Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70571A07CB011EFA8B94070762E951A.roa
File: F70571A07CB011EFA8B94070762E951A.roa (raw, json)
Hash identifier: lcAY3YgPktEZ4rTIH67aKY+Xi9r+tBwwhcE3ezHvNqY=
Subject key identifier: 26:B2:1E:41:8B:67:8F:C4:97:40:3B:7A:57:DA:48:0A:45:94:31:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BBB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70571A07CB011EFA8B94070762E951A.roa
Signing time: Fri 27 Sep 2024 09:14:57 +0000
ROA not before: Fri 27 Sep 2024 09:14:54 +0000
ROA not after: Sun 19 Jan 2025 09:14:54 +0000
asID: 140925
IP address blocks: 45.195.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48053 (0xbbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 27 09:14:54 2024 GMT
Not After : Jan 19 09:14:54 2025 GMT
Subject: CN=66f67791-e091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:79:00:47:47:b3:46:d3:35:b4:ae:00:98:
b0:44:27:2a:d4:87:35:d6:ff:0f:b3:c8:08:6b:b9:
05:f4:0a:df:ed:1d:0f:58:2c:b6:4e:96:8b:b8:d5:
95:2e:71:99:ad:e7:40:f5:c5:1f:35:8c:7a:58:c3:
bc:41:90:ea:f1:da:d7:ac:f2:bb:03:8e:d6:d5:7e:
5c:df:c9:2d:71:c9:24:1e:c8:d9:8c:4f:bb:ca:81:
53:1a:40:6f:69:35:99:15:18:84:fa:42:d8:77:a2:
38:5e:00:74:a8:b5:10:99:e1:22:b8:a8:78:4a:22:
94:45:a4:4a:05:18:59:2c:03:1d:8a:73:3b:3e:5a:
d7:01:9a:92:8f:af:75:be:46:1c:80:d9:d3:74:f9:
7f:36:43:cc:ec:e2:ec:4f:bd:6c:8e:9c:a1:2c:38:
1c:95:d1:95:93:ac:6a:17:ce:d3:2c:d2:bc:65:5f:
e8:6d:b6:c4:2b:d4:2e:1b:f8:fd:60:a7:06:59:01:
98:aa:29:8d:e1:8c:77:79:68:eb:16:2d:ef:d5:59:
5b:62:c8:8f:a6:c0:a1:82:76:48:60:d0:41:3c:01:
e7:4a:90:08:b0:8d:63:73:38:34:2f:2a:18:dc:77:
d2:0c:98:2f:46:bd:b2:7f:d6:65:c0:70:4c:11:a7:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:1E:41:8B:67:8F:C4:97:40:3B:7A:57:DA:48:0A:45:94:31:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F70571A07CB011EFA8B94070762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ed:03:92:1a:5a:87:41:ad:47:e5:08:e2:96:5a:16:25:e2:
55:12:6c:11:69:98:ff:63:f2:bc:8e:1f:26:48:22:67:bc:f3:
43:e1:78:fd:53:cd:fc:30:5a:38:b7:f6:b1:10:af:ce:6c:5b:
48:73:bd:0e:53:fe:8b:8c:1e:ed:a3:5c:d6:ba:9d:5c:52:a2:
03:2a:d6:79:e1:c2:42:8c:e5:b6:dd:f5:8c:39:af:b8:da:82:
e8:56:0c:98:db:05:64:57:83:7e:43:9c:8a:e5:b5:6e:81:db:
61:f5:73:c3:6e:c1:bb:78:a0:78:55:0f:9b:53:d4:79:7f:80:
0a:31:b4:5f:43:db:07:91:02:b9:aa:ca:c5:e7:67:7b:bd:83:
db:f1:8b:78:e0:b2:14:44:ed:64:40:ed:72:73:b4:e1:91:6d:
cf:90:20:55:33:8f:ac:85:ba:21:98:b6:7a:b1:44:41:a1:de:
69:a2:69:2a:7c:40:78:56:50:85:ed:4d:41:ab:9b:c2:0d:ed:
06:00:55:49:ba:c4:66:8b:d8:c7:bb:76:5d:64:c2:bf:2a:25:
af:22:6a:01:e9:fc:32:8f:55:55:91:d2:43:c8:c3:07:26:d8:
eb:77:2f:ff:44:37:38:ee:24:28:b7:2c:7e:7c:40:83:7f:b2:
1d:97:e6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:57 2024 by rpki-client on console-ams.rpki-client.org