Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54817D06132011EFBA06D840017001B1.roa
File: 54817D06132011EFBA06D840017001B1.roa (raw, json)
Hash identifier: MYIy2RevVmOSK7xc33F7ptsCaSCYfHxL8oCdhPNpChA=
Subject key identifier: AE:35:4A:95:B5:92:D6:F1:95:BA:64:63:AC:A4:B7:DB:BC:C8:A3:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8A84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54817D06132011EFBA06D840017001B1.roa
Signing time: Thu 16 May 2024 01:05:05 +0000
ROA not before: Thu 16 May 2024 01:05:01 +0000
ROA not after: Mon 26 May 2025 01:05:01 +0000
asID: 63199
IP address blocks: 45.196.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35460 (0x8a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 01:05:01 2024 GMT
Not After : May 26 01:05:01 2025 GMT
Subject: CN=66455bc1-15a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:4a:d8:d8:93:81:52:c8:ba:de:14:f5:fc:
b5:5d:54:d5:07:a6:de:ac:3e:1f:9d:2e:f0:2e:11:
b0:7c:63:44:c0:95:9e:65:66:d6:0a:a3:c8:d5:e0:
f5:58:60:67:cb:a9:e2:5a:1c:7e:82:2e:df:0d:cb:
01:31:6e:9e:ec:12:1d:91:66:44:b0:85:e2:af:81:
a9:70:c9:7d:c3:1f:43:22:35:27:0d:f2:2d:a2:ea:
b8:b6:fa:42:c9:83:74:6e:41:69:b3:96:8e:59:ef:
38:8c:fc:4c:5a:3b:5d:67:65:f9:29:ed:1e:31:bc:
64:51:98:71:57:45:d0:e3:04:04:c5:1c:68:33:0e:
f6:06:d4:20:98:b5:4e:9a:4f:d3:58:9a:32:f4:76:
15:92:0d:ea:72:42:15:c1:57:54:30:05:6d:9c:81:
2f:bb:85:b4:f7:92:d5:7a:51:e2:b0:dd:a8:fe:23:
4a:0a:ef:6d:84:5c:d3:22:9f:4b:56:be:01:53:37:
2c:6e:23:e3:dd:52:54:25:ac:c3:f5:1a:3c:e7:28:
a1:53:12:d4:62:0b:d8:b8:61:8a:b2:58:b9:71:73:
d3:55:7a:a2:5a:05:36:e6:fd:72:4d:23:52:6c:33:
f8:b0:5c:73:82:62:70:19:48:8c:76:db:8f:0f:a9:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:4A:95:B5:92:D6:F1:95:BA:64:63:AC:A4:B7:DB:BC:C8:A3:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54817D06132011EFBA06D840017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.20.0/23
Signature Algorithm: sha256WithRSAEncryption
97:21:a4:eb:6b:a6:73:95:28:0b:0f:c3:ab:3b:49:b5:27:88:
b3:56:9b:11:fc:1c:47:cb:d0:2b:ac:41:d0:e2:39:6e:d3:9d:
e2:a5:91:2e:eb:ea:10:a7:86:da:90:0f:82:15:4c:32:e9:21:
82:a5:00:19:53:bf:ba:c4:dc:0d:90:71:72:9b:92:71:28:9c:
20:df:56:46:c0:1e:e0:f6:b3:07:df:db:33:15:29:2c:a8:76:
41:c8:61:17:29:aa:39:ae:a6:1d:8f:1c:f8:ae:58:40:a8:1c:
37:1b:45:9c:1d:a1:26:cb:e0:5d:f1:13:bf:36:2e:7b:fa:ef:
de:53:f8:e6:dd:4d:0c:d5:46:f5:eb:e0:44:9c:9f:8c:8c:3c:
f8:df:d5:84:0f:bd:3f:f0:1c:b2:31:77:bd:c5:52:73:53:8c:
38:7f:b8:03:c9:85:43:9f:d5:24:b3:00:14:22:27:76:e9:a4:
3c:be:94:47:e5:6f:ec:0f:d9:88:06:b4:85:0b:5b:2f:79:53:
5e:d7:ed:ea:6c:ca:22:c0:2b:8e:5d:21:ee:a9:0b:73:d5:e4:
af:a5:8c:e5:5a:df:56:c7:5f:5f:d8:15:7f:23:9e:be:0b:eb:
ff:48:6d:fa:2f:e9:8a:e2:8a:26:e9:70:43:0a:04:5e:37:c8:
08:91:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:30 2024 by rpki-client on console-ams.rpki-client.org