Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28BE1702A73511EFB2534276762E951A.roa
File: 28BE1702A73511EFB2534276762E951A.roa (raw, json)
Hash identifier: KVQGuGRwIc8sQlogJLPs6dVPtv8GKLu/0An8aVOATBQ=
Subject key identifier: 1C:F9:04:F3:95:74:90:B8:E9:D1:08:4F:59:2B:69:65:09:09:81:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28BE1702A73511EFB2534276762E951A.roa
Signing time: Wed 20 Nov 2024 11:47:03 +0000
ROA not before: Wed 20 Nov 2024 11:46:59 +0000
ROA not after: Mon 02 Dec 2024 11:46:59 +0000
asID: 39600
IP address blocks: 45.203.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54763 (0xd5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 11:46:59 2024 GMT
Not After : Dec 2 11:46:59 2024 GMT
Subject: CN=673dcc37-00b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:b6:d7:c2:85:bf:a9:95:d4:2e:20:b4:78:
42:c6:8a:22:a8:32:36:e2:25:cb:a0:0c:db:0b:4b:
ef:09:d4:16:86:13:08:cf:ac:f9:d7:83:84:4e:26:
56:8f:c9:30:23:0e:7e:52:7b:f1:5b:5b:4a:63:4c:
d0:90:88:9e:26:aa:53:9b:bb:a3:7f:02:1b:89:d5:
2a:5c:2f:ef:6f:fa:df:94:6f:30:c6:0a:73:d6:59:
ad:91:19:a1:86:35:9b:5b:89:1b:99:33:a6:2e:71:
40:1c:87:13:4a:5f:f8:49:d2:aa:ed:9b:44:39:a9:
6d:03:73:b8:81:1b:d4:87:70:9b:84:b9:00:27:6d:
9b:ef:68:04:08:18:ae:40:8d:9d:03:6c:c5:b7:b4:
a5:e8:31:de:e6:8c:5b:fe:54:b6:c2:c8:59:93:6f:
67:cd:2d:2a:41:ed:35:74:3c:e6:7c:ea:d9:f3:f6:
89:ea:96:fd:13:78:ba:09:d0:fd:df:1d:01:f1:30:
cd:02:d8:ee:f4:07:c6:67:34:84:c7:d0:40:d9:3c:
4f:15:24:d8:c2:cf:5a:42:54:61:20:71:37:02:d3:
8c:2d:88:14:b1:4e:1d:8b:05:75:01:c6:10:3e:e6:
92:20:20:68:d7:fa:df:e1:53:b2:24:26:37:2d:31:
aa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F9:04:F3:95:74:90:B8:E9:D1:08:4F:59:2B:69:65:09:09:81:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28BE1702A73511EFB2534276762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f8:28:98:cd:07:92:20:85:98:21:ac:19:08:df:07:5c:93:
86:d8:c7:9c:67:f4:83:5f:9a:fa:81:3a:58:e7:d2:ca:65:1e:
81:21:52:16:cf:89:9c:ff:5d:56:1f:da:32:e7:45:76:60:33:
37:a0:b9:8d:0f:4a:8c:7c:27:0d:07:26:84:b6:2f:3e:ea:d6:
7d:e5:3a:7d:4b:bf:da:50:7c:c5:0d:73:4a:de:da:8e:c8:f4:
8a:3f:42:60:ec:0e:f7:71:0c:32:93:bc:c0:83:82:d1:5b:9d:
6e:20:8d:f7:3e:ce:c2:35:59:cc:b3:29:06:5e:a1:9a:20:c0:
30:98:df:80:1d:bf:a7:dd:55:d1:ec:6d:0d:6c:1f:b4:13:61:
a5:e5:39:e8:a1:85:90:65:f3:e0:67:e2:d1:af:da:62:39:13:
50:53:0b:c7:a4:3c:52:85:9d:11:e4:b9:ec:80:df:d9:15:3b:
69:5e:2e:27:c8:65:a9:f5:b3:45:03:b8:af:5c:cd:e7:f2:4e:
ce:55:6e:02:aa:50:b9:5d:dd:58:59:eb:3d:e1:d0:b1:43:3d:
1f:38:3e:cd:0f:92:1b:5b:e2:53:98:13:5e:2b:97:c3:bb:ba:
a7:8a:84:0e:8f:a8:89:ef:81:35:66:5b:45:58:26:7e:ca:4b:
31:23:2f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:22 2024 by rpki-client on console-fra.rpki-client.org