Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F534850800211EFBD0D1C43762E951A.roa
File: 0F534850800211EFBD0D1C43762E951A.roa (raw, json)
Hash identifier: qDxxJmOmeo2IbGVZzIW3PB3o1y3zmCUGEEEBrMQb3QI=
Subject key identifier: D2:8D:4C:2E:C7:E5:E9:F7:93:3E:4C:A2:BE:3B:9B:E1:6D:30:74:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BDEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F534850800211EFBD0D1C43762E951A.roa
Signing time: Tue 01 Oct 2024 14:33:01 +0000
ROA not before: Tue 01 Oct 2024 14:32:57 +0000
ROA not after: Sat 04 Oct 2025 14:32:57 +0000
asID: 140641
IP address blocks: 45.198.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48620 (0xbdec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 1 14:32:57 2024 GMT
Not After : Oct 4 14:32:57 2025 GMT
Subject: CN=66fc081d-cdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:6a:4c:3d:d6:ef:30:37:1d:33:83:f3:1e:
1d:7b:e6:f6:03:83:3b:bb:c4:1a:ec:6a:11:8c:20:
3b:8b:d9:86:0e:d7:65:fd:84:f2:37:94:7f:ac:ac:
00:62:90:a6:13:5a:6c:bd:d0:e3:56:03:e2:46:34:
90:4b:e9:ae:ec:0e:09:e2:83:90:d0:3e:08:65:b4:
b4:a3:69:0d:71:29:9d:fe:bb:a4:15:81:1d:cb:f8:
2d:76:1a:de:3a:00:ea:f0:36:0a:6f:3c:71:f9:b6:
ae:43:50:b4:b9:51:db:a4:d3:e1:64:64:7b:77:20:
94:91:88:64:2a:f3:49:8e:d7:99:5c:35:94:71:6e:
6d:1d:9b:d9:79:2b:8d:33:7d:e3:95:74:13:ea:f6:
36:b5:0c:4a:37:13:1e:f7:81:65:f6:50:32:24:f4:
09:19:98:df:38:c4:b5:5d:16:bd:3c:fe:90:01:40:
39:42:3d:4c:d4:ec:d4:ae:75:b5:8a:8f:5e:84:e8:
da:f0:a7:85:f2:fc:c0:33:12:de:0f:70:d5:3a:b6:
cf:db:38:6f:34:70:77:65:e7:27:fd:ba:82:36:a2:
7d:00:cc:63:42:b1:75:5d:91:4c:fc:7e:6d:b8:e1:
e4:5b:e2:0c:e9:66:4d:32:5d:fa:3f:cd:28:72:b6:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8D:4C:2E:C7:E5:E9:F7:93:3E:4C:A2:BE:3B:9B:E1:6D:30:74:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F534850800211EFBD0D1C43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.13.0/24
Signature Algorithm: sha256WithRSAEncryption
00:72:45:c4:c5:79:bb:f9:6a:4c:cb:f7:1f:01:a9:ce:82:90:
63:20:76:74:90:06:a8:3c:1b:87:50:6f:f9:ef:a1:ee:7c:d8:
c9:7d:1f:25:53:99:1b:2f:20:ed:7d:6e:87:d9:fc:f8:12:e9:
53:13:51:b3:b9:64:e2:40:ac:57:cb:12:95:9f:74:52:1b:43:
e0:61:5b:4d:b8:8a:41:54:36:8e:94:7f:74:3f:db:55:12:cf:
81:88:39:ad:2f:80:1f:10:91:ee:df:f3:e2:fe:b2:d9:c5:06:
71:6e:95:76:3e:d2:59:65:84:9b:f0:51:ec:00:c6:45:cf:a0:
3f:fc:75:10:75:8a:18:f6:0f:f8:90:0a:10:9a:74:5c:0c:19:
a5:a6:9a:ca:5b:3d:09:61:be:f4:d3:3d:bb:4f:47:b2:24:96:
0c:95:df:88:c7:11:66:1e:41:57:e0:2a:00:65:4b:67:b6:7e:
fc:43:84:cf:30:c1:99:35:ef:46:f5:4e:d4:3d:08:47:05:b2:
e8:15:23:9b:c4:b7:98:62:b5:05:f1:59:07:45:5d:7c:a1:4f:
6b:0d:f2:21:28:2a:05:4c:91:d4:dd:66:14:61:d7:5a:a0:73:
60:62:63:38:8e:af:e9:ba:5b:ba:83:6c:d5:d5:8b:84:2f:6d:
eb:42:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:20 2024 by rpki-client on console-ams.rpki-client.org