Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5662F7B6701411EFA621A5B1762E951A.roa
File: 5662F7B6701411EFA621A5B1762E951A.roa (raw, json)
Hash identifier: G5TANYquod45TSoYg3HjDJpnms5NKD91MFW56Aa349M=
Subject key identifier: 42:E8:09:92:20:8E:78:4D:3B:19:A0:5B:FA:19:93:AA:A6:44:6F:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B4C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5662F7B6701411EFA621A5B1762E951A.roa
Signing time: Wed 11 Sep 2024 08:03:32 +0000
ROA not before: Wed 11 Sep 2024 08:03:29 +0000
ROA not after: Thu 02 Oct 2025 08:03:29 +0000
asID: 393294
IP address blocks: 45.199.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46272 (0xb4c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 11 08:03:29 2024 GMT
Not After : Oct 2 08:03:29 2025 GMT
Subject: CN=66e14ed4-a8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:69:f1:fb:51:75:0b:1b:f2:2b:5f:cb:c4:
f6:b3:8f:61:00:ff:a9:3d:97:98:ec:0f:65:66:18:
e5:0c:84:e6:e6:8d:a4:f7:60:d0:b3:73:6e:ff:18:
1f:77:2e:57:c9:5c:65:07:6b:c1:c9:72:94:d1:53:
30:4d:b7:36:6e:bb:42:a0:c9:48:4d:49:9c:81:5e:
ce:1b:b3:9d:fe:cc:ea:a2:c7:b2:9b:49:d2:5f:c5:
19:de:3b:a0:68:84:87:4b:c4:ee:76:d1:98:5d:b1:
67:0e:6c:42:75:4d:c0:bb:f0:8c:93:e7:24:a4:22:
9a:1c:8c:c4:41:72:b2:1f:99:93:1a:45:78:73:e5:
60:4b:2c:75:7c:15:54:c4:f2:ae:16:07:47:6f:82:
0f:92:03:c6:d2:81:07:75:c8:bc:d7:90:09:67:1c:
96:c0:ae:ca:88:1a:f0:f3:8f:c5:48:50:4a:10:84:
ba:77:c4:c2:46:5a:ee:ff:16:a9:00:01:47:7e:1a:
f6:6b:2d:c3:a6:3d:b8:51:5c:af:4f:3b:21:e9:c6:
d9:23:5d:99:82:4e:c5:ca:26:7c:29:a4:64:a4:66:
dd:e5:a8:56:34:cf:dd:73:04:26:74:b7:65:c7:a1:
22:86:7b:b0:65:dd:a0:b6:0c:80:94:47:18:12:a1:
ff:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E8:09:92:20:8E:78:4D:3B:19:A0:5B:FA:19:93:AA:A6:44:6F:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5662F7B6701411EFA621A5B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.160.0/20
Signature Algorithm: sha256WithRSAEncryption
12:03:94:df:ae:fa:c9:87:ec:90:cb:ce:5e:57:07:f1:b9:16:
12:1a:da:79:c7:53:65:8f:95:b0:0c:e5:dd:d1:c5:82:b0:77:
09:89:fa:c0:99:3e:06:0d:2d:1d:06:87:14:4e:62:21:95:7b:
4c:0f:a0:e6:7f:14:7f:da:c9:05:17:f6:f0:18:d7:9c:94:20:
ee:bd:d2:61:2f:a2:8c:10:04:51:a7:f0:81:9f:28:fb:cf:c5:
85:7c:63:6b:9f:da:e6:bf:8b:63:54:f7:c8:09:f3:84:8b:75:
87:e3:86:58:c4:2d:07:e8:78:ae:0f:d2:3e:e6:f7:ee:ab:a4:
9d:c0:af:94:14:21:81:d5:74:00:64:78:96:be:22:eb:98:c6:
70:4d:50:2e:9b:2d:ac:5c:10:17:58:54:00:22:b1:42:71:13:
87:26:d1:d4:4c:df:c2:22:ae:d1:09:5a:42:5a:c7:9a:2a:e5:
2e:db:fe:8d:0b:31:9d:1f:96:8f:80:d8:1a:35:06:5a:23:bf:
e4:33:34:a3:9e:db:0a:67:a1:20:71:8d:8e:8d:48:e6:c6:18:
34:bb:40:9f:da:3b:e5:65:98:13:a6:c5:d1:65:0b:15:8d:b4:
c0:08:f7:e0:18:c9:e5:a0:7b:dc:5d:fe:da:04:41:e8:00:7f:
39:86:a4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:31 2024 by rpki-client on console-ams.rpki-client.org