Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F3EA354A74F11EF94C6AB98762E951A.roa
File: 0F3EA354A74F11EF94C6AB98762E951A.roa (raw, json)
Hash identifier: 2zKvlJJ960UMwx/lPaUs5ScCo+DLUkAWc2Koh7sJi3U=
Subject key identifier: B5:83:0E:B6:44:B0:BB:2C:59:B4:C1:80:45:B0:49:F3:7E:07:60:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F3EA354A74F11EF94C6AB98762E951A.roa
Signing time: Wed 20 Nov 2024 14:52:27 +0000
ROA not before: Wed 20 Nov 2024 14:52:23 +0000
ROA not after: Sat 30 Nov 2024 14:52:23 +0000
asID: 202656
IP address blocks: 45.199.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55000 (0xd6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:52:23 2024 GMT
Not After : Nov 30 14:52:23 2024 GMT
Subject: CN=673df7ab-64ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:80:5a:a7:ab:ff:7e:74:32:63:66:bc:ba:
5f:ed:16:03:d4:8b:38:8b:ec:f3:8d:e1:bc:2a:15:
aa:ba:d5:32:e7:9a:69:72:0a:df:e8:22:a7:d6:fd:
0a:e8:48:38:1a:86:a5:47:e6:5a:9d:20:c2:2a:1e:
99:e2:6b:2f:d4:83:58:0b:06:d1:66:62:ba:91:c7:
3e:88:39:16:12:65:54:0e:7c:35:05:bb:a6:6b:ab:
65:eb:01:41:9f:38:dc:b6:01:fc:e9:b4:24:18:a2:
45:d5:80:9c:fe:3e:3e:bd:fc:e3:5a:ea:72:3c:b4:
b2:b9:6d:6c:a5:02:2a:bb:5d:70:9b:d5:fc:6a:eb:
7d:e6:57:59:1f:87:9e:d7:a2:de:bc:24:11:ff:7d:
3b:10:35:4b:c7:b5:65:78:73:a9:bd:fb:cd:08:6d:
14:f6:c7:33:3a:de:12:23:d6:28:c5:89:e6:d7:01:
74:fc:af:fa:74:81:f2:00:0b:c7:e8:05:54:d1:6f:
9b:fd:42:f1:bf:12:69:95:c8:4b:14:88:17:02:59:
2a:96:18:36:04:d1:4b:40:d2:4c:fe:31:6b:58:72:
5d:81:20:a4:81:c9:ab:3a:0f:7d:83:2e:34:88:85:
ba:a7:40:7f:4c:c1:3e:3e:44:52:42:68:84:e5:3f:
33:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:0E:B6:44:B0:BB:2C:59:B4:C1:80:45:B0:49:F3:7E:07:60:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F3EA354A74F11EF94C6AB98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:41:00:75:25:04:25:88:a1:60:b4:f8:81:52:53:52:b0:65:
d8:33:69:62:17:17:5d:12:7f:ed:d3:6c:86:57:36:4f:26:9a:
c0:c1:42:3b:01:4c:c5:97:eb:6d:57:67:05:c8:fc:bb:5c:b7:
ef:a8:e7:af:57:ff:b5:45:19:47:4d:35:53:4a:ce:de:b3:9b:
7e:11:9b:8e:c9:64:01:22:24:84:a7:c4:c3:d9:d9:46:90:85:
67:e1:c8:cf:c5:dc:fc:fe:85:8e:7d:29:2e:66:f1:87:66:b4:
24:4e:6d:57:e3:05:ad:94:45:07:09:88:3a:19:b4:53:57:cc:
9b:06:55:28:15:42:09:ec:f3:bf:7e:01:11:da:14:28:91:c9:
9d:d4:a3:65:01:ac:e6:58:cc:8a:b4:0b:7c:bd:f0:fa:b7:97:
b3:cd:54:1e:13:77:0a:1b:f5:f1:b1:4d:b1:61:0f:72:b1:a1:
d1:b9:eb:f0:b6:72:bc:69:28:89:dd:d9:85:ce:69:a7:eb:a4:
3e:d8:18:27:ed:58:15:4b:aa:d3:2f:42:8c:78:80:5e:a6:27:
55:df:ce:39:d4:2d:9f:71:94:71:65:7d:00:50:36:02:1a:c3:
97:53:b3:fd:e1:f9:df:0f:ad:06:e0:0b:65:f7:88:ca:64:13:
16:cc:74:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:18 2024 by rpki-client on console-fra.rpki-client.org