Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A5BDE9EA74F11EF9B20839A762E951A.roa
File: 3A5BDE9EA74F11EF9B20839A762E951A.roa (raw, json)
Hash identifier: SCDRaiEHOcKf7kHeHQN1jw+hQ+eLhQi82pDu4md/4Rc=
Subject key identifier: AB:4E:83:E0:2C:2A:F9:17:E6:C8:F5:34:31:63:77:C8:AA:15:98:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A5BDE9EA74F11EF9B20839A762E951A.roa
Signing time: Wed 20 Nov 2024 14:53:39 +0000
ROA not before: Wed 20 Nov 2024 14:53:36 +0000
ROA not after: Sat 30 Nov 2024 14:53:36 +0000
asID: 202656
IP address blocks: 45.199.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55002 (0xd6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:53:36 2024 GMT
Not After : Nov 30 14:53:36 2024 GMT
Subject: CN=673df7f3-821b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:fc:61:a8:d1:ba:c1:36:d1:a7:51:49:a8:
0c:53:91:c8:f4:e0:f7:2a:4b:50:10:aa:78:e5:ce:
95:0e:83:aa:6f:26:03:69:18:0a:6d:aa:d0:65:38:
ac:db:36:39:1e:12:8d:3d:58:9f:51:bb:61:15:48:
50:df:73:00:16:db:7d:9f:ee:45:00:e5:a4:85:dc:
cd:10:1c:93:5a:a2:b2:32:de:9c:db:ad:ea:ec:cc:
c8:62:84:42:a3:dd:45:44:5d:a1:f8:f3:25:9e:e5:
b7:a6:0c:eb:92:4c:d4:64:fd:9f:6a:76:60:ae:0b:
0e:b9:9f:53:7a:ab:7b:a4:b6:f5:10:07:e0:08:19:
e9:de:2b:27:56:1c:95:8b:49:87:b0:45:7c:40:7d:
8e:85:72:39:46:3e:e0:2b:5e:85:39:d8:86:5a:86:
88:08:91:5e:a6:54:09:4c:30:09:ae:29:5d:4c:99:
e3:15:8d:c7:3f:79:f0:e3:50:53:07:d7:b3:d1:44:
aa:1f:38:fc:36:6b:0b:1f:24:03:d2:c7:fe:a7:04:
ea:44:cc:8f:7f:47:8e:d8:b2:84:ad:c0:3e:fb:de:
5b:83:e3:69:ab:a3:c1:0a:33:b2:90:28:0c:7a:d4:
3e:e4:f2:90:21:33:0d:fa:c8:54:12:29:db:ec:96:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4E:83:E0:2C:2A:F9:17:E6:C8:F5:34:31:63:77:C8:AA:15:98:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A5BDE9EA74F11EF9B20839A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.246.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8d:69:87:a7:f1:2a:05:f8:87:76:1d:90:dc:ff:b7:32:50:
9f:c2:38:4c:66:0c:ca:5c:30:85:b6:44:40:3f:f3:e8:09:3f:
66:aa:07:24:05:22:ca:4e:cc:22:8b:a3:23:22:b3:0a:61:01:
d5:2e:7f:00:a4:c0:6d:51:d6:03:f7:a7:d9:48:f6:0b:f0:57:
76:ad:d9:54:e0:de:4f:6a:91:f9:3c:9a:b5:c8:93:97:51:3a:
a3:bb:30:b7:27:58:b7:6a:56:04:d3:4b:fb:55:78:0d:10:63:
e8:d9:50:db:03:f7:b7:93:95:80:fc:ba:f5:c6:eb:b1:33:15:
20:1d:90:e9:c8:42:eb:02:94:e5:5b:42:fb:51:c3:31:6c:be:
cd:24:eb:91:73:28:ab:ed:2a:ec:d8:44:58:43:ca:51:3b:f2:
96:0d:86:de:e2:5f:ae:cf:f7:7d:a3:27:b7:3b:24:8f:eb:89:
9f:48:66:ca:c2:5f:2e:59:42:37:5f:fd:53:3a:d1:3b:ec:e4:
db:79:bf:5c:6f:42:29:82:c1:06:e9:cc:bb:d4:45:94:a6:b7:
18:f6:55:fe:20:5e:c2:3a:f5:75:e5:bf:4a:0c:df:af:21:b3:
27:40:96:ca:c8:79:e8:d3:a6:f7:75:48:a6:6c:d3:1a:e8:55:
6a:6a:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:26 2024 by rpki-client on console-ams.rpki-client.org