Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/E331093A782A11EF8C72A468762E951A.roa
File: E331093A782A11EF8C72A468762E951A.roa (raw, json)
Hash identifier: BY9ne/1N16RAQitVEfvm4jFlat7DlCCnlCV+oKN285U=
Subject key identifier: 1F:59:3B:87:C2:D9:E1:26:AC:A5:54:D7:90:22:FC:87:CA:B3:7A:B0
Certificate issuer: /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial: 0B
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority info access: rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/E331093A782A11EF8C72A468762E951A.roa
Signing time: Sat 21 Sep 2024 15:05:07 +0000
ROA not before: Sat 21 Sep 2024 15:05:02 +0000
ROA not after: Mon 24 Sep 2029 15:05:02 +0000
asID: 967
IP address blocks: 45.221.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Validity
Not Before: Sep 21 15:05:02 2024 GMT
Not After : Sep 24 15:05:02 2029 GMT
Subject: CN=66eee0a3-dc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:7d:78:78:87:77:e6:64:82:3b:12:b7:1d:
0a:81:f1:c9:35:2b:76:e7:e2:0b:1a:56:ef:a3:3d:
a5:41:b2:40:3e:d7:4e:54:04:60:fc:2f:ca:f3:cf:
54:8e:4b:cd:f7:60:12:6b:ff:bf:2a:90:f6:89:0e:
2c:9b:a5:e6:8d:60:60:22:59:80:d5:c9:05:35:8b:
5b:62:46:72:ce:83:df:5e:d2:2e:b4:f1:cb:f2:23:
d1:9b:dd:f5:1d:15:90:c1:98:8f:23:35:8d:61:14:
25:e7:d9:34:26:9f:fd:2f:18:7c:fd:89:67:f2:e6:
68:68:a8:c5:9e:fb:5a:93:e9:21:37:3f:5e:a9:59:
4a:cc:db:9e:89:8f:cf:dd:0b:d2:15:85:4a:1e:2c:
7a:cb:dc:19:a7:f1:4a:81:f0:f5:d0:df:e3:ed:43:
22:21:8d:2c:09:4c:5f:37:e6:74:dc:f8:72:d0:9c:
bc:ac:7f:92:0c:33:6b:a4:96:7e:a8:b3:fb:ad:cd:
94:f9:08:88:3b:47:12:a3:e8:a3:1d:a9:7d:b9:eb:
90:4a:5f:55:c8:9a:c2:91:24:cd:9d:d5:36:f1:8a:
72:47:38:44:db:22:dd:f5:20:5b:e6:d4:09:c2:bf:
f7:57:b9:37:aa:6b:58:22:73:80:9d:cf:fb:5f:32:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:59:3B:87:C2:D9:E1:26:AC:A5:54:D7:90:22:FC:87:CA:B3:7A:B0
X509v3 Authority Key Identifier:
keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/E331093A782A11EF8C72A468762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.112.0/22
Signature Algorithm: sha256WithRSAEncryption
25:ee:43:b5:dc:9d:9a:0d:32:74:92:56:ee:45:d7:e6:58:ac:
96:ff:6e:ed:94:58:dd:b1:20:59:16:58:45:58:bf:97:51:b2:
4c:b2:72:11:61:53:ca:8b:94:d3:10:c3:0b:e5:61:31:fd:90:
2c:78:ad:ff:8d:c1:61:19:18:5c:53:d8:4d:16:f9:86:97:36:
5f:0b:7b:15:1b:44:ac:9c:55:b1:4c:d8:a7:03:70:09:73:89:
a2:21:4d:8c:3b:be:90:48:3e:58:d5:5b:55:6d:73:f7:3f:e6:
6e:0d:79:7f:88:57:2f:04:89:5c:7f:99:a8:ba:7a:9f:cb:2d:
6b:cd:bf:28:ed:e2:d0:53:38:b2:36:0c:37:80:f8:29:2e:41:
37:8b:76:f6:68:07:1d:20:61:58:50:9f:57:b7:f4:f7:76:81:
5d:c2:e8:1f:78:ee:2c:36:36:c5:b1:84:c3:ec:7f:a4:aa:91:
cf:a2:83:48:bc:49:87:89:36:90:ce:32:91:19:75:7e:5d:74:
07:32:79:84:e1:3b:46:49:9d:b8:4e:8b:bf:9b:3a:4b:4e:5b:
c3:fc:83:ca:3a:99:66:1a:57:23:b4:6e:67:0d:e6:b3:ee:54:
e5:f1:b4:e9:c7:b6:ae:1a:08:6e:13:cf:3f:10:86:f2:e6:92:
5f:c6:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org