Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6AE7850A44711EFAE17448F762E951A.roa
File: F6AE7850A44711EFAE17448F762E951A.roa (raw, json)
Hash identifier: oYw0ePJpgRQZnOHvqWn6lnmuyTm4MV2/DTwo70z69Xo=
Subject key identifier: FC:70:4B:87:C4:75:2D:C3:E1:6C:33:D5:D9:10:DF:C9:DB:6D:5E:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D384
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6AE7850A44711EFAE17448F762E951A.roa
Signing time: Sat 16 Nov 2024 18:24:06 +0000
ROA not before: Sat 16 Nov 2024 18:24:02 +0000
ROA not after: Mon 25 Nov 2024 18:24:02 +0000
asID: 7029
IP address blocks: 45.196.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54148 (0xd384)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:24:02 2024 GMT
Not After : Nov 25 18:24:02 2024 GMT
Subject: CN=6738e346-c1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:f6:a2:d7:b4:1c:33:ab:79:cf:41:a2:6a:
53:f9:e8:93:20:29:c9:ea:35:71:cd:e3:ad:16:00:
84:3f:2c:eb:aa:d6:7f:b3:95:23:b4:65:7a:50:a7:
15:48:9c:a2:85:22:44:06:32:a8:6e:3c:ed:d1:d5:
be:aa:40:5a:55:c8:1e:67:11:20:ec:c5:19:65:e3:
a7:22:50:ec:19:bc:2e:52:6e:81:e1:36:7a:f3:2c:
30:33:30:87:d9:7f:a5:63:ae:d0:8a:08:5a:44:c4:
3d:8d:f3:94:46:dd:7f:58:61:a4:7c:be:0f:d4:07:
eb:bd:00:ee:a2:0a:0f:60:c1:fc:3c:3c:ad:23:b0:
95:44:d0:41:6e:55:d0:d1:90:8a:1c:dc:89:cb:a6:
df:d1:3b:78:85:b4:a2:24:8e:f6:39:48:91:12:87:
86:7f:20:b9:19:4a:ae:55:34:07:37:b4:e8:5f:ab:
c6:5c:5c:14:99:0b:7a:42:1a:37:e4:ef:13:b4:f8:
0f:bc:ef:23:6c:38:fa:e2:17:8d:43:62:43:48:6f:
99:ea:80:d3:cf:6d:de:77:16:4d:e4:66:74:8f:c7:
f2:8a:23:6c:1e:18:aa:7e:7d:f8:8f:e8:f8:9b:39:
7d:d4:c6:98:6c:aa:20:78:e7:e9:48:01:84:ae:22:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:70:4B:87:C4:75:2D:C3:E1:6C:33:D5:D9:10:DF:C9:DB:6D:5E:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6AE7850A44711EFAE17448F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.40.0/22
Signature Algorithm: sha256WithRSAEncryption
63:b1:9c:2d:9a:36:8b:67:7c:13:dc:32:09:cc:cd:e2:27:77:
02:79:34:64:94:8d:eb:26:f5:f7:8c:83:90:a3:10:63:7e:c3:
28:2f:9c:85:2e:a4:7d:c1:bc:d0:06:88:37:bb:ff:f3:fc:14:
65:43:50:93:63:2e:ab:d0:ce:3c:c2:7a:24:98:d5:2a:7c:78:
d8:a9:85:7f:49:cf:48:b5:3c:e3:77:8f:0c:a3:ab:85:2a:c4:
e2:72:bf:ae:50:4c:9c:2f:63:77:0c:36:5f:57:f4:cd:84:ba:
6f:d2:7d:cb:0f:46:dd:2a:ff:07:b5:7c:22:b9:e6:70:7c:37:
97:61:62:dc:1e:b9:c2:d2:6f:ee:7f:57:47:2f:71:34:7a:90:
82:ca:a0:45:b6:f1:93:ac:8b:b1:52:5e:fe:ae:0b:65:02:f6:
7b:47:d0:e7:4a:7e:ea:23:2e:a6:4e:07:02:bd:81:1d:70:23:
42:f1:b7:41:cc:cc:69:f4:67:89:e9:86:58:b4:a1:0e:41:5c:
ba:c3:40:f9:66:69:66:0a:d6:21:3f:69:c9:c1:78:15:83:28:
35:7e:28:cb:32:6d:b0:32:1a:ba:8c:6b:d9:2f:16:fd:5c:57:
7e:03:33:2b:d2:88:9f:dd:ec:3b:60:03:dc:37:10:96:ee:74:
7e:2a:51:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:57 2024 by rpki-client on console-ams.rpki-client.org