Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/58AECC145FEA11EFAFEC128A762E951A.roa
File: 58AECC145FEA11EFAFEC128A762E951A.roa (raw, json)
Hash identifier: jcK/gU7qGSgzHysiBsZbtsCedDHATQtaNVIo0wEs3Ro=
Subject key identifier: C6:62:41:A1:43:97:E2:75:9F:30:86:1F:A3:CE:D3:7E:A1:D6:89:AB
Certificate issuer: /CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Certificate serial: 02
Authority key identifier: B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
Authority info access: rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/58AECC145FEA11EFAFEC128A762E951A.roa
Signing time: Wed 21 Aug 2024 18:22:39 +0000
ROA not before: Wed 21 Aug 2024 18:22:20 +0000
ROA not after: Sun 31 Dec 2028 18:22:20 +0000
asID: 36974
IP address blocks: 45.221.27.0/24 maxlen: 24
156.0.204.0/22 maxlen: 24
160.20.213.0/24 maxlen: 24
160.20.217.0/24 maxlen: 24
160.20.221.0/24 maxlen: 24
160.20.226.0/23 maxlen: 24
160.226.178.0/24 maxlen: 24
160.238.11.0/24 maxlen: 24
160.238.50.0/24 maxlen: 24
160.238.57.0/24 maxlen: 24
160.238.101.0/24 maxlen: 24
164.160.100.0/22 maxlen: 24
169.255.16.0/22 maxlen: 24
169.255.84.0/22 maxlen: 24
169.255.156.0/22 maxlen: 24
192.12.110.0/24 maxlen: 24
192.47.36.0/24 maxlen: 24
192.51.240.0/24 maxlen: 24
192.70.201.0/24 maxlen: 24
192.75.236.0/24 maxlen: 24
192.91.200.0/24 maxlen: 24
192.145.176.0/22 maxlen: 24
192.145.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.mft
rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 25 Oct 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619C8CAR/serialNumber=B480E4A3A6D5C7245D0F6068AC854B8F70AEC54D
Validity
Not Before: Aug 21 18:22:20 2024 GMT
Not After : Dec 31 18:22:20 2028 GMT
Subject: CN=66c6306f-35df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:50:ac:5a:c1:29:8b:12:17:34:8a:43:eb:e3:
4a:9e:58:68:52:ad:fb:52:82:7c:4c:7b:a8:72:0d:
f6:90:66:b4:4d:d2:81:c2:80:0a:c5:1f:0c:b2:ba:
87:88:da:91:7f:1d:b5:45:c9:ac:92:4c:5f:d8:a5:
40:01:49:b9:3a:ad:b5:42:fc:a0:71:b1:a1:0b:29:
5a:31:1e:45:9f:d5:4a:79:2d:f5:2f:11:79:3c:68:
0c:03:e2:d5:a2:21:4b:11:58:33:a2:2a:71:b3:ae:
1a:0b:5c:07:62:59:07:8e:cb:72:d1:b5:f3:3a:f4:
aa:76:e3:b8:3a:13:40:59:58:8a:12:84:90:70:af:
8e:8d:97:c6:be:04:58:08:48:aa:74:ba:81:47:33:
6e:1a:cc:39:46:86:bc:49:93:54:55:c5:bc:3b:4e:
05:ba:ed:a5:fd:0f:5f:1b:9e:e2:b4:77:47:be:d9:
3f:0e:74:73:51:cd:dd:04:79:71:62:80:d6:b7:f8:
be:f7:a9:04:a6:9b:1b:06:fb:61:97:07:cb:eb:ea:
3f:60:25:27:d3:cf:0e:56:c7:b7:1f:ee:df:39:c5:
45:1f:58:64:fa:14:ca:dd:9a:3d:3c:76:68:ae:bd:
06:27:69:6c:8c:db:a0:ad:36:b5:67:f3:7e:70:2a:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:62:41:A1:43:97:E2:75:9F:30:86:1F:A3:CE:D3:7E:A1:D6:89:AB
X509v3 Authority Key Identifier:
keyid:B4:80:E4:A3:A6:D5:C7:24:5D:0F:60:68:AC:85:4B:8F:70:AE:C5:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/tIDko6bVxyRdD2BorIVLj3CuxU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tIDko6bVxyRdD2BorIVLj3CuxU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/F5B78D8A5FDA11EFBF5D85AB762E951A/58AECC145FEA11EFAFEC128A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.27.0/24
156.0.204.0/22
160.20.213.0/24
160.20.217.0/24
160.20.221.0/24
160.20.226.0/23
160.226.178.0/24
160.238.11.0/24
160.238.50.0/24
160.238.57.0/24
160.238.101.0/24
164.160.100.0/22
169.255.16.0/22
169.255.84.0/22
169.255.156.0/22
192.12.110.0/24
192.47.36.0/24
192.51.240.0/24
192.70.201.0/24
192.75.236.0/24
192.91.200.0/24
192.145.176.0/22
192.145.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c1:31:80:d0:c2:ed:0e:5e:c6:4a:43:a8:2a:65:f4:b1:a1:
90:20:16:8f:87:5b:a3:ce:ca:b9:d7:d7:3c:de:44:c9:01:db:
05:c3:de:4a:7c:dd:74:0a:3b:e1:66:f5:07:33:a6:15:81:0c:
20:76:e4:aa:82:48:44:1d:5d:3f:63:89:04:0d:32:25:84:71:
e5:5d:06:1b:38:de:8e:30:68:f5:65:4d:03:e7:fa:2f:d5:f3:
d7:3d:db:58:73:e2:2d:6a:fa:9a:f7:71:2b:7a:82:25:42:d8:
27:ed:cf:4f:83:6b:b4:b9:e5:02:06:9c:05:98:8d:06:e5:fc:
af:6f:e3:6b:f9:3e:a6:96:f2:c9:ee:73:4d:7b:bd:b4:fa:b0:
09:7d:88:dd:17:9b:a4:58:a8:46:ab:41:ba:c0:e8:70:15:4c:
75:93:30:32:4b:bd:40:db:f5:07:93:b4:73:3f:06:f1:b3:d3:
a3:77:3f:a1:19:51:cf:d1:72:ad:34:ab:1d:5e:9e:2b:38:39:
c8:58:6e:94:e5:0a:7f:28:7f:dc:e7:f7:44:08:f8:84:ca:7a:
33:ef:8d:29:05:a0:e6:7d:76:a4:94:93:10:a7:38:6d:71:b3:
ea:e9:46:7a:1f:cb:99:04:30:cd:e0:51:ae:6e:d5:26:20:9c:
04:26:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:41:10 2024 by rpki-client on console-ams.rpki-client.org