Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9238003CA4D611EF87ECB299762E951A.roa
File: 9238003CA4D611EF87ECB299762E951A.roa (raw, json)
Hash identifier: k7Fe0VW9yjFZUUTRbJF7mRXeSBWnWLEjOFW8J/OOupw=
Subject key identifier: D4:21:74:61:27:B7:89:63:F9:A5:AA:DA:03:05:10:E7:53:AC:D5:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D507
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9238003CA4D611EF87ECB299762E951A.roa
Signing time: Sun 17 Nov 2024 11:24:56 +0000
ROA not before: Sun 17 Nov 2024 11:24:52 +0000
ROA not after: Wed 27 Nov 2024 11:24:52 +0000
asID: 39600
IP address blocks: 45.197.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54535 (0xd507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 11:24:52 2024 GMT
Not After : Nov 27 11:24:52 2024 GMT
Subject: CN=6739d287-fa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:42:7f:e3:55:f2:aa:00:d9:c4:50:02:93:
e7:86:ed:71:b8:cf:77:d7:25:0b:c9:28:34:a1:da:
cd:5e:2d:d2:75:1c:04:8f:8f:5f:07:59:3b:bb:05:
fa:d6:13:ce:fe:cc:3f:5f:f1:a7:c2:cb:20:c8:1e:
6a:c0:c7:47:8f:61:77:ac:0c:4b:59:22:19:2c:67:
39:cf:83:0c:96:06:51:f8:b6:cf:03:bc:73:e4:2e:
73:94:58:a2:c9:c1:80:7d:04:3e:c2:16:af:9a:5a:
f0:6b:9d:14:58:b2:63:6c:64:b3:74:86:4d:c0:ab:
66:16:7b:d1:44:cb:3b:13:84:d6:ae:0d:7d:24:2b:
6c:d3:e3:43:b4:33:83:0c:18:33:34:cf:f4:d3:83:
4a:87:7d:8c:28:50:5e:55:e8:78:5e:0d:91:16:6c:
46:64:72:0a:21:2f:2f:2e:08:ae:18:d7:c7:50:08:
ba:18:0c:44:84:23:13:c3:cb:09:60:13:0d:4c:07:
46:9d:2c:28:b0:19:7c:9a:7b:5f:0b:eb:1a:1a:9a:
ef:9b:f5:44:43:cd:cb:0e:7f:a6:5e:f3:da:03:64:
c8:f5:ff:8e:03:90:c0:4a:06:c3:50:25:f5:7f:8c:
fd:79:ed:42:f6:e7:2c:82:19:6e:c9:23:44:2d:36:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:74:61:27:B7:89:63:F9:A5:AA:DA:03:05:10:E7:53:AC:D5:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9238003CA4D611EF87ECB299762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.196.0/22
Signature Algorithm: sha256WithRSAEncryption
50:4e:e3:0e:ff:c0:7c:db:57:93:18:e5:16:70:93:58:ec:2d:
90:4b:8d:f8:8f:7b:eb:f8:36:5b:9b:36:cc:e7:f4:46:74:69:
28:77:ed:1f:a7:73:89:2e:29:f4:a1:48:0c:17:f1:c5:11:9a:
f4:35:78:6d:94:be:5a:37:39:9a:ad:5b:bb:8e:05:ea:88:5f:
40:4e:fd:c5:f1:85:bf:25:f7:e2:54:81:67:bc:7d:2a:d2:61:
73:ba:fe:a4:2f:75:fb:f0:8a:b2:1e:60:42:dd:25:69:fa:cc:
fb:87:7d:93:59:0a:ab:38:81:2d:4a:84:fd:4a:fa:6f:97:32:
a7:c3:3e:95:a5:c3:bc:0e:01:69:38:19:ae:20:cf:dd:33:de:
24:9a:41:90:b1:2a:b6:33:ff:90:a9:25:02:2e:8f:21:30:5f:
69:bf:70:8e:db:a1:61:0b:63:7f:c0:1b:c3:6c:17:bc:47:2e:
14:7f:d5:44:cc:06:5f:66:20:8c:70:4b:c5:10:2e:25:09:6d:
b3:74:89:7f:bd:9a:8f:ce:b6:39:fc:19:bc:f8:06:ef:33:e0:
8f:9f:f4:83:49:8b:6e:f1:8d:64:84:f3:bd:74:d0:92:ec:26:
9c:31:46:6f:e9:57:03:0a:23:8d:6c:59:e4:49:52:ab:93:d9:
ad:6a:fd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org