Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3B503E4A45111EF94A4164E762E951A.roa
File: A3B503E4A45111EF94A4164E762E951A.roa (raw, json)
Hash identifier: rTsEJA0tXI0qrj8OMfEEk+YU5zWxXkSAxq6A5LETOVU=
Subject key identifier: 2A:34:F2:40:37:22:D6:F5:02:F6:73:90:80:13:3C:CF:CD:00:82:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D3CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3B503E4A45111EF94A4164E762E951A.roa
Signing time: Sat 16 Nov 2024 19:33:22 +0000
ROA not before: Sat 16 Nov 2024 19:33:16 +0000
ROA not after: Tue 26 Nov 2024 19:33:16 +0000
asID: 398704
IP address blocks: 45.202.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54222 (0xd3ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 19:33:16 2024 GMT
Not After : Nov 26 19:33:16 2024 GMT
Subject: CN=6738f382-3142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:e1:06:b5:35:ce:d4:b3:17:7b:fb:db:ec:
95:e6:17:ad:04:6f:72:b9:dd:d4:aa:a5:67:6f:db:
44:1b:33:bc:28:38:23:f6:cc:15:3a:ca:08:cb:79:
a7:e3:25:ab:9d:86:10:66:eb:1b:d0:29:42:ed:c3:
4a:63:ad:45:3a:63:0b:17:73:89:9b:43:f5:f3:ae:
64:06:01:a7:58:1d:18:9a:b2:de:aa:9b:5c:27:66:
aa:75:91:96:40:15:aa:11:ed:2e:c6:20:43:77:b1:
e1:e5:fe:0d:0e:11:50:e1:a4:a3:b3:54:fb:76:d6:
57:fb:30:9d:4e:3d:e9:bb:35:a5:c1:94:1a:a0:e9:
2e:2c:8d:4d:a3:63:ba:c4:a2:d2:aa:1f:50:3e:99:
9e:fb:f6:1e:be:e1:e0:21:7e:06:6d:5a:a0:84:48:
09:44:19:12:74:61:79:13:73:aa:56:ac:7c:96:c8:
f5:19:8b:e1:70:c9:a3:9b:ad:2d:36:1e:7a:cb:f9:
95:b0:f1:7c:18:f9:b3:d1:24:16:83:68:92:69:8b:
cc:c4:6a:f0:db:63:fa:f4:e7:7c:32:5f:42:db:56:
8a:20:de:f1:0e:65:ec:26:fa:e3:a3:1b:06:1c:cc:
35:61:73:fa:f6:98:6a:bf:90:68:33:af:ca:a5:65:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:34:F2:40:37:22:D6:F5:02:F6:73:90:80:13:3C:CF:CD:00:82:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3B503E4A45111EF94A4164E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.216.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:1a:33:26:b7:1d:85:34:0a:30:a5:2d:09:b0:28:43:b6:bc:
f3:70:bd:9d:68:b4:80:5f:55:e0:8a:fb:de:cd:35:e0:b1:b2:
79:39:82:1f:02:1e:1e:a6:49:db:04:61:37:db:dc:0d:38:96:
d8:3a:39:64:6b:65:2d:44:86:77:9d:34:35:ac:e5:5d:ec:1e:
32:ae:84:55:81:b8:28:1a:55:a5:f3:dd:ca:01:91:4e:07:76:
4c:05:60:55:47:05:06:ff:91:c7:83:a1:c1:9c:2c:79:c1:7a:
2a:37:d0:23:1b:c7:6d:84:a2:18:7b:7d:04:17:d0:18:6d:cb:
50:a2:02:f1:1b:04:92:2d:0b:2c:bd:c6:28:7f:33:a2:68:84:
06:ff:6a:eb:56:b1:40:dd:0b:09:d3:db:4e:9b:85:e7:53:7b:
a7:97:d8:ae:25:2f:4f:87:df:74:e5:24:13:fc:e7:d1:32:ff:
3e:2e:be:45:68:42:c2:f4:b9:a5:f6:73:ff:15:51:11:55:7c:
17:49:bd:c8:e5:5d:88:46:f2:3d:12:fc:f6:47:40:68:6c:2a:
86:ab:ca:64:7c:14:4a:ed:26:34:74:e2:cd:cd:a6:4f:15:c9:
c2:5a:80:61:e0:47:34:dc:0b:73:d4:e9:ed:1a:4b:97:d6:08:
a7:f8:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:43 2024 by rpki-client on console-ams.rpki-client.org