Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562D1F90A45F11EFB789C3A1762E951A.roa
File: 562D1F90A45F11EFB789C3A1762E951A.roa (raw, json)
Hash identifier: R4nWLHYiMUM7uBpR6/O+YhiLl+2N72BlAvt/s3W24ik=
Subject key identifier: 6E:FA:AF:95:B3:89:23:F9:26:F0:D2:7D:59:8E:D6:E6:40:D8:1F:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D44E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562D1F90A45F11EFB789C3A1762E951A.roa
Signing time: Sat 16 Nov 2024 21:11:25 +0000
ROA not before: Sat 16 Nov 2024 21:11:21 +0000
ROA not after: Sat 30 Nov 2024 21:11:21 +0000
asID: 39600
IP address blocks: 45.195.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54350 (0xd44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 21:11:21 2024 GMT
Not After : Nov 30 21:11:21 2024 GMT
Subject: CN=67390a7d-37be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:be:09:4a:3b:9e:e3:52:f8:77:00:24:ed:
88:ed:4c:67:5f:2b:4c:d6:9d:66:12:1d:03:eb:ec:
df:96:72:0e:78:44:82:c4:1e:c0:61:a1:59:48:b8:
b1:78:2b:65:2c:6c:e4:a0:44:68:fd:6b:ee:a0:25:
0e:41:1f:38:44:d3:b6:73:25:c7:1a:da:d3:b9:28:
5e:44:48:72:8d:fa:88:da:e9:0c:1b:83:50:c3:e9:
28:b7:2b:12:ae:7e:62:e9:53:7d:e4:4e:13:d4:65:
15:35:ee:ea:1b:ab:45:92:8e:ab:88:9d:bd:ac:c5:
a5:84:d6:23:6d:73:4d:0f:e3:73:b4:ca:7d:33:66:
67:89:02:a5:aa:f6:a6:ac:da:81:81:2b:57:93:fb:
30:e0:5d:b7:8e:a3:6d:7f:e1:35:1c:ec:4c:84:15:
1f:a4:08:da:4d:b1:74:ba:24:4d:ea:2a:88:c9:dc:
a5:6d:9d:a8:c0:59:dc:1a:3e:57:27:34:d1:fd:56:
df:d8:4c:8a:5e:3f:a0:64:f9:83:8c:bd:70:60:5a:
f3:64:5e:2c:0e:14:39:95:b6:b0:e2:38:20:3b:a1:
12:b6:0a:f9:d7:10:f3:fa:49:7b:a3:bd:32:fb:1b:
12:1e:cd:41:5b:01:95:1a:81:a3:59:45:f7:02:4e:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:AF:95:B3:89:23:F9:26:F0:D2:7D:59:8E:D6:E6:40:D8:1F:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562D1F90A45F11EFB789C3A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.156.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:d8:cf:d5:36:66:3c:3f:cb:71:ae:78:71:3f:ff:1f:a8:29:
76:16:66:78:35:20:3a:0a:c9:38:47:7a:17:db:54:67:70:23:
31:e2:6a:a6:4a:65:61:e8:2f:09:f3:0e:1c:bc:af:9e:63:20:
78:2d:a8:d2:61:2b:4a:f6:3e:6a:ab:e6:52:ee:82:65:f8:f9:
d0:f4:be:9e:a8:d6:86:0e:88:74:e4:1a:03:2d:f9:78:04:59:
eb:f4:1c:c7:78:99:d4:41:e1:82:c6:74:2b:53:07:ce:13:6d:
e9:ee:c5:c4:2e:fe:52:48:d3:5e:59:c8:f8:8d:80:3a:ce:ca:
e9:8c:dc:0e:1c:29:3b:ba:5c:2d:86:76:f6:5c:fa:61:12:71:
33:49:f7:7f:d1:04:81:a2:f1:f1:cf:f8:fc:e4:9c:73:fc:86:
dd:89:d4:a1:ad:e4:ec:cc:78:bf:ba:c2:06:88:9c:51:eb:a2:
b9:07:93:3b:65:38:56:58:a6:c9:f4:05:9b:91:4e:d0:13:4e:
4a:c9:6e:29:75:55:b6:9b:a0:5e:1f:ea:e4:bb:a1:63:04:0d:
7e:c5:e3:80:70:e2:a7:4d:8f:38:11:07:19:f6:3b:0b:7e:26:
92:88:90:91:11:a2:8c:cb:a2:7b:6f:cb:84:a6:81:4e:58:7e:
90:b1:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:31 2024 by rpki-client on console-ams.rpki-client.org