Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/3F03153416A911EFA217550F017001B1.roa
File: 3F03153416A911EFA217550F017001B1.roa (raw, json)
Hash identifier: 9/pgGRkm3NQotfShqK62IqS8JeOjMdrxiB5oVZ+s0Go=
Subject key identifier: F1:0E:63:F7:2B:99:A6:17:86:C3:95:80:63:00:D5:CD:2D:40:CD:4E
Certificate issuer: /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial: 0705
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Authority info access: rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/3F03153416A911EFA217550F017001B1.roa
Signing time: Mon 20 May 2024 13:02:43 +0000
ROA not before: Mon 20 May 2024 13:02:40 +0000
ROA not after: Mon 31 May 2049 13:02:40 +0000
asID: 398891
IP address blocks: 45.221.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1797 (0x705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Validity
Not Before: May 20 13:02:40 2024 GMT
Not After : May 31 13:02:40 2049 GMT
Subject: CN=664b49f3-d280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:b4:16:8f:4b:52:71:ae:b9:9e:93:0a:cd:
09:c9:90:05:be:d3:19:f9:5f:8c:7c:09:c7:c1:c9:
e4:b0:97:35:7f:1f:8d:cf:d3:d0:3a:f9:50:51:7a:
db:c6:e9:b4:b9:c9:69:5d:ee:3e:27:64:14:93:e8:
d5:14:75:e4:72:bf:da:54:76:a8:4f:8d:da:58:cb:
5d:54:20:a4:fb:46:99:f1:01:b8:15:b3:64:51:70:
66:42:48:e8:0e:db:82:0b:fa:d5:e5:96:76:d1:ef:
5d:2d:db:af:da:8e:9d:af:24:fc:74:70:09:95:9a:
2a:56:aa:0a:c6:9b:31:43:34:30:69:20:0e:38:3b:
b4:8a:24:d5:61:6f:a9:e2:24:ff:48:2a:b0:30:88:
7e:a3:06:a8:72:6b:4d:cb:92:b2:1c:8c:1b:56:8b:
13:d6:3f:30:01:4f:b6:ed:83:45:01:79:76:1d:ef:
09:97:5d:03:b4:ef:b1:0c:66:ca:86:1f:2a:c8:36:
2b:2e:66:e6:32:21:6e:ed:8b:c0:e2:50:0e:b4:0b:
43:99:04:e6:94:c8:4f:45:52:b3:12:45:80:86:08:
a8:89:a4:c7:80:02:0a:de:c1:bc:33:ba:8d:02:ed:
12:b9:22:2a:d6:9f:65:93:a0:58:29:b4:1d:d1:b4:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:63:F7:2B:99:A6:17:86:C3:95:80:63:00:D5:CD:2D:40:CD:4E
X509v3 Authority Key Identifier:
keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/3F03153416A911EFA217550F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.1.0/24
Signature Algorithm: sha256WithRSAEncryption
12:8e:32:88:1b:d7:46:18:b1:4c:a4:04:fe:c4:5e:4c:9e:bd:
a7:96:0f:b3:bd:28:f0:bc:ff:2e:ab:59:ad:1b:e7:4e:62:6c:
51:a9:40:fb:d7:22:e2:26:54:9b:ff:22:0b:0c:6b:25:82:cc:
a1:8a:d1:32:42:b9:24:15:a0:1e:a1:a9:41:9c:5c:bc:48:89:
07:21:b0:21:1f:ea:39:8c:d0:99:6c:8c:07:83:30:00:e2:4c:
d7:cb:b4:54:08:37:53:bc:8f:22:fa:a6:72:1c:6e:20:bb:ff:
3d:ba:3d:5f:c4:9d:8e:50:f7:17:de:ff:8e:ef:48:e7:44:f5:
a6:2a:ac:ae:13:f8:2b:e0:e6:bc:92:60:17:f8:16:3b:27:b8:
0a:57:c9:71:8f:aa:3e:2c:8a:57:7b:46:1a:ad:55:48:ff:87:
d5:ea:e2:3c:85:45:3e:f4:4a:dd:01:16:a2:9a:4a:62:e7:c2:
d7:ce:33:9d:17:a9:ee:6e:47:a1:29:75:10:87:28:84:a5:24:
13:6b:b9:e8:6a:1f:12:e0:68:11:45:d9:fd:ea:79:65:fd:fd:
44:7d:75:30:ae:62:21:ac:13:a9:e4:4f:db:48:65:d2:89:03:
5b:70:00:9b:5e:e4:fd:5e:bc:74:6c:e3:a1:f5:4e:1f:31:4f:
79:52:e4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:57 2024 by rpki-client on console-fra.rpki-client.org