Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2494D0CA4C811EFAE2BCD44762E951A.roa
File: C2494D0CA4C811EFAE2BCD44762E951A.roa (raw, json)
Hash identifier: tP7/pAutcBGPrHGun+HpC1AffJtLvGJJcXV84dcAZac=
Subject key identifier: 4B:A8:9D:8A:AA:5F:6B:99:D4:CD:37:57:B8:89:EC:95:08:A9:24:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2494D0CA4C811EFAE2BCD44762E951A.roa
Signing time: Sun 17 Nov 2024 09:46:03 +0000
ROA not before: Sun 17 Nov 2024 09:45:59 +0000
ROA not after: Mon 25 Nov 2024 09:45:59 +0000
asID: 22773
IP address blocks: 45.196.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54439 (0xd4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:45:59 2024 GMT
Not After : Nov 25 09:45:59 2024 GMT
Subject: CN=6739bb5b-01ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:91:31:63:c4:9f:70:6b:8a:28:4f:76:14:d8:
cb:7f:88:cb:14:70:6a:1d:07:62:99:54:4f:1a:c8:
c9:d3:72:13:de:72:e7:77:22:b3:90:1e:39:50:05:
e7:e5:93:3d:80:da:44:9a:5a:64:98:ca:d5:1a:82:
73:27:73:b3:5a:80:1b:55:73:fa:4f:72:85:52:55:
6f:25:09:7a:13:15:fd:53:ea:23:5e:eb:8b:00:80:
69:52:12:eb:77:dd:28:49:ac:4e:25:8d:a3:b0:4a:
a0:bb:e9:1a:6f:be:60:68:8d:2d:ba:63:b5:1c:bf:
4b:53:74:9b:83:bd:f6:50:af:aa:ee:84:e2:02:e7:
83:6e:87:7c:2d:19:10:b1:09:86:d5:a5:6a:a9:e4:
12:48:44:59:4a:ff:0d:70:05:8a:e0:d2:f2:2b:45:
77:8c:ca:18:84:da:04:23:30:7b:00:10:71:73:23:
7b:cd:21:81:11:e6:5e:a6:70:2e:ad:c0:de:f4:7b:
ba:1d:37:d3:e4:2e:6f:99:01:df:ac:cf:ff:37:b3:
9f:5f:8b:b8:86:bb:fa:50:ef:42:94:d8:f9:70:5b:
92:86:13:64:7a:ae:d8:ca:0e:4f:c4:d2:69:13:a9:
fe:7d:e0:fb:01:73:58:de:a9:6b:d1:e5:21:d8:0b:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A8:9D:8A:AA:5F:6B:99:D4:CD:37:57:B8:89:EC:95:08:A9:24:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2494D0CA4C811EFAE2BCD44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.48.0/22
Signature Algorithm: sha256WithRSAEncryption
38:2d:6f:09:fc:c0:2a:a8:3f:8e:67:97:36:e7:57:e8:11:22:
52:4e:13:ae:c8:a0:1e:79:53:9f:c2:bb:89:2d:6f:03:e1:80:
7f:bc:eb:2e:a1:f3:17:c2:1b:17:cb:ee:38:9a:89:a9:10:68:
b2:15:a9:ac:de:7e:49:d6:33:89:64:58:ba:41:2d:58:ad:a7:
1b:7e:62:f5:80:d3:47:f0:3e:1b:60:7c:e9:45:da:f8:7b:8a:
60:92:8a:35:d4:69:d7:fd:98:fb:5e:6d:6b:1e:fd:84:36:d1:
57:9b:4e:c0:db:a8:e6:7e:38:e9:54:a7:81:03:91:ff:b5:50:
b9:83:34:88:af:e3:03:d1:10:ba:47:77:c9:fc:2a:04:88:37:
15:fd:e4:45:c1:b1:5c:db:66:1b:1d:27:d0:b5:61:4d:7d:6e:
68:98:9b:ef:aa:d4:50:b8:b1:b0:40:01:9b:47:ba:93:82:a3:
ad:f4:f6:28:aa:91:55:35:aa:3c:f0:b6:54:5e:02:89:ca:f5:
18:28:37:cf:5e:de:40:77:42:6c:4c:fa:48:39:00:54:be:24:
48:4c:e7:5e:ee:53:aa:e9:f4:a3:28:11:b8:45:45:65:8b:77:
c6:65:5b:3c:c0:04:d3:96:a9:5f:f6:6e:48:1e:35:59:e6:91:
e5:41:e8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:48 2024 by rpki-client on console-ams.rpki-client.org