Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A006A820A44611EFB9F1E486762E951A.roa
File: A006A820A44611EFB9F1E486762E951A.roa (raw, json)
Hash identifier: h1FfeBqUlbWqmdG2O5zel974emwvwb2DLYjggbcKv3w=
Subject key identifier: 15:A5:33:1F:61:62:AC:C6:78:C2:8E:E5:F7:C8:26:30:BB:F9:18:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D372
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A006A820A44611EFB9F1E486762E951A.roa
Signing time: Sat 16 Nov 2024 18:14:31 +0000
ROA not before: Sat 16 Nov 2024 18:14:27 +0000
ROA not after: Mon 25 Nov 2024 18:14:27 +0000
asID: 22773
IP address blocks: 45.196.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54130 (0xd372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:14:27 2024 GMT
Not After : Nov 25 18:14:27 2024 GMT
Subject: CN=6738e107-cab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:03:62:60:95:7e:dd:69:02:cf:e2:5b:ed:
63:6d:8c:44:9d:d8:e4:b6:53:ed:dc:de:0a:5a:cb:
99:dc:94:78:e9:e0:ef:10:f4:2e:88:81:86:65:53:
d8:d2:b3:aa:32:c6:13:74:b6:94:ff:1c:3a:5c:6b:
61:4b:4f:c3:61:3d:7b:d3:16:74:89:1e:2f:35:a8:
3d:82:cb:78:e0:bb:5a:5f:78:be:af:bd:6d:40:a1:
db:03:90:00:dc:e2:cd:b7:3b:94:ae:c2:56:d8:68:
a7:e1:2b:c5:3c:f8:9b:9b:4f:9b:27:08:da:c6:90:
6f:17:23:1d:6e:00:f1:5e:c7:1c:01:69:36:fd:d2:
23:ad:91:2a:a1:62:93:ac:96:c4:a9:fb:6f:f9:71:
a8:f9:e2:f9:e2:23:f6:ad:4c:ad:31:fe:15:b8:70:
c8:1e:c6:f7:83:44:4a:4a:40:55:ac:c1:ff:c7:10:
25:37:2f:39:a0:75:50:d0:9f:1e:ff:07:85:eb:d9:
61:de:41:50:cc:de:39:77:80:da:2f:e7:68:3e:09:
d1:c0:3c:50:7c:40:a9:87:48:60:d6:cc:5f:c6:4a:
8e:e0:e9:9d:ea:30:28:13:07:08:2d:46:85:3a:75:
95:fd:c8:bf:0f:7f:26:44:06:4b:37:c8:cb:cb:53:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:33:1F:61:62:AC:C6:78:C2:8E:E5:F7:C8:26:30:BB:F9:18:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A006A820A44611EFB9F1E486762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:71:96:27:f1:34:85:20:21:d1:91:f5:2e:2f:5b:00:33:04:
b6:58:b6:7b:29:85:1d:c2:9a:66:07:54:b7:49:65:9b:8b:98:
b6:27:17:d0:13:09:56:22:82:06:ed:54:27:9d:e6:2c:91:86:
ca:f9:19:14:c7:d8:6a:ff:36:f5:3d:51:b8:88:cc:6e:b6:6f:
8d:70:4b:d1:b4:c1:cc:84:4b:98:90:f3:87:66:d0:66:35:d6:
54:f4:d2:f9:6b:0c:bd:fb:c9:b2:96:b3:12:ba:2b:ad:f5:b8:
d4:5f:ac:49:17:5e:0d:4a:61:bd:16:4b:00:00:f0:ab:bc:d8:
6c:50:af:4e:e2:e1:0f:f2:68:62:4f:b0:e5:12:b9:40:da:63:
9a:08:59:df:1c:88:27:a1:b6:27:7b:e9:6d:7e:40:f0:5c:4c:
14:74:9b:64:b1:49:10:45:03:87:1c:9c:36:97:f8:d6:3e:35:
7d:05:1f:61:1f:3e:5a:9c:06:8b:da:67:f3:bb:da:f8:4e:21:
6b:13:e5:a4:19:94:31:65:5a:01:8e:4d:d7:d2:a0:24:b6:56:
5a:a1:ed:49:71:e9:86:c9:56:db:94:bd:b2:a0:7f:83:e1:4a:
9e:84:e3:b1:10:5a:43:00:58:24:c1:5c:7a:68:01:d1:20:1a:
6a:17:e7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:42 2024 by rpki-client on console-ams.rpki-client.org