Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E456E724A4CD11EFB7B92A63762E951A.roa
File: E456E724A4CD11EFB7B92A63762E951A.roa (raw, json)
Hash identifier: PDvbMTxJiI1jVkzdZasAXWQuUGWdIpMMVHb9t7MdTus=
Subject key identifier: 84:D3:B2:76:8B:2C:ED:51:81:49:E0:9D:99:EC:29:8A:E1:7F:2C:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E456E724A4CD11EFB7B92A63762E951A.roa
Signing time: Sun 17 Nov 2024 10:22:48 +0000
ROA not before: Sun 17 Nov 2024 10:22:44 +0000
ROA not after: Mon 25 Nov 2024 10:22:44 +0000
asID: 9009
IP address blocks: 45.192.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54483 (0xd4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 10:22:44 2024 GMT
Not After : Nov 25 10:22:44 2024 GMT
Subject: CN=6739c3f8-6d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:da:d0:ac:ae:b8:9c:bd:29:50:cf:49:41:
09:9e:8b:8f:c8:c0:de:19:4e:04:25:0f:5c:64:88:
c7:29:89:d7:c0:4d:99:af:5e:a6:8d:a7:8d:8f:53:
58:61:27:de:17:bf:06:6a:ba:e4:ce:fe:a9:d2:31:
0a:3a:46:fa:1d:a7:fc:9d:91:5c:f2:84:19:19:f8:
20:0c:77:6a:d0:4d:c4:06:87:65:f5:d8:a6:a0:e2:
68:61:45:ac:44:f0:61:c6:2a:45:8f:8d:88:af:1c:
ca:93:7b:98:45:67:f2:78:e8:f9:17:08:55:05:48:
9a:7e:9b:c7:eb:d6:b0:5d:82:a8:ff:a3:9a:22:e9:
a5:73:04:11:9c:b3:df:75:cf:66:04:7c:6a:9c:07:
0d:b8:3f:40:58:8a:69:38:3c:2b:fc:36:03:5e:77:
08:62:83:de:21:29:b2:71:8a:b5:43:88:9c:08:e7:
44:ab:8d:69:ea:35:70:1f:98:6e:b3:d0:25:36:c9:
5a:35:1b:ad:24:57:28:19:7f:fb:dd:90:bb:f2:31:
bc:e7:75:21:1b:51:c1:ec:58:05:08:b0:34:d6:99:
73:c1:94:e2:89:b8:74:92:5f:f6:dc:bb:80:10:d9:
a3:1d:09:2c:cd:4f:07:35:bd:b2:52:45:1a:fb:cb:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:B2:76:8B:2C:ED:51:81:49:E0:9D:99:EC:29:8A:E1:7F:2C:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E456E724A4CD11EFB7B92A63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a5:c9:61:94:b7:0e:2c:dd:d3:1f:ea:3a:c7:2a:ee:f9:dd:
8f:e3:52:a4:b6:71:96:cc:1e:78:6c:3e:39:3e:3f:a8:f0:63:
15:59:af:41:bc:8b:57:b4:9b:91:de:56:8d:f2:ec:5b:9a:70:
f6:79:e5:ee:5e:50:88:ab:1b:62:18:7a:87:6b:1e:ea:0a:7a:
3f:fd:72:7f:51:a3:a7:d2:11:aa:c3:0c:24:2a:a2:03:88:5c:
0a:a7:b2:07:12:ba:11:62:31:a1:1e:58:90:4c:10:97:c9:eb:
c3:f8:86:43:c9:cb:97:2d:58:d3:bb:4c:99:1d:22:69:3b:d4:
4e:63:5c:5a:47:ff:50:07:09:5c:01:c0:1b:28:26:fd:5d:90:
e8:16:96:a9:f1:03:72:cb:f5:44:e9:0f:7c:22:01:e9:cf:05:
70:7b:3f:fa:e1:90:ed:fa:53:dd:55:e3:dc:ca:04:d9:41:47:
2b:23:63:8d:1f:10:9d:af:dd:c6:54:1f:84:d3:7d:93:05:27:
af:17:1d:a4:ae:47:25:5a:c4:e2:86:54:05:d0:a9:de:e4:2f:
44:8a:34:10:ab:50:d0:37:61:3f:59:f1:27:84:dd:ce:a3:08:
1b:65:91:f4:12:93:43:29:8d:77:54:93:6f:38:8a:97:2f:e1:
65:0b:35:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:51 2024 by rpki-client on console-fra.rpki-client.org