Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CE780DC050D11EEB1AA37734AD9E6FC.roa
File: 2CE780DC050D11EEB1AA37734AD9E6FC.roa (raw, json)
Hash identifier: gNA7hZE6i/FQsTmAHhBAVj4sokvXF5XDg1YoFaq4Tt8=
Subject key identifier: C3:93:AF:3F:3B:C1:40:DF:4D:47:64:8F:82:8F:7B:86:41:D7:22:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2A09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CE780DC050D11EEB1AA37734AD9E6FC.roa
Signing time: Wed 07 Jun 2023 08:27:44 +0000
ROA not before: Wed 07 Jun 2023 08:27:41 +0000
ROA not after: Mon 30 Dec 2024 08:27:41 +0000
asID: 984
IP address blocks: 45.205.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10761 (0x2a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 08:27:41 2023 GMT
Not After : Dec 30 08:27:41 2024 GMT
Subject: CN=64803f80-ef03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:89:48:9f:c8:30:b3:08:d6:d7:bb:dc:ef:
eb:82:af:ab:af:55:c8:f1:86:d7:aa:2b:08:e1:21:
a5:79:c8:c0:7c:3f:a9:18:c1:e9:9d:40:52:30:e4:
43:35:1f:b0:59:9e:a4:b5:c7:92:da:9a:af:72:8d:
f0:03:bc:74:4a:6e:6b:08:1f:29:59:15:cc:23:40:
48:b8:e8:cd:c7:2f:bf:d0:e6:61:c6:5a:a5:bc:79:
00:50:dc:65:0f:02:ba:05:8c:9b:ff:95:28:68:ec:
74:57:21:01:e7:6c:8b:6b:1a:32:55:c5:5e:7a:1f:
67:98:39:a4:cd:47:9e:28:72:23:2a:ec:0f:1f:b0:
bb:5f:f5:4f:21:5a:75:fc:1f:90:67:f3:9f:4c:41:
87:63:c5:a4:5e:69:f8:a2:f6:c5:af:82:d8:b3:c9:
0d:80:ad:31:d6:e3:fb:a9:e9:c3:de:83:fc:5e:48:
ed:b4:0b:8f:23:e9:ce:4f:60:e2:49:98:2f:30:f8:
96:86:ef:34:dc:63:79:0a:2e:f4:a3:dd:b3:a5:97:
07:db:0e:0d:e6:1d:e6:c1:7b:27:46:82:8b:95:74:
54:c9:60:17:92:37:da:9d:2a:c6:5c:c5:bf:6d:cb:
c6:7d:8c:c9:74:b5:6a:41:5b:cb:d4:ff:80:56:99:
73:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:93:AF:3F:3B:C1:40:DF:4D:47:64:8F:82:8F:7B:86:41:D7:22:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CE780DC050D11EEB1AA37734AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.64.0/18
Signature Algorithm: sha256WithRSAEncryption
35:30:95:f7:4e:b1:21:04:16:9d:07:7c:d1:a9:ef:e5:d7:6b:
f4:f8:2d:26:e4:5f:a3:79:bb:51:2a:b4:b2:9a:60:33:c4:ea:
69:50:35:21:a6:67:a9:9b:ce:f4:33:22:c2:f9:f7:bb:0d:5c:
94:fe:3c:b6:d0:ef:1b:66:56:7c:b4:e6:2a:9b:b4:a0:3b:d1:
97:92:e4:03:2d:12:dc:1c:e0:2a:b7:45:a5:21:77:bd:63:1e:
5e:51:e4:b7:6e:61:a8:03:99:c1:2b:3f:c1:b0:40:25:71:2e:
5c:96:32:5e:77:b9:ee:9e:92:72:20:5a:4a:a3:6b:51:a1:94:
52:3b:b1:0e:93:b8:d9:41:4c:88:18:3a:60:eb:d1:10:c6:65:
2b:47:a3:a1:40:38:f6:c0:c4:ec:70:05:91:ae:ec:15:a7:18:
59:fa:c8:21:6a:89:95:ff:ae:cd:99:ce:85:92:a2:18:3f:a1:
02:f8:6d:16:bb:27:cf:0b:ed:27:da:b9:28:8c:1d:b9:f9:64:
c7:b1:18:e7:c4:53:90:85:8b:75:33:cf:ca:86:7c:8c:cc:fa:
38:de:b6:23:73:03:66:de:c8:be:06:c4:f3:ac:39:1d:16:a2:
e9:ef:f1:e6:fb:ca:c2:12:c7:c1:60:66:c6:d7:4a:fe:44:7b:
b3:50:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:06 2024 by rpki-client on console-fra.rpki-client.org