Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A46AFE432BC11EF9B40CDB6762E951A.roa
File: 9A46AFE432BC11EF9B40CDB6762E951A.roa (raw, json)
Hash identifier: p8akj6N+H33wz0/IIyHY294fT7GBl8b6yo4W98yBLtc=
Subject key identifier: 59:78:57:5A:D2:72:34:12:13:11:E5:5F:91:31:AD:98:17:25:6F:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9496
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A46AFE432BC11EF9B40CDB6762E951A.roa
Signing time: Tue 25 Jun 2024 06:31:50 +0000
ROA not before: Tue 25 Jun 2024 06:31:46 +0000
ROA not after: Fri 03 Jan 2025 06:31:46 +0000
asID: 40065
IP address blocks: 45.205.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38038 (0x9496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:31:46 2024 GMT
Not After : Jan 3 06:31:46 2025 GMT
Subject: CN=667a6455-d6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:c9:13:4c:ad:cf:58:87:5e:00:52:ac:9a:
7f:f6:ed:6a:86:f5:2f:c0:7e:3e:28:4f:ca:01:a9:
37:f3:6f:71:db:9e:e9:ea:62:23:8f:ff:57:cd:5e:
01:67:1f:b7:d3:68:82:f4:7b:50:0b:fa:4a:c2:76:
38:9b:fe:1a:45:7d:22:f3:2b:03:52:35:ab:b9:49:
bc:ab:12:06:4b:a1:60:d3:77:81:65:3a:20:51:4f:
60:35:26:f6:17:61:ed:81:f6:0d:48:55:00:a7:1e:
eb:05:13:cf:3f:a6:aa:ab:1d:24:45:9e:ff:c4:93:
a3:2f:7b:c9:06:91:c4:a9:a4:ae:3d:01:73:0f:ca:
1e:58:67:18:12:e6:e2:e5:8c:2d:d0:cc:e5:f6:75:
ed:b0:70:00:3a:71:9f:a9:3d:da:64:64:c0:00:ae:
41:6d:c2:4f:34:0d:1a:e1:3d:2e:d3:a4:66:5b:ac:
e4:0d:96:af:be:7c:59:66:03:2a:5e:a7:ce:0e:34:
8e:b3:a4:99:af:a0:cc:99:7a:da:77:51:25:4d:7a:
7d:aa:c6:9d:9a:c1:bb:fd:d6:8e:da:b1:7b:9b:b0:
a7:35:b3:0f:d1:c5:e5:8f:dc:b8:da:4a:a0:11:a8:
f0:d3:a5:5b:5c:81:c7:f1:6a:4d:c0:de:53:00:10:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:78:57:5A:D2:72:34:12:13:11:E5:5F:91:31:AD:98:17:25:6F:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A46AFE432BC11EF9B40CDB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:53:c3:c5:b7:15:cc:3f:9a:fe:43:9d:91:0f:74:11:19:cf:
bf:78:55:9d:0e:2a:f9:9c:e7:bc:97:08:99:0c:44:50:6f:cf:
1e:36:d4:a2:23:2e:7f:45:f9:26:e0:37:be:5f:f4:43:b2:ba:
74:d9:98:36:d0:84:38:92:72:d1:0d:10:3d:26:40:70:00:01:
98:f8:ea:6c:b8:d6:d8:9f:95:d7:01:9f:7d:84:0d:c8:4a:83:
f5:5f:73:4f:35:cb:b3:14:64:ab:33:13:8f:94:b6:bf:20:a5:
d2:3a:d9:2f:f6:a8:26:80:8b:d8:73:15:f7:d4:96:5e:f7:56:
12:49:83:c2:07:f0:30:4b:5c:b1:26:b4:1f:d7:65:08:fd:4d:
29:45:b4:cf:1a:ee:34:21:7f:95:a8:33:84:9a:f4:13:71:19:
1b:28:d3:4c:3c:5f:a4:d0:ba:84:26:96:91:9a:b5:e1:e5:4d:
de:0f:ad:90:72:ff:01:05:35:d3:cb:c4:97:13:7e:11:24:10:
36:89:0c:dd:74:9d:6c:1f:11:b7:1d:c1:e3:df:62:d2:ed:39:
ad:3e:20:83:f7:11:2f:0e:2e:f4:50:bc:6a:39:7d:6d:9c:b9:
0f:98:d6:b5:1b:cd:70:bf:43:37:ae:9a:ea:31:26:3d:87:4f:
9b:ea:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:39 2024 by rpki-client on console-fra.rpki-client.org