Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB41B38EA26D11EF9A1DDC65762E951A.roa
File: CB41B38EA26D11EF9A1DDC65762E951A.roa (raw, json)
Hash identifier: gVm0qNMvr/bMYTxe3wWFacrmAkruSzzNsymSpWln41s=
Subject key identifier: A0:A6:5A:8C:A6:4E:FD:C5:8C:D8:F8:4A:77:E0:5F:C6:FC:05:0F:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB41B38EA26D11EF9A1DDC65762E951A.roa
Signing time: Thu 14 Nov 2024 09:49:52 +0000
ROA not before: Thu 14 Nov 2024 09:49:48 +0000
ROA not after: Sat 23 Nov 2024 09:49:48 +0000
asID: 137443
IP address blocks: 45.192.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53945 (0xd2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 09:49:48 2024 GMT
Not After : Nov 23 09:49:48 2024 GMT
Subject: CN=6735c7c0-638e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:1b:b0:a1:b1:04:82:43:03:58:e2:b8:ea:
79:dd:35:dd:31:05:63:69:64:34:cb:02:3e:c5:e1:
76:4c:26:9d:ce:d2:9b:9a:5f:14:9d:fb:a5:dd:94:
9c:92:53:bf:68:a6:74:7c:0a:a9:e1:cb:f2:5e:31:
76:c2:6e:97:a9:42:f2:39:86:56:d3:9b:61:fe:f3:
7c:b3:f9:84:83:d9:32:aa:ec:2b:dd:57:33:67:a2:
d4:7c:47:aa:00:f4:ce:a4:e8:8e:f4:bf:67:47:87:
f7:7f:11:d8:80:e8:ec:bb:de:5f:5f:4b:94:95:d6:
00:ec:62:7b:9e:f9:9b:44:1c:54:4c:d7:c2:93:eb:
5a:f5:0b:ad:92:c8:48:9a:77:c3:dc:11:a1:ab:79:
e4:0e:2f:c6:03:10:14:0f:16:6a:27:b6:23:53:89:
8c:77:b7:8f:40:04:e0:a7:69:51:eb:a8:80:ff:c2:
45:c2:f8:da:3a:bc:78:93:fc:94:17:2e:1d:81:ca:
d6:60:08:0b:f0:0f:dd:9a:01:51:51:b8:8a:40:3a:
da:d8:0b:15:ee:58:60:4c:6c:fd:88:37:54:57:02:
a0:55:19:a1:60:e1:34:f7:b3:ce:28:59:52:f8:c9:
5c:ac:f8:03:3d:df:5b:50:db:87:13:17:f9:55:b9:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A6:5A:8C:A6:4E:FD:C5:8C:D8:F8:4A:77:E0:5F:C6:FC:05:0F:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB41B38EA26D11EF9A1DDC65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:b1:5c:7c:46:b5:d4:e7:8c:0f:50:21:6b:4e:fd:1e:76:9b:
b4:18:bc:c2:9c:5e:ce:78:74:25:ae:ed:fd:75:fc:86:82:61:
a3:c7:8c:7e:25:a5:bd:46:b7:35:fc:b7:47:24:ae:23:59:30:
d0:bb:0d:f8:04:32:3b:e4:51:71:2e:12:16:fe:ad:5e:df:22:
52:37:57:6f:9a:ab:f2:93:3a:ef:e5:6c:4d:a1:55:d8:00:07:
f6:e0:b2:65:6c:ad:93:e9:e2:3e:73:a7:22:2e:95:e8:9f:2b:
90:c2:f7:b0:bb:57:05:dd:96:b8:e1:19:48:d1:07:9b:e5:b6:
95:94:b2:d6:58:7a:01:1f:82:3c:1a:e0:49:31:c7:7c:ed:01:
af:1f:25:88:16:58:90:c6:51:f9:cc:08:a0:88:a2:bf:98:f6:
7f:65:0b:77:9d:90:e4:31:f0:7f:6f:21:35:31:fe:47:b2:6b:
3e:9b:45:e3:ce:3b:1b:56:47:9f:67:d2:b8:cd:29:28:79:95:
14:8c:6d:07:d1:d9:69:fc:3b:df:ae:fe:a8:de:12:be:af:2f:
88:3b:08:03:bb:eb:0b:7b:8d:78:fd:94:43:5e:78:21:94:a8:
eb:0e:50:07:53:00:91:61:61:3b:91:9d:84:67:ba:3e:66:04:
bf:ff:df:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:48 2024 by rpki-client on console-fra.rpki-client.org