Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7AAA28A74911EFB8860F73762E951A.roa
File: 0D7AAA28A74911EFB8860F73762E951A.roa (raw, json)
Hash identifier: 4MNlx9OLZmqZq5RlIJ4qqvWse3eadLnfik1DN79Zx1o=
Subject key identifier: D8:9A:A3:FA:0D:E1:76:A9:8E:E2:EF:BA:6D:E8:FB:E0:69:F9:E0:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D694
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7AAA28A74911EFB8860F73762E951A.roa
Signing time: Wed 20 Nov 2024 14:09:27 +0000
ROA not before: Wed 20 Nov 2024 14:09:23 +0000
ROA not after: Sat 30 Nov 2024 14:09:23 +0000
asID: 202656
IP address blocks: 45.200.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54932 (0xd694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:09:23 2024 GMT
Not After : Nov 30 14:09:23 2024 GMT
Subject: CN=673ded97-c660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:a1:92:04:04:33:d6:e9:ba:0f:43:c6:f9:
5a:39:32:6c:97:65:62:ef:77:cd:bc:5c:b6:2a:7f:
3a:4b:4a:a6:98:7f:4d:6e:3a:09:c7:4c:5b:bd:b4:
2b:0c:1f:61:90:6d:35:64:33:42:de:5e:5a:b5:c0:
2b:e5:9c:c0:68:61:fc:78:a4:26:a4:12:5b:f7:0a:
4d:d7:6c:39:64:99:19:64:97:a9:05:1b:fb:5c:87:
10:11:49:03:91:d6:e2:5d:f7:8d:1e:fa:35:ad:c9:
25:c2:1f:13:60:90:b3:19:16:01:74:51:31:8b:89:
52:24:86:4a:8a:ea:ce:c1:c2:82:45:3e:3c:15:fa:
d6:d0:90:3d:ae:2a:ef:73:0d:c1:4e:d0:4c:f5:56:
f0:5e:80:72:31:d0:23:1d:00:3a:eb:e7:b1:e5:10:
4a:a8:0a:be:10:a0:85:00:0a:07:26:8c:91:be:36:
72:38:e4:d1:34:15:a4:b1:69:70:0b:07:c5:a5:78:
89:99:b0:b2:95:e6:2d:4c:26:ba:6b:7f:6a:c4:3d:
b3:04:78:63:cd:6e:22:f6:3c:0c:81:ac:76:d2:d4:
5f:c9:fc:75:8f:30:e4:f2:cc:0e:80:94:87:a2:ed:
2b:e6:18:c5:e0:af:5c:71:20:0a:ae:a3:02:98:f0:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:A3:FA:0D:E1:76:A9:8E:E2:EF:BA:6D:E8:FB:E0:69:F9:E0:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D7AAA28A74911EFB8860F73762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.172.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ff:a3:24:31:0b:b3:07:2b:e0:04:e7:67:3e:9a:b8:07:64:
63:61:ab:79:6b:cb:b4:41:06:a6:ae:06:f6:dd:b8:4f:2d:fa:
b6:e9:6e:0d:75:6f:8f:08:4b:32:13:06:06:1f:42:90:e0:aa:
0a:b9:3c:ae:16:98:9f:07:e9:92:bb:7b:0e:0e:79:70:e6:3d:
52:14:fb:45:de:b6:e5:9b:aa:98:49:8b:eb:9f:d5:4b:37:83:
1f:32:94:31:1c:42:25:47:88:b6:80:eb:45:85:f3:6d:7a:61:
e9:17:16:1c:c4:6a:40:d9:3e:fe:bd:5a:18:1b:13:bb:ed:39:
10:2e:5a:c4:ca:e1:ac:14:88:b5:74:dd:1d:56:f3:62:1e:79:
04:d2:5b:62:fb:73:65:de:97:81:e1:33:d7:4a:d1:46:05:8d:
e1:eb:76:cc:cd:67:a1:ac:2e:cb:11:25:86:04:df:e7:74:f4:
e8:6b:11:7b:8b:ab:a5:13:c7:a1:b7:74:fa:f6:42:e6:48:ac:
03:4c:ba:3b:08:25:21:5a:90:6c:ba:89:db:34:cc:18:e7:ba:
67:02:f9:96:83:51:e1:b1:f5:16:cb:d9:cb:9d:c5:53:31:81:
ad:55:c7:41:5f:85:e8:5f:20:54:be:f7:65:fc:f5:04:46:a5:
cb:c7:82:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:17 2024 by rpki-client on console-fra.rpki-client.org