Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82D52460A0DC11EFBA9F3C62762E951A.roa
File: 82D52460A0DC11EFBA9F3C62762E951A.roa (raw, json)
Hash identifier: ZTuaJdG9SEaxxvH8J0o3FRcY5z7zorpRpba+O+lzSwg=
Subject key identifier: 51:04:1F:A8:38:C1:6D:13:FA:A0:C9:B1:6B:74:EE:4C:87:1F:92:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D189
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82D52460A0DC11EFBA9F3C62762E951A.roa
Signing time: Tue 12 Nov 2024 09:57:22 +0000
ROA not before: Tue 12 Nov 2024 09:57:18 +0000
ROA not after: Sun 29 Dec 2024 09:57:18 +0000
asID: 149440
IP address blocks: 45.195.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53641 (0xd189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 09:57:18 2024 GMT
Not After : Dec 29 09:57:18 2024 GMT
Subject: CN=67332682-7c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:e4:bb:c0:be:00:4a:3c:27:9a:1a:77:f4:
d0:2e:e1:ec:9e:17:67:53:2c:9f:82:35:16:1a:4c:
4b:31:f7:ad:e2:b8:90:0e:64:e0:9d:7b:5b:ac:92:
fe:d9:6e:93:a7:98:af:ec:d3:4a:d2:86:76:ad:d2:
c6:9d:cc:a1:43:ae:d3:ed:85:ef:b7:16:ee:d5:49:
5b:4a:ee:b2:9d:73:bd:58:53:f0:b5:f0:c7:1f:18:
dc:7c:87:c1:fe:9b:d6:99:5a:77:6a:07:d6:41:9a:
6a:bb:33:83:aa:bb:54:37:dc:35:18:ea:f4:3c:d1:
d1:2b:9e:57:71:80:87:09:7f:3b:9b:43:0d:a4:26:
58:34:49:0f:e3:b1:bb:01:49:9e:8d:a1:ef:e7:a7:
6d:80:9b:fb:f9:07:66:f6:d1:8a:99:ab:37:94:30:
e3:29:51:79:95:1b:bf:ac:8a:b8:82:9e:a8:c2:1f:
d6:43:75:8a:a4:ad:07:76:63:06:f4:38:b2:dc:c8:
96:ec:a5:94:cc:6c:7f:e4:46:0d:c7:72:20:3f:91:
d9:3f:66:de:6f:4b:43:84:ba:0f:50:88:ab:8c:92:
4a:4d:66:f7:72:12:61:2d:83:fb:37:74:7d:86:b1:
d1:8a:0d:a1:81:d6:8e:64:c0:1c:d4:84:17:0d:2b:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:1F:A8:38:C1:6D:13:FA:A0:C9:B1:6B:74:EE:4C:87:1F:92:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82D52460A0DC11EFBA9F3C62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.76.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3a:71:89:40:bc:62:30:49:01:e6:c7:94:44:19:06:2f:25:
2b:8e:5e:41:9a:4b:70:87:8e:b0:7c:e2:2f:4f:69:b7:ec:91:
03:3f:10:47:30:f3:95:f8:04:32:6e:2e:05:af:2b:59:16:8f:
fc:00:e4:55:1c:df:0c:64:1f:14:4a:7b:c8:ee:8c:f3:ea:bc:
12:18:64:ff:86:bd:7c:14:2f:a4:69:76:b1:f5:47:66:68:ba:
f5:60:39:c3:da:7f:80:7c:d9:8b:96:ac:d3:95:01:2f:bd:ee:
f1:f7:6c:b8:67:ea:ad:7e:28:64:51:ee:08:95:bf:f5:b9:66:
bf:f2:84:59:07:cf:0f:3e:4b:cb:a3:c1:0a:14:7a:d7:b8:0c:
da:3b:51:d5:67:72:ab:2d:a4:5f:45:28:8e:06:23:ea:0a:18:
08:06:84:a0:17:05:7e:e5:3d:ac:d4:72:dd:84:6d:9e:1e:74:
e4:db:7b:dc:87:aa:8d:73:d9:a5:c8:44:a5:a8:6c:3e:05:d6:
88:19:20:45:d9:87:83:7f:fd:25:44:13:8f:c7:a8:ed:bb:ab:
96:15:6a:2c:ab:83:0d:8d:56:e6:79:83:f2:01:a9:30:7b:92:
dd:08:e1:f7:30:9f:a9:1f:47:4f:b9:a2:ba:01:4a:3f:64:4e:
4c:f0:df:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org