Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A184E82A45A11EF873DE183762E951A.roa
File: 9A184E82A45A11EF873DE183762E951A.roa (raw, json)
Hash identifier: VBDfZd6D+ttJqUcImfhMquUYoDQn9Yvzya/cz3QdLn4=
Subject key identifier: 5E:F7:BE:42:7B:08:8C:6D:B9:99:0A:71:AC:BF:35:9A:0C:0C:40:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D41A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A184E82A45A11EF873DE183762E951A.roa
Signing time: Sat 16 Nov 2024 20:37:31 +0000
ROA not before: Sat 16 Nov 2024 20:37:27 +0000
ROA not after: Wed 27 Nov 2024 20:37:27 +0000
asID: 39600
IP address blocks: 45.197.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54298 (0xd41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:37:27 2024 GMT
Not After : Nov 27 20:37:27 2024 GMT
Subject: CN=6739028b-c793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:e0:fb:0a:8d:f7:2e:14:f8:f1:50:98:b9:
fa:2f:00:99:1a:53:98:57:f8:20:5c:e5:55:e9:a6:
98:71:bf:b2:6a:8b:42:5d:37:69:34:11:4b:1a:d9:
a1:0e:37:bc:e5:fe:1e:71:c5:01:04:1e:35:2b:41:
c9:2c:0e:e2:1b:74:24:fb:3f:71:36:36:33:77:00:
0d:20:0a:cf:47:05:3c:36:af:40:ec:df:c6:ce:d3:
15:75:c4:b8:0e:b3:c2:9b:05:46:3b:32:ad:ab:05:
88:6c:6f:84:b7:1c:46:af:86:e1:8b:66:95:0a:c4:
36:13:95:ed:71:ef:93:f9:2b:2c:55:d6:4a:85:b5:
cc:1f:98:ac:75:36:fe:10:1f:28:80:3c:e5:a5:8b:
70:c7:dd:c1:0c:44:6f:fd:67:65:6b:30:56:76:48:
11:4c:9e:70:21:ce:88:17:84:de:25:bb:74:f2:90:
e1:bf:38:20:73:fa:eb:b5:b5:18:4c:fe:ae:4c:77:
37:4b:18:3f:99:67:cd:27:39:aa:60:67:17:34:68:
bb:4c:c5:d8:39:3c:94:e6:17:2d:5b:ae:69:21:db:
73:3e:fb:33:a0:46:ab:df:15:0a:4c:29:34:12:77:
33:a7:9f:59:59:d8:a9:0d:a4:24:95:41:57:94:67:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F7:BE:42:7B:08:8C:6D:B9:99:0A:71:AC:BF:35:9A:0C:0C:40:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A184E82A45A11EF873DE183762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.204.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:39:9f:1f:d8:dc:b4:2a:2a:77:39:06:3c:9e:60:66:76:04:
cc:c3:39:92:f7:e1:8f:a2:dd:ca:46:40:94:86:96:86:1a:df:
60:aa:92:93:95:65:ac:ca:1f:ba:d9:9f:af:91:0c:12:bd:3b:
04:fb:36:31:06:05:ae:c0:a8:5c:f4:0b:eb:95:02:ae:b4:8f:
76:72:af:a7:e6:e4:64:a6:df:70:ab:a0:f4:21:6e:5b:3d:1c:
7a:04:97:e5:de:e8:fc:a5:2d:9d:fe:3f:05:01:35:d7:45:54:
19:51:3d:1a:8d:da:c9:78:1f:9f:9f:12:68:4b:d2:97:5f:7c:
3f:6c:96:dd:79:08:93:81:c9:0f:7d:cc:1e:c9:6f:ae:3d:8c:
2b:6b:87:9d:34:ff:c5:75:c1:d3:0a:95:32:f0:c2:36:34:58:
32:0f:74:a0:8f:88:52:ff:ac:18:e3:e9:6c:82:68:23:16:94:
dc:2d:e3:a5:7e:21:95:0e:7c:1b:bc:54:f4:ef:14:e1:1e:29:
42:b5:0a:fb:26:4f:e0:9b:db:c7:da:57:76:85:ab:6c:92:95:
58:c7:72:b3:8b:09:4a:e9:59:02:3f:36:9f:45:b4:fa:89:d8:
48:c8:32:5e:71:bf:83:12:1a:03:54:02:6d:df:25:f3:db:7e:
01:76:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:40 2024 by rpki-client on console-fra.rpki-client.org