Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E83CD78A44711EF8C33418B762E951A.roa
File: 5E83CD78A44711EF8C33418B762E951A.roa (raw, json)
Hash identifier: AZe+ziKCqW1yh4idmfh7B0jk6V+tkcMq4iseAAA4omw=
Subject key identifier: 6E:42:62:DD:64:D6:BF:30:13:A3:F1:58:43:8D:17:C7:D5:25:1D:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D37C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E83CD78A44711EF8C33418B762E951A.roa
Signing time: Sat 16 Nov 2024 18:19:51 +0000
ROA not before: Sat 16 Nov 2024 18:19:47 +0000
ROA not after: Mon 25 Nov 2024 18:19:47 +0000
asID: 399989
IP address blocks: 45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54140 (0xd37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:19:47 2024 GMT
Not After : Nov 25 18:19:47 2024 GMT
Subject: CN=6738e247-b59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e6:7d:5a:20:61:b3:c0:a7:47:18:2d:ad:99:
4a:f2:b7:27:10:d3:6d:b6:37:46:08:b9:55:80:36:
8d:d7:d4:ac:ce:b2:1f:86:07:68:3f:f0:15:16:45:
77:db:b5:cf:09:de:43:e8:aa:bc:91:32:c8:de:04:
14:9f:01:fa:20:4d:32:b9:c1:e1:27:fe:76:d8:7d:
15:c0:dd:5c:85:f4:44:69:7a:06:e2:d2:d6:42:6f:
e1:8f:13:15:ca:0f:8d:91:e7:0d:75:35:05:7b:9d:
95:af:ab:bf:de:57:24:f8:58:29:cd:bd:b6:a0:ba:
bd:4b:f6:47:b4:cf:b7:82:56:e0:d3:20:9b:24:40:
10:76:27:c0:1f:2f:53:a0:e4:60:d4:06:1b:b9:e0:
71:91:05:c8:3d:ad:41:a7:54:4a:04:b4:9a:b9:07:
b8:3c:2c:09:60:78:96:fd:f3:79:bf:28:20:4c:7e:
9a:93:17:e7:5f:4e:9e:33:d6:2b:fd:18:39:b4:33:
5a:9e:6e:f3:66:4a:cf:1e:22:ad:e0:cf:fb:c7:37:
a7:1c:7f:06:9f:e6:75:22:71:c2:7f:0c:c2:7a:a0:
58:5e:01:62:62:6d:da:80:45:e0:1a:c2:0f:30:e5:
75:da:71:74:ab:33:09:63:b4:19:fe:e0:ca:f5:a8:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:42:62:DD:64:D6:BF:30:13:A3:F1:58:43:8D:17:C7:D5:25:1D:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E83CD78A44711EF8C33418B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b4:be:44:ae:1f:b4:38:df:02:e1:46:13:dc:d8:e3:39:f9:
15:3e:31:f8:b3:d9:48:a4:0c:65:79:23:4f:0a:fe:64:09:15:
00:1a:84:3c:84:6b:d0:1c:1d:a5:c5:86:2b:ef:e9:4b:97:3b:
8a:31:9c:45:80:21:43:26:71:10:56:48:92:b9:47:7b:2b:07:
f2:55:b9:fa:92:a5:f6:df:5b:1c:78:bc:bd:39:b7:dd:ab:ab:
ca:f4:0c:41:ef:0a:fe:69:f6:05:74:2f:b8:25:9a:91:a9:18:
2a:6b:6d:7a:b9:79:78:68:89:9d:07:1c:53:4f:36:c6:67:04:
6c:89:97:b2:24:1c:54:2a:3d:7d:e9:d2:bb:d4:6c:cc:be:16:
5b:c4:9e:18:9b:94:d3:38:af:41:0c:66:81:01:b2:7c:b4:54:
f7:84:22:95:15:06:38:d8:f7:4d:94:d8:e0:23:e9:b5:2b:be:
c4:8b:93:a4:61:c7:65:9e:82:77:54:d7:a3:89:5d:7e:f0:52:
9e:16:2f:62:f7:4e:f4:41:c7:af:88:0b:c8:34:b1:1f:24:20:
d3:b2:26:7b:7e:3d:0b:ed:0a:d0:c4:43:58:aa:c5:2f:11:ff:
30:f4:9c:49:01:55:86:6d:ad:e9:ab:a0:92:6a:bd:99:08:44:
0e:a0:9f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:32 2024 by rpki-client on console-ams.rpki-client.org