Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D80F55A2A65111EFB016FB66762E951A.roa
File: D80F55A2A65111EFB016FB66762E951A.roa (raw, json)
Hash identifier: G86BHt7s99EtirHjI91d0Gt/nLPeKC9Q+NV88YM+jX4=
Subject key identifier: 75:38:2B:61:93:B1:BF:DC:DB:AC:D0:F3:5E:0E:F0:E5:2C:CC:61:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D58C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D80F55A2A65111EFB016FB66762E951A.roa
Signing time: Tue 19 Nov 2024 08:39:52 +0000
ROA not before: Tue 19 Nov 2024 08:39:48 +0000
ROA not after: Sat 23 Nov 2024 08:39:48 +0000
asID: 149014
IP address blocks: 45.192.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54668 (0xd58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 08:39:48 2024 GMT
Not After : Nov 23 08:39:48 2024 GMT
Subject: CN=673c4ed8-d5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:ae:88:3f:8b:37:cd:7d:5e:24:c5:56:36:
c7:78:84:c2:20:6b:71:52:ed:c2:5f:a1:49:97:45:
23:0b:a6:26:79:50:32:ce:18:b3:11:7f:42:00:0a:
0c:3b:41:2f:55:ec:a8:2e:02:b0:dd:04:5d:f3:df:
fc:dc:92:dc:a8:e0:aa:91:66:2d:0b:94:c5:d1:f6:
44:c8:59:a4:55:00:2a:65:43:24:51:27:e2:ab:23:
d9:44:c3:c2:8d:e3:d8:41:7e:64:e8:15:94:52:17:
bd:ae:86:d1:37:2e:cb:9e:2f:30:d2:99:4a:15:66:
6d:5b:6b:11:43:42:67:3a:07:e6:d8:0c:62:0f:e1:
3f:4e:b9:7c:bc:0d:13:fc:c5:8d:82:4a:06:96:93:
c2:21:3b:57:e7:8c:d4:e5:69:ae:e8:da:9e:46:7c:
f9:d5:62:7c:e1:93:dd:8c:b3:68:d5:b3:b3:e9:52:
6a:9c:b0:1b:01:a7:5a:1f:be:77:a3:a3:71:40:7b:
81:be:2e:b1:2a:3e:8c:79:86:71:d7:3b:1e:fc:d9:
9d:ca:d4:88:1f:42:df:49:bb:16:d1:a5:cf:09:32:
e2:07:f9:b9:d6:0d:a8:c9:17:95:55:3d:88:f0:6d:
cd:bc:1e:4f:2f:b5:83:71:3e:6e:86:7e:1a:aa:0e:
ee:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:38:2B:61:93:B1:BF:DC:DB:AC:D0:F3:5E:0E:F0:E5:2C:CC:61:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D80F55A2A65111EFB016FB66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
22:ec:08:eb:15:a5:28:32:0f:d3:af:94:37:34:fb:c0:a4:49:
88:84:8f:d6:02:9a:ae:8f:af:fb:98:01:7b:da:ec:f2:b3:88:
e6:52:92:81:b6:a8:03:81:5a:88:38:1c:6c:38:84:cf:25:c6:
c5:b2:4a:dd:b9:44:54:98:b1:be:6f:bc:87:17:62:06:32:03:
55:41:27:c8:b8:b6:f1:a6:40:5a:8a:df:cb:7a:9f:f0:17:4b:
52:97:a1:9b:36:d9:e9:ea:29:af:48:8b:3f:82:43:96:1a:45:
e3:ea:40:39:c9:7d:b3:ec:94:00:66:2d:f4:61:ec:6d:c7:16:
38:0d:f6:3b:0e:22:ca:8e:7b:81:c1:16:69:60:58:9c:6c:9a:
10:19:ea:a7:38:9d:2f:9c:a2:62:fc:bc:4a:1c:d1:77:80:90:
35:d1:84:97:ae:6b:4e:a7:b8:7d:15:31:29:20:2d:7a:b6:51:
bd:81:9b:0e:f3:a7:05:7b:c9:08:fd:e3:7c:4d:7d:0c:e0:c8:
bd:a6:64:f0:d2:3c:b0:d8:48:e9:91:27:22:22:c5:e2:35:45:
90:12:3b:f0:56:a5:cc:3e:29:fb:1a:d6:d0:b3:f6:79:f3:1e:
95:ad:cb:31:5e:45:81:87:94:0f:07:ef:c5:7e:da:19:6e:66:
a0:23:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:50 2024 by rpki-client on console-fra.rpki-client.org