Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E48805E9F7E11EF87A2BE46762E951A.roa
File: 7E48805E9F7E11EF87A2BE46762E951A.roa (raw, json)
Hash identifier: dD85Op5y3pNbV354mUB9boGzCSiNqjrU7lBObtX1ixU=
Subject key identifier: DC:5B:E6:B9:84:BE:AB:9A:A7:EA:DC:AD:17:B0:21:41:B6:86:84:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D106
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E48805E9F7E11EF87A2BE46762E951A.roa
Signing time: Sun 10 Nov 2024 16:11:50 +0000
ROA not before: Sun 10 Nov 2024 16:11:47 +0000
ROA not after: Fri 17 Oct 2025 16:11:47 +0000
asID: 152450
IP address blocks: 45.195.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53510 (0xd106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 16:11:47 2024 GMT
Not After : Oct 17 16:11:47 2025 GMT
Subject: CN=6730db46-9150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:ad:ba:92:4b:d4:55:0e:8c:27:0b:96:b2:
23:3a:02:97:9d:36:74:d9:29:1a:94:1d:c5:2b:f4:
87:fd:68:96:76:d1:d5:5a:2a:35:91:f8:db:72:ab:
87:3f:74:94:d6:f7:ed:5d:96:cc:f5:35:77:7d:cf:
5f:91:1b:e7:dd:89:f5:c3:b6:d2:62:e0:6d:8d:de:
b4:f6:3a:01:86:80:f0:d1:b1:93:85:69:7c:22:e2:
bf:2d:50:67:d2:a3:94:5c:89:1a:33:65:58:52:55:
4e:b0:20:98:d2:8d:99:88:96:1a:8c:8f:f5:38:46:
12:7c:e7:54:ff:7c:74:ef:2e:e5:25:28:75:54:b7:
02:a0:ae:57:5b:f9:76:ba:16:80:5e:54:09:23:32:
a6:6f:38:84:f4:31:f0:e2:02:13:37:70:28:d5:ea:
ba:f4:11:95:21:37:0a:93:c5:2c:b8:79:a4:92:1c:
90:13:7a:ca:e6:ae:ec:14:fe:70:cb:da:a3:00:8f:
98:54:ee:16:ed:cb:4e:fa:b6:98:11:38:7b:59:86:
e8:1d:91:f8:35:2e:3b:9c:98:91:63:27:89:7f:86:
07:8e:19:01:e5:0a:82:6d:c4:e7:08:61:d4:e1:10:
7b:44:d3:f6:cf:12:c1:bc:c4:2f:f7:1d:11:ff:d9:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5B:E6:B9:84:BE:AB:9A:A7:EA:DC:AD:17:B0:21:41:B6:86:84:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E48805E9F7E11EF87A2BE46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:a4:1b:6f:a9:59:c7:ee:b6:eb:c5:c7:ba:f7:21:ad:fb:a3:
3d:7b:50:a2:85:c1:6f:64:e7:b6:c6:9e:cd:fc:a7:6d:8b:10:
01:c9:ee:90:e5:2a:88:e1:99:ad:4d:7c:4b:56:f6:c4:94:20:
ab:45:9f:63:89:7d:73:b3:1f:13:4e:d2:25:b0:c9:55:a6:59:
d2:5a:e8:d6:09:16:7d:6f:a6:eb:da:57:fc:d2:b3:99:ba:e6:
f9:e2:72:c0:86:a2:2a:4d:fb:06:b3:aa:e3:93:17:33:c3:3f:
1c:b1:3e:af:84:7f:83:0b:a4:ad:1a:46:a1:29:ad:06:37:3c:
b3:d6:c0:66:0f:24:64:c4:fb:c5:91:b4:0e:6b:b2:c0:c3:d2:
b1:9f:8d:d4:f4:97:9a:da:01:c5:1e:30:c5:88:86:28:07:d3:
e8:27:f9:29:65:a4:e7:f6:bf:b5:d6:d1:2e:95:be:fa:16:84:
3f:a9:ce:4b:50:1d:56:f7:fe:06:7b:96:cc:27:10:96:9a:b5:
65:6a:1b:8b:09:c8:e3:37:42:39:c0:31:2c:83:99:a7:06:6e:
b5:cc:01:b9:54:93:45:4b:0d:21:18:cc:ab:b6:82:6f:ce:71:
27:38:52:3f:4f:9a:6d:a0:45:4d:22:63:63:a6:5b:f2:7c:82:
bf:7e:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:37 2024 by rpki-client on console-ams.rpki-client.org