Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6F53586951011EF8D633C8B762E951A.roa
File: C6F53586951011EF8D633C8B762E951A.roa (raw, json)
Hash identifier: gVOBpmhsm0d7ms7jQiuJZ6pyH72ZlywE4tTzswSXbNU=
Subject key identifier: 46:5E:D3:4B:71:C9:52:42:BE:64:C8:4F:37:AE:B3:A8:E2:C7:00:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C930
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6F53586951011EF8D633C8B762E951A.roa
Signing time: Mon 28 Oct 2024 09:41:16 +0000
ROA not before: Mon 28 Oct 2024 09:41:13 +0000
ROA not after: Fri 29 Nov 2024 09:41:13 +0000
asID: 149440
IP address blocks: 45.195.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51504 (0xc930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 28 09:41:13 2024 GMT
Not After : Nov 29 09:41:13 2024 GMT
Subject: CN=671f5c3c-d13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:bf:ee:36:bb:6e:72:47:63:c0:5d:22:b8:
81:c1:a7:7e:4d:c1:e4:e7:e2:4e:c0:f7:f6:ba:65:
65:6d:d9:00:4c:a3:71:73:a3:e5:39:17:04:23:f2:
f1:7c:00:d2:7d:05:4c:1f:8b:7f:bb:f1:5f:60:9f:
10:b9:34:6f:61:81:67:b5:21:c8:71:86:a1:3b:68:
e9:bc:7c:87:f9:e8:6d:89:8e:d2:c9:a3:90:70:c4:
bf:82:86:f4:e2:5d:95:56:82:02:da:27:81:cf:bb:
23:21:a6:6f:5f:e2:7b:99:b3:1c:4c:65:ea:29:ca:
bd:b3:6c:8d:d8:ef:52:7d:32:43:00:36:b9:b9:bc:
05:f6:ce:b2:a7:74:f6:a5:fa:14:23:76:fd:3d:f1:
9a:a1:3e:4b:55:31:1c:34:c1:17:a2:d9:ac:8d:0d:
53:53:ed:e9:e6:6d:58:ca:51:15:34:c9:de:66:87:
69:07:1c:7a:c8:cc:56:0e:a5:f1:08:99:c8:dc:ad:
28:e3:5e:c5:ad:a3:84:b1:a1:b4:e1:3b:61:18:37:
62:82:64:f3:02:e8:6e:8d:74:19:03:af:70:47:be:
5a:11:7d:86:3f:75:33:ef:21:44:63:59:21:85:60:
b8:2e:ef:dc:7e:c3:59:a6:8b:85:80:93:16:a7:5b:
a3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5E:D3:4B:71:C9:52:42:BE:64:C8:4F:37:AE:B3:A8:E2:C7:00:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6F53586951011EF8D633C8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.69.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ce:d4:07:65:3d:29:57:96:d8:f3:47:c6:de:c4:88:27:53:
a0:d4:83:e5:9b:77:48:5b:9b:c1:a7:b6:b3:ea:6d:0a:5e:f1:
35:10:92:cd:8c:00:a3:b7:77:c4:d4:fa:73:4b:86:f3:14:0a:
10:e4:6e:0d:7c:74:eb:bc:2e:b4:b4:6a:f7:12:f3:4c:d5:48:
32:e5:00:6b:e5:3c:6c:e6:fe:1e:19:e4:5a:59:68:dc:aa:58:
3b:8a:fb:c4:e4:3d:94:7e:60:c4:eb:d9:b6:6d:4c:35:9b:f1:
a1:01:9b:b6:67:b1:fc:4f:50:ac:e1:00:1f:73:66:b9:c9:7b:
44:1f:01:73:80:8b:e8:7a:c7:ae:1a:a2:55:a7:6c:4d:8c:d1:
10:67:48:95:de:d6:2e:cc:eb:ca:82:2c:96:2f:54:ff:8b:94:
b4:8a:b0:20:8d:4e:67:25:13:ac:ab:6c:a0:0c:53:3f:cf:a2:
41:bc:ab:99:93:5c:d1:76:8e:bd:c4:87:ae:18:39:69:f1:aa:
eb:06:5b:5c:ee:46:34:a8:af:3a:f3:83:3e:79:1a:3c:0a:55:
42:f6:e6:ae:e1:86:43:c8:5f:d7:0f:6b:2d:ac:16:04:39:5f:
8d:3a:5b:5b:3e:b0:2d:0d:c9:4e:48:4f:76:31:f8:c2:d2:5a:
4a:dc:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:47 2024 by rpki-client on console-fra.rpki-client.org