Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3624E7BCA26D11EFB628A663762E951A.roa
File: 3624E7BCA26D11EFB628A663762E951A.roa (raw, json)
Hash identifier: 1uO51rXefDgV1Ztsawvvk5wVaJBDitSyoi1XC6y3ZFw=
Subject key identifier: 4E:68:2B:22:EA:3B:8A:29:CD:5F:28:3D:B8:4F:F7:CF:CC:AF:C6:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3624E7BCA26D11EFB628A663762E951A.roa
Signing time: Thu 14 Nov 2024 09:45:41 +0000
ROA not before: Thu 14 Nov 2024 09:45:38 +0000
ROA not after: Sat 23 Nov 2024 09:45:38 +0000
asID: 137443
IP address blocks: 45.192.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53937 (0xd2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 09:45:38 2024 GMT
Not After : Nov 23 09:45:38 2024 GMT
Subject: CN=6735c6c5-8c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:7f:33:0e:ac:92:36:d9:5b:1c:f0:93:60:
6c:e5:e0:b5:53:15:21:7c:05:3e:7e:26:c0:c6:29:
af:2a:ee:ad:3d:aa:a2:ae:e0:c8:ec:7a:2e:6c:4e:
b8:85:7f:35:a5:cf:4c:87:62:85:73:58:69:f5:be:
c6:ba:8f:3d:b2:8d:32:ce:81:02:ea:ac:90:53:f9:
f1:81:4a:80:94:49:37:6e:55:51:8e:88:a1:67:b3:
fe:5c:53:92:34:7c:89:3d:de:72:e4:99:f1:58:2f:
aa:d2:2f:9c:5a:3d:cf:02:a0:39:9e:71:d0:49:87:
ed:a4:bb:07:49:87:d7:0c:42:83:11:75:d1:9c:b9:
38:9e:cc:45:8e:db:69:9a:ac:c6:88:28:50:60:c7:
61:51:df:7f:39:d0:91:32:3f:53:43:b3:91:d6:b9:
82:30:78:30:19:06:ff:bd:60:43:f5:73:0b:a5:11:
83:31:59:0b:73:89:ac:51:60:2c:a5:12:40:da:c4:
b4:fb:78:ba:02:81:85:5f:f2:ce:b2:11:36:68:d4:
21:de:b4:78:c7:a5:32:89:16:82:95:a0:61:75:e2:
6a:86:c7:a5:ba:c6:67:6b:92:a4:13:d5:fe:e6:34:
ec:79:15:02:3c:a1:c6:18:78:a4:67:a1:4e:44:82:
62:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:2B:22:EA:3B:8A:29:CD:5F:28:3D:B8:4F:F7:CF:CC:AF:C6:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3624E7BCA26D11EFB628A663762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:8f:44:0e:20:b1:eb:92:60:53:cb:85:a8:76:fb:4f:0f:7e:
9c:34:72:78:ef:85:89:24:24:a8:f9:ef:c6:fb:54:f1:f8:c8:
00:c6:d4:28:4b:d5:82:de:53:ac:e0:40:fc:d1:1e:87:15:d3:
02:0a:5c:21:65:7b:64:07:f5:24:87:82:93:7a:f0:89:9b:e3:
fe:a9:a6:f8:6b:41:e2:52:e8:18:66:f2:4f:dd:ec:d1:6d:cc:
16:36:76:7c:df:f7:6c:3f:17:95:59:7e:94:04:31:98:fa:01:
71:13:f2:93:42:90:30:93:8e:3c:bf:11:b7:e5:99:93:2d:ac:
5a:ce:5c:31:56:35:06:70:ad:7b:04:90:01:46:0a:81:3e:06:
f9:09:88:2a:23:c4:38:c5:36:ec:45:d9:37:2c:03:81:36:92:
75:54:b3:2c:8c:02:d9:5c:ed:25:1e:c0:40:4e:77:d1:e2:23:
a2:f6:59:a5:59:fb:f0:5f:12:1f:87:3a:28:17:69:84:15:e9:
d5:e9:32:c3:78:81:77:54:bd:8a:de:7d:53:11:7d:8b:b3:f4:
ac:56:81:54:f2:eb:4e:69:b9:97:eb:14:da:e3:3c:76:5e:32:
a2:da:3a:e1:59:1f:40:73:09:3c:05:4c:25:9e:d6:6d:50:dd:
68:72:1e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:24 2024 by rpki-client on console-fra.rpki-client.org