Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890E94308D3911EF9E6CA5A3762E951A.roa
File: 890E94308D3911EF9E6CA5A3762E951A.roa (raw, json)
Hash identifier: ryGFQFLu/wEggctIZRWs+T0D9uMkB7zID0tsQou3YGA=
Subject key identifier: E4:52:C8:E8:4A:CC:0F:66:0A:D1:AE:A4:EE:8A:F8:B3:72:92:BD:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C6D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890E94308D3911EF9E6CA5A3762E951A.roa
Signing time: Fri 18 Oct 2024 10:12:52 +0000
ROA not before: Fri 18 Oct 2024 10:12:49 +0000
ROA not after: Sat 04 Jan 2025 10:12:49 +0000
asID: 136950
IP address blocks: 45.195.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50902 (0xc6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 18 10:12:49 2024 GMT
Not After : Jan 4 10:12:49 2025 GMT
Subject: CN=671234a4-4c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:de:19:9e:e4:1b:66:38:fa:07:4b:eb:2d:
eb:64:e1:08:c1:32:e1:8a:5a:85:15:39:7c:67:b0:
dc:76:44:4b:ad:b4:8a:d1:80:da:92:6b:0d:35:cb:
2d:b4:20:b9:a9:42:2e:e8:c3:45:7f:c9:ca:1a:02:
fe:e9:ea:4f:27:b3:d1:30:7d:6c:6e:32:8c:40:4d:
b5:19:d8:4a:1d:3a:0c:36:07:9d:7a:6d:88:65:bf:
fb:25:ff:15:70:5e:36:59:ba:ac:53:6e:66:85:1f:
ca:6f:a5:2c:c5:ed:ed:69:8c:2e:54:1e:5a:de:0e:
60:b2:e0:c0:9e:98:65:22:2b:44:30:5a:66:ac:5a:
80:4c:02:bf:46:b6:50:0e:d7:4e:b4:05:d9:0c:c0:
fc:17:cc:a0:85:58:3e:5d:ba:64:02:56:87:77:fd:
02:d7:53:d4:32:73:d5:79:72:8b:1f:1f:ce:a9:a1:
c9:ba:1e:a4:3e:44:44:d9:5c:67:f9:46:9d:fe:61:
c0:95:eb:44:bb:2d:e5:d2:9a:fb:49:1f:3e:b9:8c:
a9:c0:e9:22:03:36:d6:33:2f:a5:74:b3:36:80:c4:
6a:1f:9a:db:24:15:b9:db:9b:db:f0:67:d6:88:fa:
bf:cd:37:f5:1f:71:cc:9b:0e:0c:b2:71:23:5e:8a:
5f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:C8:E8:4A:CC:0F:66:0A:D1:AE:A4:EE:8A:F8:B3:72:92:BD:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890E94308D3911EF9E6CA5A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:57:64:a4:2d:96:ba:b6:27:1e:30:e1:67:a5:cb:e9:58:7e:
38:7d:4d:f1:cb:6f:8d:ac:90:38:63:e2:66:10:ed:45:2f:4d:
02:05:23:69:60:ee:f0:e8:1a:51:bb:48:46:a5:04:ad:12:64:
8a:5a:77:cd:4d:27:f4:5b:01:eb:4c:6d:a8:d5:4b:66:bf:c2:
d9:df:00:87:01:40:df:34:89:d4:b9:e0:e9:48:c2:ae:14:0c:
d2:23:b9:c5:06:2a:e8:59:09:2a:03:ae:20:b0:c3:f6:e1:c3:
ee:ea:ee:c2:a7:c9:46:fa:bf:b4:91:45:29:50:27:0f:bc:19:
9e:6d:cd:f1:ac:1f:80:40:e7:fc:08:2c:17:c4:17:cf:88:09:
6e:42:7e:f0:01:72:6a:51:24:e6:6d:cf:f1:31:be:e1:2e:f2:
64:92:5f:89:0f:c4:06:ee:cf:94:27:d3:ed:7c:af:6a:0a:b4:
c1:09:46:ac:7e:b4:9a:fc:05:ba:e2:48:85:12:63:0b:f5:0e:
56:3d:c9:9c:f4:a7:2a:14:5e:49:3e:e4:32:1c:61:33:60:b4:
27:5e:ea:5c:33:1b:aa:ea:93:15:ad:6e:44:e9:ce:90:d4:a1:
69:00:13:94:c7:95:6c:80:44:6f:8c:73:dc:11:d8:b5:74:82:
54:dd:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:39 2024 by rpki-client on console-ams.rpki-client.org