Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36FEFED2A75111EF81995BA7762E951A.roa
File: 36FEFED2A75111EF81995BA7762E951A.roa (raw, json)
Hash identifier: 4lOZahOnCAmTyrVZyaT6HNhjlXe5nTzN7DLoxzExBrs=
Subject key identifier: F5:94:03:CF:09:F5:A2:E5:22:A2:11:19:97:39:18:F0:F4:7F:81:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36FEFED2A75111EF81995BA7762E951A.roa
Signing time: Wed 20 Nov 2024 15:07:53 +0000
ROA not before: Wed 20 Nov 2024 15:07:49 +0000
ROA not after: Sat 30 Nov 2024 15:07:49 +0000
asID: 202656
IP address blocks: 45.195.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55024 (0xd6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 15:07:49 2024 GMT
Not After : Nov 30 15:07:49 2024 GMT
Subject: CN=673dfb49-1b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:43:aa:8f:46:d2:39:d9:82:4f:0a:05:35:
3c:fb:57:bc:6c:12:b6:fb:26:32:a9:96:76:0c:81:
6c:cb:09:5d:cd:b2:94:d5:ab:f3:c3:28:1a:c0:b9:
84:90:e4:70:2f:72:80:32:ab:3c:e6:d2:bb:5a:4b:
2b:f9:58:d8:f4:b8:5a:51:60:46:ec:4f:ec:a5:c7:
88:49:e1:0f:90:8a:2e:6b:43:18:d6:a0:cb:a2:38:
60:5c:91:c8:40:67:3a:55:1a:c2:16:62:d9:fa:a6:
ff:19:47:8f:a9:0e:ce:f9:a7:61:35:04:3f:f9:1d:
28:65:8f:28:b6:b9:93:cc:ba:07:a3:6e:5c:75:7a:
ad:63:63:33:42:d5:72:8b:59:5e:7d:c9:84:e7:3a:
f8:3e:11:7f:a2:18:c6:28:7f:77:79:5d:77:bc:95:
66:d7:65:a2:88:ad:29:98:38:2b:3c:1d:4f:7c:3a:
7a:95:8e:42:1e:e6:49:7a:d3:3f:dd:47:88:f4:f4:
65:1e:6a:79:2d:8b:94:c5:82:ec:ec:61:dd:a9:5a:
c2:aa:89:6f:8b:5e:85:7f:0a:b9:2e:f5:e5:f8:bb:
8b:c5:c6:18:0f:c2:04:3b:79:43:0e:90:ac:06:49:
a9:02:26:bf:5a:39:05:37:58:df:6b:1f:fe:51:9b:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:94:03:CF:09:F5:A2:E5:22:A2:11:19:97:39:18:F0:F4:7F:81:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36FEFED2A75111EF81995BA7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.160.0/19
Signature Algorithm: sha256WithRSAEncryption
39:26:d6:b8:95:85:c8:2a:e0:48:36:f0:f7:52:7b:a7:4b:4f:
a8:4d:a3:e3:ad:42:7b:3a:c0:54:8f:a2:92:ec:4b:62:2f:2c:
eb:e2:50:a3:67:01:a4:7f:c7:1a:2b:18:f2:11:1c:12:cf:58:
15:fc:51:63:72:b8:b8:a7:99:57:3e:d1:ff:9e:e9:c9:06:ad:
9e:0b:70:ff:aa:40:f7:55:40:50:63:c0:d4:71:36:d5:54:68:
d5:42:af:6b:91:91:59:ca:1e:a7:d7:58:74:17:c6:64:ae:e3:
71:6c:a7:2e:1e:c8:a7:f8:d5:40:5b:31:24:b4:a3:33:75:f6:
61:b6:c9:62:e6:b1:81:de:c8:86:4f:6a:d2:57:af:f1:66:51:
b4:6f:d7:f0:c0:a0:a1:05:52:52:ca:c2:f4:a7:6a:3d:1d:8d:
c3:ab:ac:e2:ad:fa:87:87:74:4a:75:51:b0:8a:ca:a5:3f:57:
fe:d2:ed:eb:eb:a0:c9:de:d0:05:8e:fd:56:5c:b2:71:30:a4:
8d:f3:1b:46:7a:f8:63:cb:2d:4e:84:c1:12:81:26:0d:e0:c1:
3e:8d:46:18:b0:b7:09:62:68:20:da:2b:a9:4d:ec:f1:29:9c:
38:95:84:58:8f:0c:e1:ab:93:75:47:13:97:0d:1f:b6:01:c8:
bd:2e:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:25 2024 by rpki-client on console-ams.rpki-client.org