Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9919F82296AF11EF82791E42762E951A.roa
File: 9919F82296AF11EF82791E42762E951A.roa (raw, json)
Hash identifier: iKoEgSadUVFdTojnb2a4okLF3rKEQn3EAluXvfBeZgE=
Subject key identifier: 82:7B:55:AA:00:2A:90:C8:8A:EE:49:B0:EA:7C:E9:73:2B:E6:3D:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CA1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9919F82296AF11EF82791E42762E951A.roa
Signing time: Wed 30 Oct 2024 11:10:40 +0000
ROA not before: Wed 30 Oct 2024 11:10:37 +0000
ROA not after: Sat 23 Nov 2024 11:10:37 +0000
asID: 54467
IP address blocks: 45.192.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51741 (0xca1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 11:10:37 2024 GMT
Not After : Nov 23 11:10:37 2024 GMT
Subject: CN=67221430-63ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:08:84:cd:00:ec:25:2e:df:78:cb:c5:1b:
e8:34:53:c5:83:87:f1:9a:c8:b0:30:bd:d2:fc:6b:
6f:d1:52:f3:1d:2c:b0:74:49:17:67:00:0e:9c:f5:
6a:57:c8:f3:ee:46:53:16:33:8f:f1:ad:40:cc:5b:
98:1e:03:56:d9:cf:ec:e4:0c:04:00:23:0f:eb:9f:
27:ee:fb:62:89:ca:f3:bc:34:67:10:39:ce:d6:24:
f1:09:2e:08:f3:b2:7a:f7:e0:ec:06:0e:55:44:2f:
9b:c1:1b:cd:78:66:21:fd:9a:8a:76:5b:07:a6:3a:
78:10:7c:e2:1a:9e:dd:7f:54:de:1d:d0:10:06:2f:
4a:c2:17:00:53:0c:12:51:7d:29:5c:fa:d3:ef:05:
d6:ff:26:0c:ff:af:2f:a1:b8:db:f0:86:91:d2:6f:
f1:a6:75:96:3b:24:d3:a0:62:06:b6:50:0f:79:10:
d5:f8:bd:47:b2:00:0a:47:e6:af:00:e1:d7:e3:7e:
da:5b:a7:b7:f8:ce:be:f3:6a:64:c2:14:d7:80:bf:
31:0b:47:9a:ab:ea:7e:48:ef:61:02:c0:b8:10:d0:
48:b2:d1:65:b3:ae:3d:35:16:a4:08:30:00:50:c3:
50:9a:35:91:76:96:0b:6e:f2:1b:17:a2:3d:6a:8d:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7B:55:AA:00:2A:90:C8:8A:EE:49:B0:EA:7C:E9:73:2B:E6:3D:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9919F82296AF11EF82791E42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:1c:64:0c:20:4d:d3:7e:85:e0:48:3a:d2:e7:92:bb:f9:dc:
56:99:bf:b2:65:86:1d:0a:73:1e:e1:2a:64:88:2f:96:18:12:
5d:26:03:78:2e:2c:15:60:e0:03:3b:eb:47:5e:ae:d5:5b:89:
c5:66:a8:db:b5:dc:b3:c6:ef:0a:7c:bb:8d:00:7d:23:63:35:
6b:94:75:5d:e9:f0:62:0a:70:2f:f4:11:54:9e:30:53:2a:53:
85:b0:ba:06:d9:09:02:a6:b6:72:f5:50:0d:b3:49:bb:84:d9:
1a:45:d6:9b:16:68:25:7f:c3:cc:7d:f8:76:80:0d:7d:0b:86:
01:5d:bb:13:52:56:f2:4e:b5:6d:b6:1b:c2:a2:a5:17:01:22:
72:c7:91:fb:74:46:d4:5f:99:25:76:4d:4d:c5:c4:65:64:6c:
e0:60:47:ac:c4:a9:b0:9f:ff:b0:7a:e6:c3:35:eb:6d:4e:72:
61:1b:d7:00:95:30:26:6e:17:64:bc:ed:90:09:31:03:5d:b6:
ca:55:ae:6e:e5:8f:f5:bd:ec:64:1f:92:10:b4:86:d4:b5:77:
4b:7f:ac:23:83:46:a5:e8:22:8a:9b:87:97:46:2c:d2:b1:fa:
48:36:9c:cd:c2:d8:a2:0d:a1:dd:18:24:2e:3f:3c:57:32:51:
f0:27:20:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org