Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/603757FA1E7F11EFBB0372327DDC24C2.roa
File: 603757FA1E7F11EFBB0372327DDC24C2.roa (raw, json)
Hash identifier: Jft05GO/03nne4IS5Aaqdqkvyhrda49LF/SueWl2w4E=
Subject key identifier: E3:71:B0:0C:D2:91:90:FA:1E:69:BC:6C:98:57:AA:3E:74:98:39:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8D92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/603757FA1E7F11EFBB0372327DDC24C2.roa
Signing time: Thu 30 May 2024 12:23:10 +0000
ROA not before: Thu 30 May 2024 12:23:06 +0000
ROA not after: Thu 05 Sep 2024 12:23:06 +0000
asID: 26617
IP address blocks: 45.195.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36242 (0x8d92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 12:23:06 2024 GMT
Not After : Sep 5 12:23:06 2024 GMT
Subject: CN=66586fad-2aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:51:4f:53:fa:4b:7d:8a:54:aa:3d:8a:0c:
67:89:1a:91:31:28:54:3b:fa:12:9a:ae:a0:81:6c:
bc:ce:dc:4e:b3:b7:4f:e3:af:2f:2f:f1:64:5b:f6:
44:22:49:6c:83:a5:66:75:d8:93:87:bc:2a:39:55:
7d:ab:d4:03:85:32:61:5e:3e:eb:d9:33:46:0f:13:
58:9d:35:91:2a:72:86:69:19:c3:95:bf:20:da:46:
10:af:17:fc:34:a2:c2:49:99:c9:d4:85:10:c0:18:
7b:62:e8:09:80:a3:48:e2:d6:c0:f5:02:f6:39:57:
b3:ee:f4:e6:7e:16:cb:5d:e5:c3:80:8b:40:85:f4:
5e:35:5a:27:0e:7a:02:fb:03:78:87:56:96:f6:bd:
75:e5:80:08:aa:fe:5d:95:bc:cb:1f:80:56:68:2f:
f5:51:f2:09:e2:b5:a1:d8:64:b0:bb:c3:cf:2c:a5:
0d:0b:f2:3c:87:73:9b:48:2d:fe:fd:ea:fe:71:32:
e2:8b:c1:78:fd:d8:10:d5:98:16:87:52:a5:49:8f:
f2:c9:19:31:74:11:b2:82:b1:4e:de:0c:1c:37:8f:
a7:9b:2f:0a:6e:00:00:40:6b:08:71:93:14:27:da:
88:8b:87:2c:85:23:26:89:91:2d:3c:d6:f7:5c:2b:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:B0:0C:D2:91:90:FA:1E:69:BC:6C:98:57:AA:3E:74:98:39:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/603757FA1E7F11EFBB0372327DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.206.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d8:b5:5e:46:1a:7a:f6:97:37:a2:7b:c6:5c:52:fc:03:e7:
40:4f:5b:f6:b7:55:85:6f:78:e4:60:70:a4:dc:22:0c:f5:21:
19:63:1b:63:dd:01:0e:24:1b:32:aa:23:37:d5:7a:14:0d:0e:
4d:22:dd:8e:65:fa:38:4e:4c:f0:de:8d:56:64:d6:db:22:e0:
b7:72:16:13:ad:ed:0c:2d:c6:31:86:93:9b:08:3c:01:5d:2e:
81:a8:3c:1c:a7:99:9b:b9:1f:28:63:53:fe:01:b3:6c:57:ee:
53:bc:a0:8f:44:4c:2b:39:5f:20:b3:31:ca:19:2d:7c:70:9b:
54:95:c1:d7:46:56:21:0e:79:16:f9:3b:89:70:1d:c1:f8:da:
f6:59:ef:6a:f7:49:e4:25:86:01:6a:75:a1:00:af:2b:63:0b:
8b:2e:bd:b1:8d:80:50:c6:c9:59:1c:62:22:1e:46:a7:8a:4a:
49:54:79:32:89:e0:a1:48:a3:b7:a7:e0:91:1e:65:40:88:6c:
2c:d3:b4:62:aa:54:7f:6c:32:21:4f:7b:fd:86:c8:9a:1a:6d:
8e:da:97:c7:72:d5:1f:ae:0e:1a:f7:6a:31:0c:78:ca:cd:71:
fb:f3:e2:cc:4e:f5:f0:a9:3e:ec:66:5b:b2:2b:30:df:6f:11:
16:0e:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:44:06 2024 by rpki-client on console-ams.rpki-client.org