Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/560543E4A4D711EF9CC60EA0762E951A.roa
File: 560543E4A4D711EF9CC60EA0762E951A.roa (raw, json)
Hash identifier: E0smt6O8ngiq704UItRxXin7IWPMyGGSzin/JD1EkEs=
Subject key identifier: A8:74:BF:2A:A1:07:29:D1:DB:BA:5C:47:CF:C0:89:BD:A9:3B:AE:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D511
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/560543E4A4D711EF9CC60EA0762E951A.roa
Signing time: Sun 17 Nov 2024 11:30:24 +0000
ROA not before: Sun 17 Nov 2024 11:30:20 +0000
ROA not after: Wed 27 Nov 2024 11:30:20 +0000
asID: 39600
IP address blocks: 45.194.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54545 (0xd511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 11:30:20 2024 GMT
Not After : Nov 27 11:30:20 2024 GMT
Subject: CN=6739d3d0-907c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:e2:81:1c:60:43:d1:c0:06:12:7b:0c:a0:
4c:42:d8:de:0f:17:12:fa:95:a8:ba:c5:81:b9:07:
10:0c:20:69:7a:f9:0d:0a:83:b4:67:a8:86:98:d8:
64:9f:f3:ee:b8:ae:01:42:22:34:37:e6:5a:64:78:
e2:4f:0a:1f:86:5f:ff:65:e2:2b:88:31:f8:0f:b5:
71:7a:a2:4c:9b:28:39:f4:01:67:79:25:a6:7e:4c:
be:d8:24:73:18:cf:96:00:7c:8a:4d:d3:4b:ac:28:
e3:b4:1e:5a:79:87:e2:4f:9f:81:76:b7:41:4b:c7:
1d:60:66:50:50:9c:06:c2:5a:6e:83:23:a9:c5:38:
da:48:c2:75:c9:dc:16:ed:f9:10:30:33:99:74:1b:
29:1c:30:26:57:46:b1:2f:52:22:42:95:eb:b3:1a:
04:0d:32:07:4a:6b:b2:32:3e:58:25:b5:f9:63:39:
ae:41:5b:05:27:5a:ef:1d:35:98:59:78:b9:5f:6f:
97:60:72:79:25:a5:70:5e:cc:7b:86:11:0b:f2:6d:
d0:5c:18:c1:f5:e6:d7:7c:55:22:4f:94:c8:14:e1:
9b:61:f3:20:25:19:07:4f:8b:46:a9:c8:bb:4b:df:
c9:f8:4d:be:51:3a:88:0a:a9:19:47:44:4d:7a:70:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:74:BF:2A:A1:07:29:D1:DB:BA:5C:47:CF:C0:89:BD:A9:3B:AE:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/560543E4A4D711EF9CC60EA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:eb:99:64:91:67:fd:cf:3c:61:22:05:ee:f1:e2:23:31:d0:
11:de:eb:03:90:ee:74:36:a8:98:e3:a0:a1:03:e5:3c:68:40:
af:fc:79:42:cf:2f:8c:ae:50:38:cd:ee:16:b8:1a:5c:c7:94:
18:e4:2e:85:a9:4c:03:64:87:7f:14:e2:d8:1d:ab:36:02:fe:
b8:dd:0b:61:27:60:68:0d:bf:eb:b6:cb:51:39:e5:17:e0:03:
62:a0:5e:b3:8b:de:10:d6:38:c5:05:4d:ca:48:f9:8b:54:72:
aa:65:11:5f:f6:d6:ea:f4:1c:73:0c:14:d4:79:c1:3f:5d:08:
86:3a:2b:80:40:38:91:96:d0:ef:d7:05:13:eb:40:4f:82:64:
0c:fe:82:bc:e5:6f:45:bb:8f:1f:49:d0:b7:ae:4a:c1:e4:e8:
83:32:b9:79:7b:c7:31:55:0c:1b:1b:6a:3a:1c:c8:18:52:c0:
1f:b2:84:b6:e0:39:b1:29:c9:ef:f4:6b:1b:a7:86:21:09:16:
75:19:28:c4:67:a1:7d:37:52:63:83:f0:b1:11:d6:d7:fd:47:
af:8a:32:8c:44:9d:55:53:a0:59:af:1b:5a:77:04:3c:91:44:
96:b3:f6:bf:8f:02:6b:ab:a9:f4:f6:f2:c2:5e:18:a7:84:eb:
fd:a3:fb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:29 2024 by rpki-client on console-fra.rpki-client.org