Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95067602A4D811EF89475DA6762E951A.roa
File: 95067602A4D811EF89475DA6762E951A.roa (raw, json)
Hash identifier: gE4a4HbD9rp7GfgLABQmUCQRr4gDAVL/9xuix4VLcgw=
Subject key identifier: 6D:D1:10:EA:FF:F0:F0:8C:54:05:E0:C0:64:81:DB:7E:E9:78:37:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D51F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95067602A4D811EF89475DA6762E951A.roa
Signing time: Sun 17 Nov 2024 11:39:19 +0000
ROA not before: Sun 17 Nov 2024 11:39:15 +0000
ROA not after: Thu 28 Nov 2024 11:39:15 +0000
asID: 133847
IP address blocks: 45.200.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54559 (0xd51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 11:39:15 2024 GMT
Not After : Nov 28 11:39:15 2024 GMT
Subject: CN=6739d5e7-9557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:7f:ea:36:59:81:e5:a9:30:29:91:67:9b:
d6:98:0a:2c:ae:42:b7:2e:e4:9e:12:a6:50:28:5f:
61:f2:30:f2:3e:1b:1c:bc:36:f1:78:e1:02:53:03:
94:3e:79:40:b4:c3:ea:a9:10:9a:f0:d6:af:ea:ec:
36:4b:91:96:b9:3f:e8:ba:30:e8:5e:42:3b:30:dd:
c5:70:17:d5:c6:4b:f3:04:59:6c:ad:81:c5:33:56:
f6:b6:b1:f9:fd:a5:2e:24:18:7c:cd:8b:5a:3c:d0:
bf:7b:0b:60:02:6b:65:c6:a2:dd:5f:57:22:44:78:
28:3f:fb:99:cf:cb:08:d8:13:7c:28:71:7d:0e:24:
c5:36:e3:c5:46:b6:97:d2:8c:90:bd:a2:12:b4:d2:
08:88:89:8b:b4:b1:ce:1a:d4:cd:16:16:96:fa:3d:
b5:48:f9:23:0d:e2:16:cb:d4:6d:d4:8b:cb:4f:e4:
15:6f:6a:e4:ef:eb:11:37:dc:dc:d7:22:82:66:3f:
1a:54:4e:2c:30:03:ad:8f:41:02:7d:92:4d:3d:14:
ff:c3:4a:dc:32:04:af:1f:23:7c:59:ec:82:d9:ba:
48:cd:77:41:9b:9f:44:55:1a:84:b1:26:12:86:b6:
c4:6a:ec:c5:56:7e:b9:33:a8:e8:7d:0d:6f:1e:e0:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D1:10:EA:FF:F0:F0:8C:54:05:E0:C0:64:81:DB:7E:E9:78:37:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/95067602A4D811EF89475DA6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.92.0/22
Signature Algorithm: sha256WithRSAEncryption
17:7b:c0:27:5c:a6:0a:fb:aa:ef:c2:32:51:43:64:f0:61:34:
69:07:5b:85:2a:84:ac:ae:e0:2a:82:34:62:ce:53:44:bc:f6:
c4:ac:4c:3c:dd:44:18:25:e8:6e:ce:f2:aa:f8:58:bf:bd:c3:
4e:66:ce:48:9b:d7:76:1a:f6:45:2b:47:28:88:a4:e9:5a:12:
a9:b2:65:ee:b0:e4:ae:95:cc:b7:0c:c6:ad:ed:47:b8:9f:df:
a0:4c:ca:83:8f:1f:99:0f:b3:6d:9e:58:6a:39:2d:ce:d4:f6:
f2:3c:1f:37:9e:34:d5:3b:db:7a:23:5b:ae:68:e6:cd:0f:10:
96:ef:ea:90:d3:5e:e3:fa:a0:5a:c8:b2:25:47:a8:59:67:ec:
76:a9:95:f2:d2:1c:30:05:5b:5c:0a:ef:20:78:54:42:5b:2e:
12:a7:83:c0:82:b6:de:98:25:7e:b8:9e:15:39:7d:82:5e:0b:
c6:91:bd:47:6d:ed:a1:3d:51:6a:28:35:a7:3f:4b:74:7e:99:
6a:97:f6:ba:b6:83:93:1b:54:1b:97:e0:17:e7:20:9c:65:28:
4e:60:5b:64:2c:5c:ef:44:ba:7d:73:14:99:2b:be:11:16:f7:
f2:99:f4:cf:31:d7:c1:86:ac:4a:bc:23:08:b4:d2:38:e5:8e:
09:70:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:41 2024 by rpki-client on console-ams.rpki-client.org