Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF1351A0A4C911EFAE286549762E951A.roa
File: AF1351A0A4C911EFAE286549762E951A.roa (raw, json)
Hash identifier: LYsfslzrdn+IE2wDvCBriQ1A3ng+vEg5qgu0205vPPE=
Subject key identifier: 50:22:59:97:AE:FA:06:EF:C1:40:2E:8B:1A:D9:88:2C:3A:33:2B:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF1351A0A4C911EFAE286549762E951A.roa
Signing time: Sun 17 Nov 2024 09:52:40 +0000
ROA not before: Sun 17 Nov 2024 09:52:37 +0000
ROA not after: Mon 25 Nov 2024 09:52:37 +0000
asID: 9009
IP address blocks: 45.192.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54451 (0xd4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:52:37 2024 GMT
Not After : Nov 25 09:52:37 2024 GMT
Subject: CN=6739bce8-9732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:bf:eb:15:51:fb:34:d9:74:00:60:29:28:
d8:f2:2a:5a:2b:e4:04:91:60:41:9a:a7:6b:b5:2d:
64:92:ed:74:30:b9:5b:12:d5:86:3e:69:17:fb:4c:
94:28:81:13:28:8e:04:b6:51:01:ff:28:11:09:0d:
d7:12:50:0c:9e:80:56:bb:6e:0c:a9:c9:e4:60:a5:
c6:35:09:81:03:9f:f6:a5:2d:37:94:9b:46:9f:b9:
cc:5f:c2:93:8f:ce:c1:c3:de:af:26:38:84:22:1a:
2e:70:4e:b2:f6:c4:76:e3:d2:be:52:2f:ae:52:07:
e3:d6:53:6d:cf:62:b8:f7:4a:fe:69:66:d6:58:cf:
00:b5:f7:8a:fa:47:1b:d9:96:b6:57:32:5a:7b:e9:
b8:dd:6a:de:64:45:76:5f:5c:38:18:12:fd:21:d3:
e0:5f:4f:9c:79:2b:5e:89:2e:e6:e2:9f:a0:fd:42:
77:78:0e:f8:78:8d:47:56:1d:47:81:93:e8:0f:58:
0b:69:97:8c:a4:55:f8:44:76:2c:d8:02:5a:bc:3b:
da:7d:88:c8:ed:d6:7b:4d:72:e0:31:ca:57:99:77:
da:6e:3d:b4:a6:96:e7:b3:43:4e:24:f3:7b:ca:4c:
a9:4f:dd:79:e1:2d:e8:dd:9a:49:6d:11:a7:f9:d9:
44:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:22:59:97:AE:FA:06:EF:C1:40:2E:8B:1A:D9:88:2C:3A:33:2B:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF1351A0A4C911EFAE286549762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.142.0/24
Signature Algorithm: sha256WithRSAEncryption
18:74:f9:bf:08:47:d9:08:3f:45:ab:be:dd:1c:d6:5c:a0:38:
3a:f0:95:9d:1f:ac:e7:26:6f:cc:1d:83:cc:05:f0:e8:c3:da:
b2:ee:fa:07:a3:74:f4:33:70:d4:ad:6d:7a:12:72:45:01:a7:
31:fc:57:1f:86:20:eb:a4:ce:24:fd:15:8e:d7:54:a6:2c:60:
49:d5:37:85:ff:bc:f6:0a:0c:08:64:9b:22:e1:3c:f4:ae:e1:
8d:7e:90:71:8f:b6:45:6b:50:ba:73:45:a1:1b:af:3b:17:b6:
8a:73:9a:89:fb:c5:51:54:17:db:54:c3:b6:8a:f1:b0:50:57:
09:58:57:6f:99:e4:1c:21:72:bf:57:55:cd:d2:8c:0a:c3:0a:
6d:a2:1a:49:36:b0:28:f3:1f:19:b4:86:93:39:93:4b:86:c4:
0d:25:a7:78:66:81:07:9a:63:fe:bb:47:eb:cb:8e:8e:cc:ad:
46:16:ca:19:d7:df:32:20:d0:e7:a3:0f:b0:8a:73:22:7d:93:
d7:61:57:9d:5f:ed:f1:54:25:40:a2:78:56:5c:06:ff:02:e8:
bf:de:5b:44:d9:39:9f:4d:7b:47:89:92:ba:be:29:c1:cc:2f:
e5:d3:dd:16:23:e1:74:f6:7c:50:62:f7:79:a0:dc:27:c9:54:
8a:80:1b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:43 2024 by rpki-client on console-fra.rpki-client.org