Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9490F5CCA73411EFB2B2DA73762E951A.roa
File: 9490F5CCA73411EFB2B2DA73762E951A.roa (raw, json)
Hash identifier: DfA/pBwEsSBha8UeKZKUljU+cmvjDra4+/1y4vqE3yA=
Subject key identifier: 4E:BF:91:84:F4:96:3F:C5:5A:59:37:66:A5:E8:99:63:D6:9D:05:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9490F5CCA73411EFB2B2DA73762E951A.roa
Signing time: Wed 20 Nov 2024 11:42:54 +0000
ROA not before: Wed 20 Nov 2024 11:42:51 +0000
ROA not after: Mon 02 Dec 2024 11:42:51 +0000
asID: 39600
IP address blocks: 45.203.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54757 (0xd5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 11:42:51 2024 GMT
Not After : Dec 2 11:42:51 2024 GMT
Subject: CN=673dcb3e-23d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:e2:ca:e2:bc:10:18:de:e7:3d:0a:23:4c:
d4:f9:ef:17:16:8d:e5:82:9a:69:b1:8b:00:0c:ce:
d5:06:47:17:e3:70:b0:21:d2:52:76:ab:84:02:80:
bb:cd:42:2d:76:18:9f:f4:64:d0:c3:9d:f0:f4:f1:
2d:39:b0:c0:bd:76:6b:97:e1:f1:75:0d:99:22:ed:
c1:92:30:cb:47:12:d8:cb:d6:4b:96:a2:96:a3:d9:
47:cb:13:60:e4:f0:e5:7a:1b:ae:cc:0e:aa:00:1c:
39:fc:11:09:3d:7d:1f:d8:b7:cd:9e:8c:81:d3:26:
26:ff:b7:5d:c5:78:7d:97:e8:b0:21:e7:a7:ca:74:
b2:43:ac:56:a7:18:17:5c:25:87:b9:6b:33:3d:83:
33:d9:ee:3a:7e:9f:b3:61:dd:9e:6f:07:9d:34:eb:
69:cb:f8:f1:b6:83:03:0c:e4:95:a0:e2:84:d4:75:
0f:3b:6f:46:07:d2:11:15:84:8c:22:64:74:8b:b6:
63:67:e3:5d:26:16:aa:27:39:6e:0a:33:7a:1c:dc:
e8:44:68:bd:30:de:b1:05:73:a2:45:51:66:39:16:
b7:97:78:26:de:28:ca:e1:ae:bb:18:c5:fb:02:23:
e3:67:21:98:7b:20:51:e0:22:eb:71:a1:06:48:6c:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BF:91:84:F4:96:3F:C5:5A:59:37:66:A5:E8:99:63:D6:9D:05:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9490F5CCA73411EFB2B2DA73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.62.0/23
Signature Algorithm: sha256WithRSAEncryption
46:d4:e1:6e:0f:86:c8:b0:6f:a9:e7:ee:85:f0:cf:94:91:31:
b5:d6:c8:dd:85:82:3c:55:e8:7d:96:69:32:6b:93:8c:8c:63:
fd:f6:c8:b7:d5:d2:4a:8e:b8:84:23:c1:56:96:f2:9d:de:76:
45:95:9d:64:57:6e:76:fa:04:bc:95:0c:fc:87:be:04:3e:3c:
c1:39:9a:84:94:a5:d9:ea:37:21:26:51:99:1b:ee:0d:96:a4:
37:03:5c:d0:29:bd:bb:ad:5d:64:b0:9d:a2:fd:72:f5:09:02:
b8:4f:5b:28:d4:fb:a3:06:57:9c:66:c5:76:b9:7f:a7:4f:b2:
57:ad:f7:56:22:34:89:18:21:3a:5a:a5:01:db:ce:7f:3b:e4:
7a:c8:c0:e3:5c:52:08:0e:fe:eb:39:a0:a8:dc:2a:8f:24:3a:
05:40:d5:e8:ca:77:60:58:d1:8f:be:05:3a:3f:b6:d7:de:fd:
dc:48:5e:26:f8:ef:c6:8f:b3:7d:5c:74:ce:e3:c6:c7:50:df:
e5:82:bc:13:ac:7d:37:62:fc:d8:20:31:11:fb:65:fe:70:4b:
2c:62:ea:fd:97:be:2a:01:bb:74:56:df:d6:9d:b5:35:fb:26:
13:4d:5d:dc:ab:75:43:88:52:f8:74:0d:52:89:0d:b0:2a:3a:
21:71:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:41 2024 by rpki-client on console-ams.rpki-client.org