Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1762D10A70811EFBB180D64762E951A.roa
File: A1762D10A70811EFBB180D64762E951A.roa (raw, json)
Hash identifier: JF4D08RCrFt6cjYOxkiAbbKAKh6BFcEcUy+6NjyWFQk=
Subject key identifier: 9F:A2:85:1B:0A:FB:B2:79:F5:94:8F:E2:44:ED:EB:63:7C:E7:6D:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1762D10A70811EFBB180D64762E951A.roa
Signing time: Wed 20 Nov 2024 06:28:18 +0000
ROA not before: Wed 20 Nov 2024 06:28:14 +0000
ROA not after: Sat 22 Nov 2025 06:28:14 +0000
asID: 35086
IP address blocks: 45.198.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54695 (0xd5a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 06:28:14 2024 GMT
Not After : Nov 22 06:28:14 2025 GMT
Subject: CN=673d8182-ef65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:3c:7c:5a:fc:62:a9:ec:d9:60:50:70:42:
6a:6d:16:63:e8:10:b7:d4:a5:3d:2d:3b:f7:b4:5b:
83:1e:7f:d8:3d:8b:e5:02:63:9e:f9:e7:b6:33:2a:
76:04:d5:c5:95:3f:04:cf:af:02:fe:63:62:62:a7:
44:f5:f6:d3:a1:1f:e6:48:6e:e3:32:dc:7e:2e:0e:
3d:05:1e:cc:69:f4:c8:1d:8c:47:91:60:e6:85:b1:
b3:f2:40:ee:22:bc:12:31:91:58:c7:66:78:a2:54:
4f:01:e5:26:0e:d9:ed:1b:75:6e:dc:b5:65:dd:c0:
88:91:43:51:e0:4b:28:3b:64:fc:32:71:9b:b4:5d:
bc:ba:38:d5:32:00:1c:65:40:45:80:ab:18:be:bb:
36:55:24:6c:4b:cb:f5:0d:92:db:b5:a6:6f:09:2b:
fb:7f:67:d8:80:f9:58:e4:e3:2f:7f:df:9a:31:c8:
8b:87:c8:16:45:03:68:fa:aa:b7:08:e7:59:b5:e8:
4b:ea:e9:38:bc:4f:33:63:d0:4b:af:47:c2:76:02:
e6:99:af:89:fe:f2:73:31:91:4c:05:56:43:ef:e4:
1d:13:cd:86:7e:14:f8:a9:b8:2e:8f:c9:a3:1e:1f:
cd:c3:7c:48:4e:28:72:7d:12:0b:e6:60:7c:b4:af:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A2:85:1B:0A:FB:B2:79:F5:94:8F:E2:44:ED:EB:63:7C:E7:6D:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1762D10A70811EFBB180D64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.182.0/24
Signature Algorithm: sha256WithRSAEncryption
89:08:ed:ce:6a:5e:38:7b:0f:ff:ed:21:17:00:22:10:49:b0:
a7:f2:14:54:a2:04:08:b4:b9:7c:61:49:d0:93:ed:69:fc:01:
56:c1:f4:92:2f:da:5f:c8:ec:97:f6:18:d2:ec:4f:d4:97:66:
f6:63:e5:6d:09:b0:5f:7c:33:61:dd:8d:7f:71:bc:af:f6:e4:
04:8c:01:68:28:b3:3b:2c:35:3b:38:74:6a:8f:3e:6b:08:bd:
e0:d1:87:5e:82:64:4f:4a:e5:a7:b7:eb:02:d4:e8:c9:b1:fd:
a6:ac:ea:25:e5:be:d6:2f:1e:9f:e2:7c:53:77:b6:95:7b:d5:
5b:68:7f:1e:d6:81:76:18:df:64:73:86:02:fa:bf:14:d3:0a:
b1:d7:30:41:99:98:c6:81:11:e5:0a:08:4d:30:5c:9a:61:a2:
04:4d:c4:2d:2a:d9:9e:ca:df:d0:b6:f2:92:5f:c0:4f:a7:68:
a5:fb:18:e7:97:26:c2:01:ee:53:fb:60:6a:93:37:ca:1d:f5:
c5:06:1d:e8:e0:06:f6:57:e0:aa:be:99:d3:e5:8e:9a:82:72:
e8:89:ec:bd:cf:9f:c5:e4:80:5e:ec:0c:b0:e4:63:41:e5:77:
8e:53:ee:39:c4:ee:13:56:f4:1b:e0:59:ae:dc:4f:f6:e7:1e:
35:b4:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org