Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9B1CF9EA4C611EFB44D3DB6762E951A.roa
File: C9B1CF9EA4C611EFB44D3DB6762E951A.roa (raw, json)
Hash identifier: f14+VPFoxxlJi33FhKHID8DUFdUr7Yw5w5wPgqUrJ0A=
Subject key identifier: 2F:DA:F8:57:C2:A2:3D:8B:D7:5C:4D:E9:7C:76:50:50:EE:E9:83:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D48D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9B1CF9EA4C611EFB44D3DB6762E951A.roa
Signing time: Sun 17 Nov 2024 09:31:57 +0000
ROA not before: Sun 17 Nov 2024 09:31:53 +0000
ROA not after: Mon 25 Nov 2024 09:31:53 +0000
asID: 22773
IP address blocks: 45.196.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54413 (0xd48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:31:53 2024 GMT
Not After : Nov 25 09:31:53 2024 GMT
Subject: CN=6739b80c-f73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:67:12:60:5a:9e:e7:58:4a:28:1c:9b:a1:
33:04:c6:7a:db:38:ac:90:36:0a:a5:ba:52:6e:4a:
f2:71:06:6c:7f:7e:a8:56:2b:33:92:8f:f6:54:1a:
09:36:3e:12:94:9d:de:b8:1c:bb:f7:fa:fc:67:bd:
60:a6:b3:08:b6:84:5f:57:d4:af:f0:d9:84:27:c2:
7e:47:d2:87:0b:be:fe:2c:90:9f:97:80:26:fb:7b:
e8:ca:4d:c4:6e:f9:f0:f5:1e:63:43:5c:0d:87:83:
ca:ff:07:2d:9f:b3:de:59:f9:88:54:8e:db:07:c4:
21:ca:d5:72:86:a0:01:a5:0a:22:22:f2:0d:8b:4e:
98:f0:3f:f0:ea:74:8b:9c:6d:7f:4c:b6:37:d1:fe:
8f:35:31:4b:86:21:18:57:a8:fc:69:92:06:4b:f3:
d5:4a:c6:8b:fa:d0:e1:22:c7:d4:fb:64:aa:ae:5d:
f2:ab:67:2f:a4:66:9e:88:81:c0:47:3b:4f:25:72:
ef:49:b9:87:7b:c2:25:d0:22:48:d9:14:14:7a:b6:
25:a0:93:3e:a5:d2:9b:66:b0:7f:b3:6d:9c:d7:d7:
5b:31:9c:b5:90:2f:d8:1b:bc:a1:3e:d5:5b:ae:33:
93:cc:cb:06:36:93:86:38:6c:69:cc:97:a2:00:0d:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:F8:57:C2:A2:3D:8B:D7:5C:4D:E9:7C:76:50:50:EE:E9:83:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9B1CF9EA4C611EFB44D3DB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:00:a7:2f:3b:1f:9a:be:59:06:1e:0a:20:aa:25:a6:08:fa:
d5:a7:e4:3c:c8:95:21:a8:70:82:e7:dd:c9:82:17:2e:41:6f:
3c:ce:88:26:5a:89:07:3a:9b:13:f8:81:f2:7b:64:ca:7f:dd:
e4:54:61:fd:c8:af:27:c9:59:ad:3c:9c:a7:6c:52:e3:26:64:
eb:e4:12:e8:0c:87:07:03:46:82:16:c2:ec:c0:77:a4:e5:90:
e6:46:85:3c:a5:03:89:c6:2f:fb:d9:c3:19:77:0d:f8:6b:c5:
59:27:31:3e:6f:23:46:c0:b8:d7:02:41:80:4c:70:f6:7f:b3:
52:dc:8c:d7:21:aa:a1:2f:53:39:ee:63:36:e6:2b:09:e8:b7:
c2:2e:9b:c6:70:4d:3b:29:10:70:be:4e:32:69:67:c4:49:a6:
3d:39:14:53:c7:aa:6e:36:c5:31:e7:83:03:f3:d3:63:27:b2:
aa:ef:48:ea:74:55:36:04:4a:e9:31:b0:6a:70:cb:58:b6:27:
2c:15:68:7d:d5:b4:3a:20:e0:5c:1c:ce:26:19:25:e2:6a:10:
a8:ab:9d:6d:ac:09:a2:99:4c:44:d1:3b:7c:fb:ac:33:a5:f0:
13:98:c1:b9:3c:0a:66:a9:6e:4b:7b:36:2b:35:26:97:60:13:
04:f8:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:47 2024 by rpki-client on console-fra.rpki-client.org