Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/945165509AAB11EFAE9A8563762E951A.roa
File: 945165509AAB11EFAE9A8563762E951A.roa (raw, json)
Hash identifier: k+ksQAGVwZfhdCL5mWrOcGqb9cNa7bl9JhYQxUQzn5E=
Subject key identifier: B4:11:36:04:DC:93:C2:B8:04:51:C3:3E:56:5D:3A:DF:07:C0:AE:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CD92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/945165509AAB11EFAE9A8563762E951A.roa
Signing time: Mon 04 Nov 2024 12:51:59 +0000
ROA not before: Mon 04 Nov 2024 12:51:55 +0000
ROA not after: Tue 03 Dec 2024 12:51:55 +0000
asID: 139646
IP address blocks: 45.200.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52626 (0xcd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 12:51:55 2024 GMT
Not After : Dec 3 12:51:55 2024 GMT
Subject: CN=6728c36f-4919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:a9:08:44:24:f5:19:60:9c:91:56:83:64:
78:b5:a3:02:d5:6b:14:83:84:f7:8b:41:3c:2a:b8:
e9:72:ca:39:67:4c:bd:39:1a:ca:32:55:f5:c0:54:
e0:e9:97:3d:75:28:ad:2f:af:40:0d:57:1a:41:3e:
97:fe:ce:9d:9b:ea:8f:e4:11:99:88:9c:e9:81:46:
bd:2f:c9:6c:bf:cb:a1:76:c6:d7:06:07:0c:5e:35:
bd:c5:4d:ef:45:83:16:0b:80:e1:80:4b:6b:e4:4b:
c6:aa:b9:66:58:2a:93:3b:c7:52:65:d1:bc:fa:47:
26:0c:36:f8:f5:1b:c2:84:2e:93:02:7b:84:47:14:
a1:a8:9c:b1:e5:c7:23:aa:4b:00:41:4a:4f:7d:85:
82:f4:43:aa:60:58:ea:41:a8:38:41:ca:e5:39:e6:
5a:a0:58:d0:f4:3f:62:fc:34:05:9b:f3:ea:85:f0:
20:62:55:2e:2b:e8:5b:50:1e:b1:2c:01:20:e4:13:
5d:55:9b:ca:e8:6b:e0:7d:75:b5:ed:56:ee:68:a5:
91:9e:b2:46:8f:e4:2c:ce:04:00:cb:99:df:a4:94:
d2:bf:55:b3:43:51:64:78:0e:14:9b:95:25:30:fc:
09:f1:ae:50:a8:a3:68:dc:22:a9:9b:d9:d7:17:0a:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:36:04:DC:93:C2:B8:04:51:C3:3E:56:5D:3A:DF:07:C0:AE:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/945165509AAB11EFAE9A8563762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.18.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:b9:36:db:93:2c:fe:ad:40:5b:c6:63:03:2f:f4:06:59:ca:
69:92:15:f4:19:20:ad:9d:72:e3:47:0a:4a:67:4f:d6:7f:fc:
e7:41:15:c3:3f:e5:36:17:c1:6a:07:85:5f:81:8f:63:f4:ad:
40:f6:bc:37:0a:05:cb:34:fc:fe:52:3f:2e:c5:66:41:95:12:
42:41:d5:e5:6e:90:1e:55:82:13:9c:1c:5e:47:9f:e2:41:06:
b7:73:31:f1:27:7c:87:0c:92:b7:75:b4:12:fa:cd:f9:1d:3b:
78:02:f6:73:df:22:67:96:33:cb:f6:ee:19:d9:86:39:f0:e0:
ab:c7:ba:a4:ba:6f:55:53:51:c0:87:af:e4:a6:fb:c8:28:dd:
1f:03:15:44:dc:e6:26:c4:b8:9a:82:27:f4:e8:16:4c:58:57:
eb:b8:18:69:43:24:e3:13:18:5b:13:38:ca:93:e4:09:39:ce:
77:05:f5:26:08:07:5c:d5:30:23:2d:29:37:66:85:3a:ba:42:
32:61:0c:bc:28:5f:8b:8e:86:6b:ad:52:39:17:2f:3a:5f:f2:
64:b2:bb:27:46:ff:a9:8f:12:b7:e9:0e:41:48:1b:52:eb:45:
4f:6b:7e:42:ed:ea:cd:19:b6:f3:0e:96:66:7c:38:6e:7f:13:
34:cb:09:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org