Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E7D830A4C911EF98CBCA46762E951A.roa
File: 14E7D830A4C911EF98CBCA46762E951A.roa (raw, json)
Hash identifier: SiXUHuX+uLAY855cGVCjEeAk3se6VpCnkNl3x0wAZYA=
Subject key identifier: 93:A3:FC:84:93:EA:DC:72:59:96:F5:DC:D0:58:2C:6D:11:39:55:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E7D830A4C911EF98CBCA46762E951A.roa
Signing time: Sun 17 Nov 2024 09:48:22 +0000
ROA not before: Sun 17 Nov 2024 09:48:18 +0000
ROA not after: Mon 25 Nov 2024 09:48:18 +0000
asID: 9009
IP address blocks: 45.192.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54443 (0xd4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:48:18 2024 GMT
Not After : Nov 25 09:48:18 2024 GMT
Subject: CN=6739bbe6-1940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:ea:96:85:8a:d2:3d:8f:88:7e:1b:21:d5:
01:01:31:6d:b4:67:45:9e:82:6f:5c:88:e4:1f:4e:
49:0c:66:9c:b9:e5:52:e9:dd:22:9d:c4:94:b0:4b:
cc:d5:fd:cf:70:eb:03:d6:22:fe:1f:57:e0:41:05:
6b:f2:75:d3:b8:f2:10:af:4a:b8:84:8a:1e:ec:8a:
47:1b:59:83:f8:60:06:70:38:83:25:24:a4:47:dd:
db:f1:4b:f4:ae:09:eb:13:18:e4:c6:85:ff:da:d6:
2a:be:83:1b:d3:72:1b:65:2e:64:7e:26:6c:ea:1b:
d9:60:ad:fe:b3:06:32:2a:f6:5d:3a:2e:a5:f6:14:
6d:d3:65:2b:10:22:a0:cf:c1:60:9a:53:1f:b1:de:
58:91:9d:dc:46:a3:dd:5d:33:52:a1:df:77:82:27:
ff:6b:6c:bf:9e:fb:9e:b1:98:81:1c:f7:d8:fd:d3:
5c:ea:c3:f1:db:0e:67:a6:0b:21:02:90:6a:c7:a7:
e8:c3:ad:ed:22:8b:22:a4:e9:93:5c:51:53:d3:0e:
d3:0b:8a:db:f0:5d:22:af:53:72:fe:6e:45:dd:eb:
2c:1a:ba:ed:2f:59:31:63:e1:57:09:17:ea:2f:58:
1a:15:47:e6:75:ad:0d:6a:de:6b:2d:d6:e3:6b:2d:
f0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A3:FC:84:93:EA:DC:72:59:96:F5:DC:D0:58:2C:6D:11:39:55:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E7D830A4C911EF98CBCA46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.146.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1c:47:7a:c9:e6:db:ee:8f:93:cc:11:eb:e4:3f:d5:5d:76:
70:64:ec:24:37:9b:5e:a4:70:ba:ce:5a:a1:c3:71:21:b4:56:
7f:3b:f3:2c:85:2c:d9:77:39:54:3d:fe:c1:98:88:78:14:10:
1c:47:ff:67:d3:8b:d4:a6:92:c0:11:ec:d7:71:7d:11:06:af:
5f:ba:fd:a5:52:62:12:06:6e:85:95:17:90:17:f1:12:52:2d:
b6:4f:03:e3:9a:01:c4:c4:6c:a3:2b:cd:c4:ba:9f:cc:ce:9c:
55:c2:94:2d:67:7c:12:65:d1:00:6c:64:49:ba:69:0c:67:c4:
37:42:f7:6b:b0:01:06:e7:0a:8b:71:92:44:af:5e:4f:05:bd:
61:6c:48:85:b1:f4:0b:e6:95:64:9c:6d:f3:2a:82:5c:86:b8:
3f:bc:d0:db:e8:67:bc:7f:c9:d6:2e:f5:94:ba:77:57:fe:68:
80:26:21:09:17:d0:82:10:65:a7:5f:b2:96:e3:48:53:23:ad:
c0:2a:83:29:2a:db:b6:25:72:ce:c0:f2:ae:b1:04:59:b5:81:
48:fa:94:b9:96:b1:15:56:c4:74:56:79:3e:a9:93:83:3a:f2:
29:95:e0:47:12:c6:aa:3c:f3:a1:9c:c2:c7:23:7d:01:30:15:
a3:44:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:20 2024 by rpki-client on console-ams.rpki-client.org