Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4BA8A7047E111EFBB9F0E9C762E951A.roa
File: E4BA8A7047E111EFBB9F0E9C762E951A.roa (raw, json)
Hash identifier: MxFc89Z3Cxjeesv3MPaz1o9SJr5n++JijISrqBGOXQU=
Subject key identifier: 2B:C5:39:E1:83:EC:BD:D6:9C:85:D9:BF:58:58:D6:85:B8:34:A2:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4BA8A7047E111EFBB9F0E9C762E951A.roa
Signing time: Mon 22 Jul 2024 04:21:40 +0000
ROA not before: Mon 22 Jul 2024 04:21:37 +0000
ROA not after: Tue 26 Aug 2025 04:21:37 +0000
asID: 133115
IP address blocks: 45.195.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40483 (0x9e23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 04:21:37 2024 GMT
Not After : Aug 26 04:21:37 2025 GMT
Subject: CN=669dde54-3ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5d:49:fc:0e:96:ed:e5:0d:6a:53:96:43:79:
40:b4:c5:aa:4b:d7:25:35:e1:d2:a1:84:37:c0:a1:
25:5d:48:d4:47:e9:ff:f3:49:7d:bb:4c:bc:8f:92:
fe:43:17:d7:30:78:46:35:48:e7:97:85:bd:05:03:
f9:76:24:7d:68:a7:70:a5:41:51:1a:f9:5b:2e:77:
2b:9a:b1:2b:65:c8:f6:d9:36:da:fa:91:4b:49:db:
bc:60:83:fb:e6:e7:0e:5c:43:8d:bc:42:64:22:52:
af:9e:b5:f6:15:3b:e7:a5:e6:51:96:02:c4:60:f2:
2a:60:72:34:3e:c3:e4:7a:9d:1e:92:c2:7b:28:4f:
59:02:e4:12:46:6c:8c:2f:25:da:80:8b:65:a4:1d:
97:7a:d6:f7:f5:b1:bd:a0:3b:b4:9f:92:0d:30:d8:
06:87:d9:67:54:b9:fc:ea:04:7c:4b:31:fc:06:18:
c8:13:26:94:9b:e3:18:43:9d:07:56:ba:ae:0f:dd:
11:58:0f:61:da:e3:ce:cb:74:d1:fb:1f:d5:8a:32:
3e:ee:66:e3:87:71:82:8a:c9:79:52:33:54:f0:1d:
25:6e:51:34:71:18:7a:ef:08:8a:b3:85:a6:2b:db:
0a:97:e0:89:1d:95:af:85:8a:de:13:a1:51:2d:1e:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C5:39:E1:83:EC:BD:D6:9C:85:D9:BF:58:58:D6:85:B8:34:A2:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4BA8A7047E111EFBB9F0E9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.251.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bf:ec:81:b1:07:82:aa:35:dd:9f:cd:e1:42:9b:f2:ec:86:
89:33:cb:e6:9b:e2:28:5f:6e:25:6b:04:4b:a1:d5:c3:4a:b0:
4b:03:cf:a7:4d:bb:77:0d:e7:71:dc:ff:ab:5e:d9:3c:fc:29:
57:8a:ae:b1:00:ea:79:70:a9:5b:84:10:dd:40:96:91:25:f4:
8f:17:4d:59:a0:95:6c:ca:73:83:5c:fd:01:15:7b:cd:4b:bf:
d3:f7:e1:5b:06:6e:6f:98:c0:41:43:48:88:24:d2:bf:f6:09:
af:eb:29:0b:9d:dc:45:b0:3a:c1:9d:c6:c7:ba:29:e5:87:3a:
8b:ae:19:96:c1:a6:d3:53:83:ce:ba:b0:33:f6:ce:f1:d4:26:
3f:e2:8b:c5:95:88:91:82:6f:60:38:28:c8:7c:6c:30:64:10:
6b:b9:4e:31:db:cb:60:c9:7b:9e:e8:ad:48:e4:b7:77:59:9b:
f5:28:47:8e:4c:f7:34:cf:da:83:8c:2d:39:91:ac:b6:d4:92:
50:b8:82:2f:96:57:26:bc:c3:21:20:ad:a6:bc:74:61:8d:11:
4f:2e:31:eb:ec:1d:71:42:1f:4b:31:55:23:fa:46:8a:48:f8:
8b:eb:97:3e:f2:9e:96:0f:76:f9:6e:f2:f0:eb:14:c8:8d:76:
8a:68:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:54 2024 by rpki-client on console-ams.rpki-client.org