Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACEC6B92088311EF97FB5149017001B1.roa
File: ACEC6B92088311EF97FB5149017001B1.roa (raw, json)
Hash identifier: /XM0Guqd+Ds++bv8G6bLmKqmwQG4+8AWmfrcm/iPY4Y=
Subject key identifier: CE:20:37:C1:73:BD:E5:39:67:66:3E:66:1D:1F:87:76:2D:7B:0B:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8750
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACEC6B92088311EF97FB5149017001B1.roa
Signing time: Thu 02 May 2024 12:58:31 +0000
ROA not before: Thu 02 May 2024 12:58:27 +0000
ROA not after: Thu 23 May 2024 12:58:27 +0000
asID: 54467
IP address blocks: 45.192.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 May 2024 12:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34640 (0x8750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 12:58:27 2024 GMT
Not After : May 23 12:58:27 2024 GMT
Subject: CN=66338df7-6a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:71:8b:05:b3:55:8c:18:3a:af:4a:16:1c:
88:e4:7c:d4:17:c0:8d:86:33:06:83:3d:39:cc:61:
23:0a:4f:0e:bb:49:8b:66:9e:ed:57:2d:f9:71:c6:
d4:87:97:f8:f0:e2:fc:53:6a:45:38:ea:75:0e:7c:
4d:47:b6:cd:18:bf:52:5d:c3:80:13:a3:4e:ae:9d:
8f:bf:fc:d7:7b:d8:61:e3:50:74:3e:b5:2d:d1:9c:
7c:4b:3a:56:f4:61:f1:09:5b:5f:7e:82:6b:08:cd:
f2:57:a7:34:c8:ba:32:05:5d:ca:54:1b:a5:41:27:
0f:ef:82:63:cb:78:2a:fd:a7:4d:70:75:15:9c:a4:
a3:33:b4:7c:e7:d2:40:9d:f0:9d:82:8f:2d:12:bd:
2a:8f:b9:f4:c5:fc:44:d5:a2:4f:51:ee:5a:6b:59:
26:65:e0:e1:56:4b:30:58:09:cd:05:26:d2:4c:f4:
7d:31:70:4b:73:5b:9e:77:7f:f9:f7:45:46:37:4d:
52:64:9c:15:3e:c5:f5:79:36:bb:65:20:53:e8:a5:
2c:e5:58:84:f0:c8:10:37:75:29:07:94:81:1a:45:
9e:13:60:46:de:5f:e0:16:ed:84:4e:71:50:56:87:
c6:32:93:76:26:aa:c0:f6:af:86:ff:bb:50:08:bc:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:20:37:C1:73:BD:E5:39:67:66:3E:66:1D:1F:87:76:2D:7B:0B:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACEC6B92088311EF97FB5149017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.64.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:a2:ad:3d:9c:51:0e:5f:be:60:fa:a8:12:f4:e0:db:e3:48:
16:20:f4:93:63:aa:65:c1:03:f9:c3:ec:4c:5a:03:d5:04:ee:
b4:b5:32:60:e7:34:08:78:d4:34:75:04:3c:bd:fa:38:be:62:
b9:15:a9:e8:ae:81:22:b3:f2:29:4c:ac:5f:66:0c:15:20:b1:
ae:0f:0c:46:36:0a:34:4e:0e:26:6f:23:c4:57:e3:49:b8:49:
6f:de:30:40:58:4e:1a:39:1f:c7:75:b9:e7:30:c9:40:1f:7c:
65:1f:a5:d1:96:be:6c:c1:81:bd:fd:54:89:1f:62:90:fa:47:
20:78:2f:59:31:2a:8a:e3:f1:0c:88:b1:28:16:da:31:60:01:
4b:68:27:4d:0b:26:e9:6f:49:1a:48:df:ca:dd:61:90:d5:3d:
d8:f2:2a:96:e6:ec:b7:f4:b7:81:e4:20:bb:f5:82:0d:bd:d7:
c7:0d:e9:6a:af:fa:43:5c:87:34:74:cd:9e:0a:6d:eb:9e:48:
00:eb:bd:ca:3b:a5:35:81:06:e4:8a:ac:a7:88:70:c9:72:f0:
55:07:d3:58:9f:f2:31:6f:b3:f7:28:ab:b8:cc:e0:46:09:a1:
a3:9f:36:d9:7f:47:46:53:c4:35:e0:b5:74:ae:8b:a3:f4:32:
f3:61:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 05:59:19 2024 by rpki-client on console-ams.rpki-client.org