Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/282B6784AEBD11EEB8B0D7C1775412E6.roa
File: 282B6784AEBD11EEB8B0D7C1775412E6.roa (raw, json)
Hash identifier: xHIddnZJbrfTHQl2WSoRO4k4yIvyHeoI+YM86wmDA3E=
Subject key identifier: 14:6A:57:A0:9B:1A:E0:55:74:2F:5D:61:70:11:91:78:24:CC:1E:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 5EC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/282B6784AEBD11EEB8B0D7C1775412E6.roa
Signing time: Tue 09 Jan 2024 07:03:14 +0000
ROA not before: Tue 09 Jan 2024 07:03:11 +0000
ROA not after: Sat 11 Jan 2025 07:03:11 +0000
asID: 138995
IP address blocks: 45.194.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24263 (0x5ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 9 07:03:11 2024 GMT
Not After : Jan 11 07:03:11 2025 GMT
Subject: CN=659cefb2-21a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:b5:73:f4:a3:8f:65:1d:5b:1b:00:9c:fa:
43:38:fe:13:5c:6b:ed:60:d0:1d:65:88:fb:6a:9e:
e4:18:aa:b7:9a:90:5d:87:42:74:6a:17:94:1a:88:
32:ad:4d:0d:fb:6d:dc:84:1e:05:6a:d1:8a:73:5a:
16:25:d8:4c:20:8d:a1:d7:40:5c:bc:17:62:1d:4f:
c2:6d:31:d7:bc:cb:fd:a4:6a:ba:e1:c5:dd:1c:68:
c4:f0:fc:d1:b1:78:74:4e:ed:f7:c4:f6:99:04:bb:
c0:04:db:19:a8:ce:3f:56:14:a9:ab:a1:a0:fc:26:
0e:6c:73:e3:05:02:65:54:69:b4:d6:63:a1:26:ff:
74:e3:22:2f:8b:a1:b6:5f:ea:b2:63:bc:99:73:de:
50:6b:9d:10:91:21:41:aa:ef:b3:e6:9d:8d:df:02:
c0:06:9d:73:21:db:d0:9e:c7:5b:8f:2d:13:4e:4b:
ea:ab:db:fd:83:07:7f:a9:0d:d0:b4:4a:44:81:4c:
13:34:a1:be:0a:3b:3b:cc:a5:40:a0:90:e1:3f:ee:
40:d9:e0:55:52:52:94:c7:9a:a4:b1:9f:b4:4f:94:
70:d8:13:ff:58:1e:f1:c7:88:ac:cc:26:aa:f5:b4:
78:e3:9c:cf:36:4d:8c:81:4d:c1:fe:5a:ab:94:53:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6A:57:A0:9B:1A:E0:55:74:2F:5D:61:70:11:91:78:24:CC:1E:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/282B6784AEBD11EEB8B0D7C1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7c:e1:23:c1:35:cd:42:3d:ef:84:24:94:63:e5:c1:cd:54:
f8:51:11:f1:e0:64:50:07:06:6c:8d:9e:b4:4c:00:19:0d:52:
a7:3d:b6:86:f3:7f:49:03:f1:82:f0:0c:fd:45:70:d3:70:43:
d4:d6:8a:cf:0f:66:e5:ca:fc:82:3f:a0:c8:3c:dd:9f:b9:4e:
88:a6:e6:53:96:b8:ff:1a:54:73:7b:82:b7:0a:d7:6b:36:00:
a8:5b:c1:21:47:5f:d1:4b:0f:11:b4:8a:4f:6a:73:4f:40:a0:
fd:34:5e:00:82:0f:46:e1:5b:1d:1d:6d:a0:ac:81:36:70:23:
5f:ef:33:c0:80:66:27:fe:21:23:04:fb:cb:3d:4d:d2:b3:7f:
3b:b4:0f:9b:66:c2:37:ac:7a:31:2c:d3:f0:28:96:00:41:36:
9f:43:a8:24:ee:7b:01:f5:78:66:3c:3b:8d:3f:77:3b:c0:8e:
a9:65:97:b2:85:b9:11:3f:54:f2:13:5d:66:52:62:b3:67:02:
53:a3:c7:f0:79:a9:46:c4:cc:36:b2:15:32:00:2e:e0:c7:eb:
b1:91:92:1b:63:cc:63:4e:b6:8a:c0:ca:24:9b:da:61:c8:50:
49:6c:67:b7:74:d2:bb:f2:ff:9d:17:a9:7e:7f:9d:7a:73:a2:
62:27:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:21 2024 by rpki-client on console-fra.rpki-client.org