Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92F9EAF876CE11EE87E161184AD9E6FC.roa
File: 92F9EAF876CE11EE87E161184AD9E6FC.roa (raw, json)
Hash identifier: rQ2v8ijQkN44tAw5kURB0GtAR6gucKb3dKPfze84JqA=
Subject key identifier: AF:12:32:E2:87:13:D8:41:95:C6:90:73:B2:39:2A:39:9F:94:BC:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 4256
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92F9EAF876CE11EE87E161184AD9E6FC.roa
Signing time: Mon 30 Oct 2023 02:46:50 +0000
ROA not before: Mon 30 Oct 2023 02:46:46 +0000
ROA not after: Thu 19 Dec 2024 02:46:46 +0000
asID: 141190
IP address blocks: 45.200.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16982 (0x4256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 02:46:46 2023 GMT
Not After : Dec 19 02:46:46 2024 GMT
Subject: CN=653f191a-721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:00:55:94:d0:84:54:67:78:88:63:9c:f5:
45:f7:56:4b:67:a8:6a:5c:3b:05:dd:9d:87:37:cb:
3b:5b:e0:0b:1e:db:6c:28:a3:22:9a:d3:d5:57:29:
e3:ee:53:63:d9:f7:5f:a3:28:bb:1e:35:62:a2:c8:
27:c1:3d:32:0a:74:00:63:e4:27:79:24:39:57:94:
cd:2b:59:cf:d2:09:34:3a:f5:2d:21:3a:0c:73:f0:
89:de:06:98:97:27:10:12:ce:cd:54:7d:26:b5:9b:
8b:3e:70:cb:d5:ef:18:f5:28:a0:1a:9d:70:d8:a8:
f5:9b:00:3a:01:85:8e:00:fd:75:c8:47:7c:47:22:
93:86:c7:af:2f:13:11:0b:6a:1b:cb:e7:9c:c2:b4:
56:6e:0d:7b:e4:e2:d9:0e:4b:4a:34:b2:63:a7:4e:
21:25:d4:a9:e2:55:92:e2:65:25:22:4e:52:3d:5a:
b5:c1:ad:bc:95:9d:c3:63:79:ca:6b:c0:1d:22:f0:
61:08:62:33:9c:04:28:31:e5:55:80:c4:ee:b8:2b:
56:94:81:ad:ff:85:08:6f:a3:8b:e2:24:1d:80:7b:
94:40:c5:b8:32:32:ea:d4:f0:38:7e:0f:ca:4b:08:
d5:3e:0f:22:47:a6:88:d7:5d:a0:44:71:47:62:f3:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:32:E2:87:13:D8:41:95:C6:90:73:B2:39:2A:39:9F:94:BC:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92F9EAF876CE11EE87E161184AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.112.0/21
Signature Algorithm: sha256WithRSAEncryption
66:0d:33:11:70:b8:d2:93:e7:3e:6a:fa:18:7e:cf:ec:eb:37:
2a:5b:71:f1:55:71:3e:14:a6:00:ab:fe:fb:a6:3f:ef:ff:85:
59:56:9e:4b:1f:32:1f:79:21:19:d8:5a:fe:72:13:a4:f5:f4:
6b:93:b5:35:4d:33:a4:91:08:22:1c:63:4a:ed:6c:dc:d1:3c:
a4:c6:86:71:84:bc:1d:2d:7a:57:82:17:13:a7:9e:61:59:ef:
e9:26:ed:9d:07:e2:2d:56:a9:1a:1c:93:e2:68:0c:3b:8d:94:
31:5f:fa:16:2d:c7:af:e8:30:56:5f:db:6d:81:ea:93:b4:9f:
5a:41:52:e1:cf:f6:1d:27:fb:5e:7c:cf:e9:6c:52:37:fe:1f:
f3:8d:a4:73:f6:d8:ae:79:2d:62:d7:99:af:29:8c:29:ae:2f:
dc:34:6b:6d:d1:2a:5c:4e:53:b2:48:c8:cf:0c:92:94:0f:72:
70:63:86:6d:fc:60:00:0a:a7:fa:04:28:12:f7:ac:b5:b3:8a:
d8:a4:04:eb:aa:30:ac:b4:55:43:e5:9b:40:fa:7f:c3:b5:d6:
1e:8a:ff:9b:83:e7:47:8e:5a:30:7b:a7:5c:09:6b:50:87:44:
3e:0b:a2:66:06:ad:74:a6:28:3d:c7:67:44:f1:40:79:f3:4e:
ff:10:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:40 2024 by rpki-client on console-ams.rpki-client.org