Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15D5A048736311EFB73062AB762E951A.roa
File: 15D5A048736311EFB73062AB762E951A.roa (raw, json)
Hash identifier: hYzUAIfKobLooRmtW/GP8vZ58P6XWs26gS5t4hpLXpQ=
Subject key identifier: 57:0C:6F:66:2F:CA:17:F4:13:E7:E4:83:B1:86:C0:40:52:04:C7:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B692
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15D5A048736311EFB73062AB762E951A.roa
Signing time: Sun 15 Sep 2024 13:04:48 +0000
ROA not before: Sun 15 Sep 2024 13:04:44 +0000
ROA not after: Mon 15 Sep 2025 13:04:44 +0000
asID: 142629
IP address blocks: 45.202.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46738 (0xb692)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 13:04:44 2024 GMT
Not After : Sep 15 13:04:44 2025 GMT
Subject: CN=66e6db70-6191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:bc:9e:d0:19:3b:d9:5c:dd:37:7d:da:e1:
87:05:ad:a4:6a:3e:fb:d5:b3:4e:a5:b3:80:c4:d3:
8d:e2:e8:d8:50:98:47:e0:35:a6:0d:d8:98:f6:eb:
d9:8a:8a:88:7b:79:e1:32:dc:5c:54:41:9c:c4:60:
b9:7e:5c:c9:ae:3b:c3:67:fd:88:de:a9:1f:ee:c0:
4a:17:b6:09:1f:5a:74:67:ba:7c:12:4c:bc:41:4c:
13:c1:13:df:31:cc:f4:13:42:92:1f:b5:04:37:0f:
20:a6:e6:44:6f:af:36:37:02:3c:c5:c1:20:89:32:
c8:ff:0d:af:d5:c1:4d:f9:7d:71:eb:0b:ea:2e:68:
5f:02:45:28:d0:04:a4:09:e4:16:c1:ac:78:28:1a:
c0:18:9b:81:d7:e5:13:df:8c:c9:28:01:8b:b4:74:
0a:1f:2d:d2:c3:3e:9c:52:99:c4:42:03:d1:43:f5:
ae:e2:85:5c:35:41:50:b6:cd:74:15:d8:08:96:7e:
6c:43:bf:a3:37:17:8d:0a:11:9a:bd:88:40:80:86:
99:4f:71:0a:5a:cc:b6:6e:11:49:70:c2:6e:e9:14:
65:9a:3b:9e:89:30:48:b1:d5:82:75:2e:d3:11:28:
c6:e2:a1:ca:aa:e9:ed:b9:36:6c:a9:be:80:09:6c:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0C:6F:66:2F:CA:17:F4:13:E7:E4:83:B1:86:C0:40:52:04:C7:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15D5A048736311EFB73062AB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fb:4d:34:18:6b:6b:ac:bd:e0:69:74:64:ff:6a:96:25:c6:
7e:8d:8a:10:79:a9:91:2a:61:cd:31:54:d3:d1:92:73:18:12:
d2:22:7a:1f:30:1c:15:de:f2:3e:b5:8c:a8:ca:c7:8b:d6:6b:
05:42:43:a8:db:9c:69:aa:74:6c:fb:38:ce:d2:13:f9:e5:81:
b5:33:84:9e:a8:a5:e0:47:d4:cc:a1:54:6f:66:49:59:e0:23:
af:f5:a7:c1:16:7f:d0:cf:93:c2:c6:f4:6e:7b:ed:93:02:2d:
83:19:49:cd:b3:b8:0e:89:76:f9:05:02:ba:ec:cb:05:6c:3e:
97:a8:f7:6c:c8:a6:92:e4:86:36:1d:99:de:21:8e:a3:df:26:
20:10:de:11:2d:ac:d5:2d:11:d9:6e:88:cc:09:c5:43:16:f8:
b8:6a:9d:02:7f:0f:25:74:c0:29:a8:67:24:4e:c1:aa:3f:61:
04:0d:98:1a:c5:c3:b7:dc:1a:69:92:cc:cc:19:e2:d0:a0:b3:
62:f9:32:84:fd:e5:1c:77:6b:ec:dc:a7:42:3f:a8:c7:b4:8f:
50:e2:4b:db:dc:57:52:f1:d5:dc:63:e4:84:bc:6e:94:8a:17:
6a:f3:c3:50:4e:0b:a2:10:f3:b8:c6:30:f3:10:40:4a:bc:2a:
a0:2e:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:19 2024 by rpki-client on console-fra.rpki-client.org