Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA3FA8DEA0EA11EFAA18C5BA762E951A.roa
File: DA3FA8DEA0EA11EFAA18C5BA762E951A.roa (raw, json)
Hash identifier: FavUOQaWv4nMsXQ+Lfylpavf4Pjd03JQ7R+mkkUZ2+k=
Subject key identifier: D9:26:B5:E1:C3:94:99:D3:F6:86:3E:AE:B1:C8:57:8D:E5:50:96:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA3FA8DEA0EA11EFAA18C5BA762E951A.roa
Signing time: Tue 12 Nov 2024 11:40:02 +0000
ROA not before: Tue 12 Nov 2024 11:39:58 +0000
ROA not after: Fri 22 Nov 2024 11:39:58 +0000
asID: 21859
IP address blocks: 45.196.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 11:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53727 (0xd1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 11:39:58 2024 GMT
Not After : Nov 22 11:39:58 2024 GMT
Subject: CN=67333e92-9417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:b1:f3:33:ec:b5:20:46:90:00:06:67:d4:
f5:87:c1:65:af:03:03:87:39:4a:c6:c7:3d:92:26:
6d:9a:a7:1d:75:d2:b8:cf:b7:d6:3f:f9:40:d2:0b:
97:63:69:d4:ee:86:13:c4:e2:f4:40:f9:72:2a:79:
d8:7b:e6:51:09:2e:52:b3:97:d5:25:5b:a2:32:f6:
49:6f:bd:67:37:3a:3e:91:67:cc:c3:dd:9f:36:b4:
ea:7c:00:a1:ca:12:f4:19:7b:3f:a4:86:90:f9:25:
2b:19:d2:76:67:3f:8b:11:11:6e:f8:78:85:31:06:
a4:43:f0:37:fe:65:19:7f:88:b1:ae:71:b1:d7:fc:
08:5a:10:52:de:5f:94:ac:50:be:ae:cc:06:2a:5d:
6c:d7:20:46:7c:7b:40:e1:58:c4:19:ac:5b:46:f7:
50:81:30:68:bc:d0:9a:d1:81:f9:94:cf:7b:0d:71:
1c:70:65:f7:04:ee:e1:4e:bf:9f:43:86:a0:5a:a4:
b9:1b:8a:2d:dd:6a:e4:77:ce:9a:d0:e5:0f:fc:5a:
5b:70:62:99:e3:f4:5e:5f:17:63:b5:4c:76:4a:86:
b1:28:27:b5:22:df:b0:77:a9:67:6d:fe:18:af:de:
45:da:21:37:c4:bd:a9:a5:65:e6:83:3a:f7:49:c5:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:B5:E1:C3:94:99:D3:F6:86:3E:AE:B1:C8:57:8D:E5:50:96:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA3FA8DEA0EA11EFAA18C5BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.136.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:df:ed:08:5a:28:a7:89:8e:91:2e:5f:6c:01:97:6d:b9:4e:
d8:88:28:99:ad:f2:d0:96:63:f1:74:32:b6:95:ef:cb:ec:56:
42:9f:64:64:88:9e:94:cf:5a:62:41:1c:ff:7d:e5:17:59:c7:
00:cf:7e:05:14:d9:31:7b:3e:37:64:e2:de:15:7e:fa:9c:2d:
37:fc:9c:27:a4:a6:82:34:cf:7b:89:94:72:26:18:5e:c2:33:
14:ba:e5:00:58:f1:01:9c:d8:54:c3:4d:60:bb:02:73:a8:c9:
62:d6:53:0a:2c:28:7d:78:88:a5:d4:8b:02:5d:62:5d:4c:d8:
12:9e:b2:a9:f7:ee:be:37:5a:41:55:43:ad:9b:44:22:9e:77:
5e:ca:da:f1:47:d4:3a:2a:07:08:5c:00:d2:ce:21:fd:1f:0d:
e2:b9:96:f5:f5:be:0c:63:2e:11:ba:d5:7f:b5:f0:13:a8:ad:
5f:b7:e2:82:69:e3:f6:ba:25:70:fa:65:a0:1e:e3:05:23:6f:
91:24:bf:b9:2c:21:39:06:b0:5c:a4:6a:f7:34:2b:ba:1f:fe:
e6:09:4a:21:b4:1d:72:88:d1:cc:55:ee:61:4f:01:69:80:3a:
d5:eb:0f:61:30:e2:96:ed:43:f1:ec:62:43:bc:30:19:20:61:
4d:e7:3c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:52 2024 by rpki-client on console-ams.rpki-client.org