Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F04AA4FAA4C611EFA73327B8762E951A.roa
File: F04AA4FAA4C611EFA73327B8762E951A.roa (raw, json)
Hash identifier: LLJ98m7h+dUw1hztObfembsvRcAxzV0syr7KSZLqaY4=
Subject key identifier: 13:BD:DB:CE:7E:D7:EF:86:DD:18:07:52:1B:52:E3:34:69:E1:90:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D48F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F04AA4FAA4C611EFA73327B8762E951A.roa
Signing time: Sun 17 Nov 2024 09:33:01 +0000
ROA not before: Sun 17 Nov 2024 09:32:58 +0000
ROA not after: Mon 25 Nov 2024 09:32:58 +0000
asID: 399989
IP address blocks: 45.196.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54415 (0xd48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:32:58 2024 GMT
Not After : Nov 25 09:32:58 2024 GMT
Subject: CN=6739b84d-124c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:bc:db:c0:ba:87:97:f1:5d:51:02:90:c4:
07:ed:df:9d:2d:33:18:70:72:fe:c7:34:b8:fd:a3:
7e:a7:e7:d0:fd:52:1d:1f:e4:82:04:dd:8f:19:0f:
a5:e4:a8:b3:8a:36:8a:08:47:55:d1:ce:01:9f:d3:
6d:3e:66:50:fa:14:0f:90:50:9f:36:d7:29:d4:e9:
eb:1e:60:6d:c7:87:e6:29:d8:b6:fe:7f:f4:a0:92:
e9:f4:64:9b:0d:66:b1:5e:30:e9:2e:31:13:3c:d9:
d5:93:68:cf:af:42:61:ba:be:3a:bb:c0:86:c0:06:
98:b0:ed:5f:21:9b:86:15:37:9d:74:6a:ad:36:74:
b1:31:17:65:af:2e:b7:78:f7:bc:69:27:4c:c3:23:
da:9d:69:d6:63:02:39:ca:9f:83:ed:30:c3:0e:67:
fe:f3:ae:43:30:8d:f5:32:9d:a8:e5:91:b3:e5:00:
42:d9:a8:26:a0:3e:8e:d2:cf:27:4b:28:bf:e0:c0:
62:8a:44:78:1e:3c:67:b1:c7:f7:1b:30:81:a0:76:
da:5a:b9:a3:89:63:46:fd:8a:f5:1b:3c:77:ca:2d:
5d:22:d7:d4:ef:d4:2e:37:fb:9d:c4:b1:15:0e:bc:
e3:88:14:75:86:26:8e:a4:9a:71:85:72:ed:74:4a:
13:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BD:DB:CE:7E:D7:EF:86:DD:18:07:52:1B:52:E3:34:69:E1:90:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F04AA4FAA4C611EFA73327B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:9b:9c:2a:43:7a:5f:5b:70:7a:a2:47:3f:58:a7:04:58:19:
5c:3c:0d:cb:d2:57:a5:47:ed:6a:80:9a:4c:97:31:97:6e:0b:
bd:0e:74:c8:d3:ef:0c:b1:86:b9:ed:1a:95:12:b5:d7:e3:00:
ce:9c:e2:b5:79:84:73:3d:72:7e:3b:ed:34:35:a8:b9:f4:e7:
5f:35:e3:d5:47:99:e5:a1:e2:ae:2e:37:40:e6:67:d2:66:eb:
2d:3f:64:3a:e4:74:16:3a:ea:78:59:8b:50:55:b9:45:b0:0e:
5a:f6:84:64:0a:7c:fd:ec:01:f8:b1:ec:fb:8f:2c:66:e7:d3:
d1:9e:7d:85:4f:50:ea:37:13:7c:5f:57:7a:42:9a:c4:6d:85:
b6:b5:fb:21:2d:01:70:6c:8a:f5:95:a5:12:26:38:2a:df:78:
69:06:9a:41:fe:7f:ec:ca:45:f1:88:73:34:f5:db:46:a7:64:
c5:03:c4:65:f0:3b:ed:95:ac:62:03:78:18:9c:97:02:33:32:
90:45:30:aa:ee:e9:8c:ae:04:e0:0b:4a:e8:1d:72:14:11:68:
5f:2e:97:78:e3:4d:55:ed:5f:2e:b7:81:65:fd:ff:c6:2a:f7:
d8:dc:42:34:83:70:fe:d5:e4:f4:11:b1:b3:57:3b:6d:64:eb:
76:09:e6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org