Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9DDB2E8A74411EFAD413559762E951A.roa
File: A9DDB2E8A74411EFAD413559762E951A.roa (raw, json)
Hash identifier: D5SmNwzgOlAYm+VWhkIz2McWd1qNZoBKGYmwyLzgswk=
Subject key identifier: 55:DB:B7:A8:71:8D:D0:E4:C3:BD:4E:50:2E:44:22:BA:A9:E2:9A:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D661
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9DDB2E8A74411EFAD413559762E951A.roa
Signing time: Wed 20 Nov 2024 13:38:02 +0000
ROA not before: Wed 20 Nov 2024 13:37:58 +0000
ROA not after: Sat 30 Nov 2024 13:37:58 +0000
asID: 62240
IP address blocks: 45.192.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54881 (0xd661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:37:58 2024 GMT
Not After : Nov 30 13:37:58 2024 GMT
Subject: CN=673de63a-5191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6f:99:b3:47:fa:c9:91:4b:58:f3:ed:67:f7:
52:45:ec:ea:36:ad:ae:e5:4a:5a:dd:4b:b0:b9:94:
db:fa:89:f9:70:7d:74:07:33:a1:1d:c7:a4:d6:32:
ea:5b:86:ac:33:e3:32:54:62:60:4c:de:10:80:e8:
f8:03:86:c4:54:d4:ea:9d:95:fa:88:47:42:de:a4:
14:5b:e9:88:4b:dd:ec:11:f0:68:b9:62:cf:7b:7e:
72:0f:0d:f7:af:3d:2d:f5:a5:db:2f:40:df:60:92:
db:23:89:3c:ac:fb:c4:99:e9:61:30:98:90:21:6c:
bd:17:b3:a3:23:7f:2c:e1:46:74:72:e2:06:06:ab:
e7:1d:74:5d:44:1c:17:0a:e7:46:9a:64:5e:dc:16:
2c:54:40:00:54:6c:86:fc:a5:5a:63:eb:aa:9d:ae:
2b:a1:9a:ea:20:3d:fc:92:05:a2:5e:17:40:bc:06:
70:39:dd:a5:ea:4a:12:e2:d5:29:4f:ef:1c:4f:ec:
54:bb:a7:3b:69:4e:86:eb:ad:d4:c0:a6:e8:5e:25:
27:34:ef:14:80:25:6d:47:6b:9e:e5:6b:4e:de:06:
c3:40:d1:c2:e7:5b:0b:62:d9:58:18:87:19:02:16:
0e:76:31:c9:9a:e0:b4:91:a9:1c:14:46:28:b7:6f:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DB:B7:A8:71:8D:D0:E4:C3:BD:4E:50:2E:44:22:BA:A9:E2:9A:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9DDB2E8A74411EFAD413559762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.36.0/23
Signature Algorithm: sha256WithRSAEncryption
50:36:2d:4e:48:1a:fe:7b:33:75:36:f4:07:c1:d7:b2:b5:84:
f2:c0:30:0e:5d:8a:49:c8:1c:a8:47:1f:46:02:84:48:9f:1f:
59:b7:c6:f7:3c:5a:8f:81:33:8f:f2:e1:0d:80:df:9c:cb:f2:
32:72:5d:76:86:94:4f:82:29:f2:7a:75:7f:fa:c7:33:fa:09:
19:46:d6:7a:3c:2c:9e:e1:3f:4e:66:5d:eb:ac:3e:b7:12:53:
f2:fb:76:fc:ac:37:21:1d:87:d0:62:7b:b7:00:a1:41:63:a8:
5c:30:2d:6f:49:d1:d6:2a:c0:83:7b:2c:2e:31:6d:b5:ae:05:
90:56:fa:73:58:81:6a:08:62:ce:f5:fc:42:be:93:a2:0b:da:
7e:4e:9f:20:f4:41:cd:12:a7:ea:aa:d2:15:45:57:ae:14:07:
a4:40:bb:98:f1:42:ec:d9:84:e3:a6:84:b3:e2:29:3b:e9:64:
f1:9e:59:dc:f5:98:23:3b:df:73:a3:b0:63:ed:6d:32:71:17:
50:c5:33:2c:40:a4:95:68:1c:d2:3d:1b:6a:5b:32:7d:6e:27:
77:80:05:e8:a9:6d:ae:72:9e:9d:10:bc:6e:41:01:ba:a8:b3:
16:35:8c:02:04:f8:be:a6:6e:bd:7e:f1:f6:4f:58:b2:af:9d:
ac:f1:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:43 2024 by rpki-client on console-fra.rpki-client.org