:11:04:cc:4c:a2:86:77:d5:50:a6:d7:c1:8d:d0:
86:e7:e0:07:91:fd:73:08:20:74:d6:34:6f:c8:fb:d9:e5:e9:
c2:9d:5d:a2:56:6c:6c:e5:f1:ff:38:24:f8:d6:d2:da:4c:92:
ae:6c:f9:c2:82:82:a7:14:45:64:56:6a:16:05:41:07:01:1a:
01:b0:58:98:3a:03:60:04:c3:0a:39:c0:7f:09:a3:f6:c5:17:
42:ec:0f:85:c7:a9:31:fd:eb:17:11:22:98:57:5c:d5:d9:fc:
a4:1f:0d:5f:ed:96:db:b4:ca:bc:4e:3d:94:b4:c5:eb:b3:df:
27:0c:f1:f3:6b:1a:65:1a:9b:6a:93:8f:f9:a2:35:1a:8b:1e:
6d:c7:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:29 2024 by rpki-client on console-fra.rpki-client.org