Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/574FCBC6A73811EF8FF0818A762E951A.roa
File: 574FCBC6A73811EF8FF0818A762E951A.roa (raw, json)
Hash identifier: Fwiw8vJOZ1lpf5MOWiHw5Ib7/f0tHeNyh6+jMTUWOFw=
Subject key identifier: 5E:D8:04:F6:26:71:4C:92:C8:93:DF:52:6D:D7:68:92:B5:69:EA:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D605
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/574FCBC6A73811EF8FF0818A762E951A.roa
Signing time: Wed 20 Nov 2024 12:09:50 +0000
ROA not before: Wed 20 Nov 2024 12:09:46 +0000
ROA not after: Wed 25 Dec 2024 12:09:46 +0000
asID: 273135
IP address blocks: 45.195.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54789 (0xd605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 12:09:46 2024 GMT
Not After : Dec 25 12:09:46 2024 GMT
Subject: CN=673dd18e-116d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:37:cc:2a:e0:70:97:ba:45:c8:07:4f:f7:
70:1f:3c:f6:fd:f8:04:fc:fb:cd:05:63:8c:07:5b:
5d:05:97:71:f2:7e:24:f6:5b:04:02:f8:40:99:f1:
f0:57:84:8e:e0:73:e5:7a:f7:c5:bc:82:16:b3:2b:
88:a6:9a:48:6d:21:c9:b5:f6:11:f2:fc:2e:23:67:
6e:f4:c3:3b:03:b2:0c:8c:d3:18:8b:5d:bf:04:5c:
0a:fc:4a:1a:b2:73:5c:4e:4c:1a:f7:bd:dd:73:f8:
bd:95:d6:64:85:84:09:d8:2c:a5:b6:4d:a9:34:d0:
f2:1a:40:af:58:67:eb:47:ef:e1:ad:f1:de:cb:e2:
80:c9:d3:dc:55:b9:8d:7f:36:37:4a:7a:2f:86:60:
e3:c6:ff:b5:2c:1d:8f:ae:b8:51:b6:b5:33:1f:49:
81:09:03:91:07:1a:2f:5a:ce:97:5b:8c:0b:66:4c:
82:6f:b6:56:9b:3d:0a:97:f0:d9:0e:47:58:18:07:
2e:02:40:71:a2:5b:48:a5:30:23:07:4e:cf:53:3f:
29:19:1e:ba:19:d5:11:b0:69:fc:2c:a4:41:e6:b8:
15:36:5d:7d:c8:db:2a:fb:b9:34:34:c2:25:df:1d:
57:8f:1a:be:9c:f2:5b:51:3f:34:7d:ac:68:70:b6:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:04:F6:26:71:4C:92:C8:93:DF:52:6D:D7:68:92:B5:69:EA:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/574FCBC6A73811EF8FF0818A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ea:13:a6:0d:e3:2d:79:ad:0e:5b:28:39:06:5d:c0:0c:78:
00:05:7e:f9:35:8d:46:a8:b0:73:48:7f:0b:c6:bb:58:3d:fe:
77:bf:0c:cd:b0:17:fd:54:78:3e:29:db:36:8d:3a:17:07:17:
48:ed:1f:1f:8e:d7:b2:70:3a:88:b9:26:5b:f4:8c:2a:23:e2:
0d:ba:28:b4:21:05:b5:f0:0a:fd:02:72:71:95:ff:01:a8:78:
97:8e:d5:99:ac:28:fd:15:78:29:05:c2:83:67:0b:f3:32:82:
6c:a0:ef:c9:3a:43:b3:2e:39:ba:f8:21:32:7f:25:45:d8:d6:
b0:24:25:4b:76:5c:1a:86:d0:3b:5c:c2:3f:9a:f0:8d:ec:20:
8e:65:96:ed:02:3d:5a:ef:94:a6:20:8d:2a:ac:64:74:4b:2c:
4e:5f:05:0f:81:7b:cc:dc:77:c5:e8:85:72:76:8c:ae:1b:c4:
69:65:bb:c5:71:37:ae:76:19:6d:a2:a8:dc:65:72:cb:dc:51:
30:ed:c6:21:32:59:87:f9:d0:c8:6b:1e:9f:29:31:b2:a5:aa:
67:62:93:d9:09:7b:a0:54:e3:44:37:c2:8b:17:8f:fd:04:ca:
bc:cb:d1:7b:fc:8a:ea:ec:cf:ce:60:4e:1b:78:26:10:a8:c7:
4d:2c:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:31 2024 by rpki-client on console-ams.rpki-client.org