Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE39052EA45911EF89266981762E951A.roa
File: FE39052EA45911EF89266981762E951A.roa (raw, json)
Hash identifier: ypN7GJHXzDAD71pwYDzKQbitrjWDarPE+WD7goSwluE=
Subject key identifier: F4:A6:E8:12:3B:75:C6:37:95:01:C8:D9:08:38:3B:C5:66:56:66:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D412
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE39052EA45911EF89266981762E951A.roa
Signing time: Sat 16 Nov 2024 20:33:10 +0000
ROA not before: Sat 16 Nov 2024 20:33:06 +0000
ROA not after: Wed 27 Nov 2024 20:33:06 +0000
asID: 39600
IP address blocks: 45.197.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54290 (0xd412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:33:06 2024 GMT
Not After : Nov 27 20:33:06 2024 GMT
Subject: CN=67390185-7ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a0:be:84:4e:bf:9a:b4:7d:0e:78:a3:58:72:
b2:bf:5a:e4:0d:9f:31:c9:8d:71:22:cf:65:e8:db:
a4:c7:73:00:16:c1:e4:98:b6:89:cc:af:00:75:4b:
d0:02:dd:1c:6d:35:9a:99:f8:00:3e:d6:ea:b8:77:
5e:53:89:14:f1:a2:a6:b8:e6:a5:70:91:d8:d3:5d:
7d:fc:5c:f2:7b:7b:26:13:ef:b7:d5:8e:20:61:bf:
cf:1d:7e:56:20:8d:7b:d3:90:be:cb:28:81:6f:ae:
e9:90:6b:f1:4d:45:97:7f:46:e1:48:d6:5d:1b:7a:
aa:5b:a1:18:e8:4e:2a:2d:0f:31:8f:5f:d9:3b:10:
08:a3:be:ae:8d:7a:c4:b8:52:d6:82:31:ca:9f:f1:
dd:fe:55:0e:c3:cc:25:ac:31:ae:d3:e5:e7:fc:4f:
9f:81:49:e0:a8:12:a4:c7:cf:27:3b:6c:2d:4d:79:
f9:7a:04:71:a1:e2:05:40:64:b1:f2:7b:06:ae:d1:
65:6c:45:6f:a0:0b:f5:77:b9:58:ea:86:50:a7:17:
c0:10:f5:84:ce:c9:06:1b:1f:61:7c:32:a2:a8:8d:
98:9c:d9:4b:8e:39:4d:a5:18:c6:c7:96:c0:0f:61:
13:ac:6e:bf:52:75:48:da:40:26:eb:88:5b:66:d7:
64:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A6:E8:12:3B:75:C6:37:95:01:C8:D9:08:38:3B:C5:66:56:66:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE39052EA45911EF89266981762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.236.0/22
Signature Algorithm: sha256WithRSAEncryption
62:f6:37:0d:e9:83:16:0f:be:07:ad:26:40:d1:48:95:9c:11:
3c:84:ea:c5:38:2f:59:70:90:59:f9:11:03:6d:29:0d:4c:11:
f9:fb:33:fd:a9:8d:dd:e5:4d:a6:e3:93:f6:f5:7b:af:d2:3f:
fe:4b:13:70:b2:58:de:ed:bb:fe:87:e8:0d:14:cb:e7:8b:7a:
47:13:27:a1:74:90:a8:06:c3:aa:f3:50:9d:b6:56:d5:fa:46:
20:17:e6:eb:f5:4d:d3:d7:94:11:6b:7e:66:f5:29:1c:b8:f9:
54:93:2d:f7:8c:75:e2:0d:b6:12:7f:01:dd:76:68:b6:dd:70:
7f:db:25:12:4a:0a:21:5f:66:8e:8a:80:50:8c:f4:23:9e:e0:
e9:10:54:bc:34:12:a2:1a:c4:f4:1e:e3:6b:04:67:5f:a6:52:
bc:1f:ba:b8:f3:7e:8d:a4:5f:09:df:8a:65:c7:82:c8:39:1b:
1d:ec:14:a2:f8:a3:a5:1c:1e:17:ba:43:99:54:fc:08:86:74:
08:2b:8b:1e:2b:fb:30:e9:b6:57:0e:18:71:15:25:1f:38:92:
86:5a:41:5a:f4:9a:cd:47:8d:76:13:c5:9f:73:6f:ed:8e:83:
00:24:e5:57:ab:25:e4:da:d8:55:29:72:b4:84:92:43:46:c8:
7b:2c:bd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:58 2024 by rpki-client on console-ams.rpki-client.org