Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3603FDC9AAE11EF87F1AD76762E951A.roa
File: A3603FDC9AAE11EF87F1AD76762E951A.roa (raw, json)
Hash identifier: IjN6xNkNqrky9MwiK2F6OJdMvENVLrHKUjJW81dXpv4=
Subject key identifier: F6:13:58:34:83:2E:81:F7:FD:EC:3A:69:3A:4F:43:8F:1B:15:44:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3603FDC9AAE11EF87F1AD76762E951A.roa
Signing time: Mon 04 Nov 2024 13:13:53 +0000
ROA not before: Mon 04 Nov 2024 13:13:49 +0000
ROA not after: Tue 03 Dec 2024 13:13:49 +0000
asID: 141883
IP address blocks: 45.200.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52654 (0xcdae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:13:49 2024 GMT
Not After : Dec 3 13:13:49 2024 GMT
Subject: CN=6728c891-cac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:09:12:88:96:a8:c6:ea:90:26:f2:69:0e:
a6:e3:48:f0:1a:ec:69:cc:69:f0:9e:5d:3d:7f:40:
63:c1:a1:08:e3:72:f5:e8:a5:30:7f:db:ff:6a:ac:
06:d5:a0:83:26:64:79:27:ff:62:0a:c6:19:d6:27:
d2:56:e0:71:cf:12:2c:64:9b:c3:07:22:bd:0a:14:
cb:34:21:51:38:b8:61:88:5f:64:c4:ef:70:2b:fc:
80:2d:d9:68:a7:19:06:36:dc:91:98:22:c7:ee:b5:
8c:87:ed:94:73:81:a0:b7:73:d9:10:69:91:9e:e9:
c3:28:30:1b:3c:90:76:35:9c:5a:31:9c:f4:c4:cd:
a3:17:03:03:92:a2:5a:c7:81:a3:04:51:88:a5:19:
b0:5c:1b:26:87:06:f6:92:4f:46:83:60:07:8b:15:
68:49:98:f3:0c:79:bf:e8:5b:84:a9:b5:21:75:aa:
d5:83:70:d6:4a:36:68:42:0e:8c:a8:12:5c:e3:28:
48:ac:c4:1e:d6:8f:58:6e:d1:42:e6:7c:4d:47:57:
c8:14:60:ec:80:a0:01:38:6b:98:3e:52:81:21:9e:
27:3b:4a:9a:5a:1a:be:02:ad:e4:78:af:c3:36:d1:
b7:62:c4:cd:38:09:c3:14:0d:31:55:61:44:5a:f7:
e4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:13:58:34:83:2E:81:F7:FD:EC:3A:69:3A:4F:43:8F:1B:15:44:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3603FDC9AAE11EF87F1AD76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:00:0a:42:3b:a9:98:f5:ad:f7:6d:ca:90:df:b0:6b:59:d4:
5e:f9:f1:c4:65:52:1d:67:0a:a0:47:54:e7:e0:f6:a2:49:89:
b2:8d:a0:1e:3c:53:82:34:f8:11:3f:b5:39:97:df:53:2a:40:
11:e3:da:e1:99:65:77:64:79:8a:4a:02:3c:72:1e:58:85:91:
da:f8:45:e7:73:1a:03:31:c8:36:a6:d3:6d:4d:58:c2:70:41:
fa:24:0b:f6:d2:7f:8e:c1:5b:f9:b3:93:f1:87:4b:6c:00:d2:
57:82:fa:0c:6e:b2:b1:ce:28:cc:71:d9:12:11:c6:8d:eb:08:
31:60:34:c3:e9:c5:dc:68:ef:0a:6e:4c:8f:ef:5c:40:c8:22:
b1:9f:e8:2f:15:87:e4:1f:a6:c8:5c:cf:cb:7a:d7:ab:47:d6:
0f:9b:af:5d:8f:3a:b0:6b:d8:5f:64:1d:bc:fc:f4:fc:cb:9e:
c8:ca:1e:88:e2:ad:10:08:77:22:d0:4b:fd:0c:f2:14:8b:5f:
b2:92:1f:fd:4f:fb:79:4e:8d:a1:ca:e0:71:12:78:e9:f7:72:
bc:d6:03:db:11:c6:44:dc:bf:74:33:3d:76:9b:74:57:c7:66:
47:a1:e4:2e:e5:fc:32:8b:2b:95:7e:4c:d7:58:70:9d:9e:4c:
94:c2:20:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:43 2024 by rpki-client on console-ams.rpki-client.org