Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D52B6CE270D511EFB39E1771762E951A.roa
File: D52B6CE270D511EFB39E1771762E951A.roa (raw, json)
Hash identifier: pMNSO3Zedu/VRI5JNH6qCq6jz18pCmID7WW/8CNRJdo=
Subject key identifier: 3E:01:21:53:CA:84:1F:D7:F0:8E:ED:97:C5:B0:C7:EB:93:B8:0F:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B4F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D52B6CE270D511EFB39E1771762E951A.roa
Signing time: Thu 12 Sep 2024 07:08:38 +0000
ROA not before: Thu 12 Sep 2024 07:08:34 +0000
ROA not after: Sun 21 Sep 2025 07:08:34 +0000
asID: 147019
IP address blocks: 45.194.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46325 (0xb4f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 12 07:08:34 2024 GMT
Not After : Sep 21 07:08:34 2025 GMT
Subject: CN=66e29376-a047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:10:19:c1:7e:d1:04:2c:65:f9:42:d2:0f:
04:7c:96:54:1b:f7:d1:42:e6:f1:21:84:94:ca:36:
19:59:cf:a8:07:69:f3:f9:81:33:bf:f3:b5:d1:05:
1b:fa:04:2c:a7:11:ad:a7:63:fb:a1:c0:f3:bb:90:
3d:3d:8a:6b:aa:30:1b:9c:80:da:03:d9:a5:51:da:
e4:2b:9d:62:fe:50:b4:c5:ef:ca:d6:6c:81:9e:13:
77:1b:eb:ca:e3:d1:ec:42:5e:37:4b:84:8b:2e:a6:
b7:4a:91:4e:17:3e:43:c6:94:fa:7a:95:97:94:75:
4e:ac:ff:75:9a:29:a2:6c:50:2c:24:fd:ab:5a:9f:
50:69:1a:1d:e4:db:6a:37:88:7c:e5:c8:b5:cf:9a:
22:b0:d4:98:51:c5:bc:61:fc:8a:08:7b:fa:c0:01:
79:d9:24:11:5c:aa:2c:81:bd:ca:df:41:85:fe:a6:
9a:cf:6f:38:64:c3:c0:de:4e:4e:8d:11:af:80:b2:
1c:d4:2f:04:d6:ee:5f:cb:29:f2:b8:f8:42:c9:b1:
cc:0a:fe:eb:cb:01:2b:13:65:b3:f5:8f:25:ae:c4:
ca:ab:98:ec:51:dc:0a:50:98:d0:ee:3e:72:1c:2a:
d8:a0:4d:6c:02:2f:29:c0:b4:27:af:67:7a:46:81:
60:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:01:21:53:CA:84:1F:D7:F0:8E:ED:97:C5:B0:C7:EB:93:B8:0F:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D52B6CE270D511EFB39E1771762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.56.0/21
Signature Algorithm: sha256WithRSAEncryption
88:d2:ef:11:eb:41:c1:d5:06:06:a5:7e:20:72:b1:a9:a5:07:
84:58:02:27:49:be:bc:f3:a8:f0:f0:da:b9:9b:f5:d4:00:6f:
a5:c2:13:90:6e:68:92:c1:bd:48:bb:d3:9f:71:2f:36:13:b7:
28:a2:05:39:25:98:e3:47:fe:6a:3a:b5:1c:78:19:64:ba:9f:
bd:1f:d6:30:2e:59:33:da:fb:46:cf:67:54:f0:bd:81:36:fd:
a8:91:75:06:f0:92:48:ec:96:b7:54:93:53:e0:5b:ca:e2:13:
13:50:88:3c:6e:c9:b4:f3:2b:4a:46:09:db:65:8d:7b:63:b0:
9c:72:a8:65:c3:07:e7:0a:3e:6b:8d:1a:22:f8:ff:91:a2:ba:
a5:48:fb:7b:63:ab:60:82:6e:f9:bc:47:c2:b8:84:2f:11:3e:
6c:c1:5d:ec:d6:e8:3c:41:2c:bc:3b:a2:c7:e1:f6:79:64:63:
3d:70:19:c4:2f:df:35:c3:96:c6:ec:23:3b:bd:05:f5:11:37:
c2:4f:1a:7e:03:de:98:63:87:24:45:3e:ad:b2:33:29:fc:dc:
69:75:57:81:b8:b7:f3:d4:2e:02:d4:53:11:13:5f:da:dd:9a:
d3:b9:a6:a4:37:85:34:00:d1:ac:4e:c8:f7:d3:5f:42:ac:18:
14:71:76:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:49 2024 by rpki-client on console-fra.rpki-client.org