Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/842389F4A19211EFBC6F188A762E951A.roa
File: 842389F4A19211EFBC6F188A762E951A.roa (raw, json)
Hash identifier: OmMnMv7WQRYqtBZlru7YWdYa5d/mfoiqB3Qx4e0VM0o=
Subject key identifier: 6B:05:A1:0F:C5:F2:F7:7A:E9:32:66:B0:07:D6:F8:4C:66:8F:03:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D232
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/842389F4A19211EFBC6F188A762E951A.roa
Signing time: Wed 13 Nov 2024 07:40:13 +0000
ROA not before: Wed 13 Nov 2024 07:40:09 +0000
ROA not after: Thu 12 Dec 2024 07:40:09 +0000
asID: 135377
IP address blocks: 45.203.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53810 (0xd232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 07:40:09 2024 GMT
Not After : Dec 12 07:40:09 2024 GMT
Subject: CN=673457dc-004a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:be:d1:29:d0:30:54:42:52:ec:23:f0:0e:f7:
6c:9f:5e:2f:5a:51:09:b2:0f:9f:e9:1d:e7:c7:63:
e5:47:40:71:45:96:07:c2:c2:1f:6a:b0:65:87:b3:
cc:bc:4e:01:11:c8:5d:49:03:58:9a:d3:82:8b:fa:
28:f9:da:ff:40:9c:90:f4:6f:da:f8:ac:bf:fc:a5:
19:02:3c:c1:f9:e2:46:ce:a7:de:f2:26:a1:7a:cd:
fd:21:66:ef:57:a7:96:80:ef:0c:da:ec:ba:72:a7:
94:6e:38:e4:68:57:01:b3:e2:3d:ee:fc:38:57:b7:
20:c0:23:da:58:44:33:cd:cc:56:d2:8f:b9:37:85:
44:b2:b5:4b:3e:dd:83:86:ac:e7:71:71:45:d4:a0:
73:0a:72:bb:5a:90:fb:49:24:15:75:73:80:f7:ef:
96:35:02:cb:83:61:69:8c:3f:8f:a0:88:b5:fb:8b:
93:86:9e:cf:83:6e:1c:bb:70:99:c1:d9:08:3f:84:
71:78:45:f8:d1:b0:4b:de:42:13:9b:47:3a:fc:e8:
db:f1:55:85:1b:e0:71:1b:55:d3:51:30:44:d8:1a:
c0:73:67:63:ad:e0:cb:da:8e:7f:3a:ce:07:3b:f3:
f3:a9:f8:ac:0e:a5:67:af:4a:87:3c:24:e4:1b:e7:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:05:A1:0F:C5:F2:F7:7A:E9:32:66:B0:07:D6:F8:4C:66:8F:03:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/842389F4A19211EFBC6F188A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.160.0/19
Signature Algorithm: sha256WithRSAEncryption
93:c0:16:67:53:94:28:13:76:f1:9f:fe:59:a0:6e:26:b4:00:
67:71:5d:42:87:e1:fb:49:ea:c5:4d:aa:51:21:d1:d2:11:3f:
0c:10:1b:a2:8d:f4:2b:51:ea:6e:ec:d5:2d:f6:64:e2:a6:e2:
08:31:cc:fe:23:52:ab:42:85:cc:4a:d9:e1:f1:32:42:25:c6:
64:8b:17:94:eb:d2:46:ce:ca:d2:05:27:6d:d2:b4:04:0f:f2:
51:3b:8d:66:48:f3:e3:73:af:cc:38:62:0d:50:0a:b8:ce:74:
ea:23:91:92:b2:71:52:59:cb:7e:82:a6:40:8a:f6:87:26:f0:
3b:95:1f:e3:dc:95:ff:0c:05:5e:76:cb:c2:20:3c:ea:11:50:
89:27:ae:7f:7e:27:97:fb:c8:69:ff:c7:82:98:b6:d0:aa:eb:
b2:67:04:56:6e:32:85:10:4b:df:17:49:4b:f2:f6:45:d2:5c:
c8:4f:3a:7f:1f:0d:bc:46:4b:4d:0b:b8:55:91:35:01:b7:ad:
4e:f8:b8:c5:ba:ea:66:86:a4:d6:03:92:91:b6:93:60:49:06:
82:87:40:07:b3:ac:a4:2a:23:54:b3:3c:20:5b:91:41:54:92:
f1:4a:2e:c4:c5:94:ea:f2:09:f1:8a:61:ad:12:81:f7:bc:cf:
c6:b8:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:38 2024 by rpki-client on console-ams.rpki-client.org