Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C348DEE9F9111EFB51292BA762E951A.roa
File: 3C348DEE9F9111EFB51292BA762E951A.roa (raw, json)
Hash identifier: E9PX+6i6rHoT5E18AXkrYTEDt7b4am82JtHOrGWXfII=
Subject key identifier: F6:50:DE:A4:8B:40:58:BE:4D:20:58:9A:AA:16:65:0A:45:F1:69:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D138
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C348DEE9F9111EFB51292BA762E951A.roa
Signing time: Sun 10 Nov 2024 18:26:00 +0000
ROA not before: Sun 10 Nov 2024 18:25:56 +0000
ROA not after: Thu 21 Nov 2024 18:25:56 +0000
asID: 133847
IP address blocks: 45.200.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 21 Nov 2024 18:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53560 (0xd138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 18:25:56 2024 GMT
Not After : Nov 21 18:25:56 2024 GMT
Subject: CN=6730fab8-ea8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8b:8a:b1:a0:98:9b:87:11:f3:63:c2:52:22:
11:fc:87:ca:4b:16:67:e9:ed:2e:14:be:9a:43:5c:
73:3a:d2:2a:16:39:7d:0e:95:39:b6:ad:a4:28:60:
4e:61:b1:24:b6:45:3d:6f:c8:6d:29:dd:d7:b4:c4:
d9:c9:8e:bf:1a:55:3e:b2:c4:be:00:91:3a:e3:43:
35:d9:a3:cf:d4:73:01:a0:41:5a:df:8b:2c:18:6e:
fc:59:aa:c5:1e:d7:4f:dd:24:13:cb:aa:9f:51:79:
77:f8:18:a7:0e:9e:72:19:df:9e:2d:97:9b:d9:3e:
4d:18:eb:fd:ab:4e:f5:1e:8c:ad:32:58:e1:59:5f:
fc:c4:f4:2a:37:5e:b5:e0:81:fb:c2:c9:c7:ca:89:
d5:a3:88:7e:2f:4f:00:81:57:ee:f6:cb:b2:5c:38:
c7:94:4f:d7:a4:d2:39:83:b2:2a:f2:4b:14:bb:6a:
f8:24:15:62:ff:e8:b1:ad:3a:81:dc:98:9a:d5:5a:
b1:75:43:ce:02:cf:96:41:7d:ae:86:28:93:98:f0:
41:4b:f4:37:45:dc:d7:c2:56:7e:3f:b0:7b:8a:e2:
36:56:cd:61:8d:1a:03:ca:47:19:b6:60:4a:a6:59:
92:4f:13:b9:4d:b0:7f:be:80:98:38:8c:fb:6b:86:
dd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:DE:A4:8B:40:58:BE:4D:20:58:9A:AA:16:65:0A:45:F1:69:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C348DEE9F9111EFB51292BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.92.0/22
Signature Algorithm: sha256WithRSAEncryption
87:b5:37:03:00:3a:42:26:6d:ef:8f:84:35:b9:5a:50:c2:55:
62:43:e0:4c:7b:17:54:7c:7c:09:48:92:1f:96:af:05:64:c4:
b1:88:c6:6a:5b:2d:8e:9b:2e:8a:9d:f8:a6:24:f9:da:d5:e6:
76:24:ba:9b:ec:0b:2a:e4:e6:61:73:ee:88:74:a5:ec:d1:40:
38:0a:92:02:c5:bd:4a:58:fe:19:8b:92:1d:44:f5:a5:39:3f:
25:50:ed:17:82:1d:1a:77:73:a7:c9:a5:f7:13:2f:ee:fa:25:
96:76:3c:8c:4d:9e:1e:94:cc:7d:d3:4c:52:24:ec:0b:33:4f:
64:ed:1a:bf:94:39:ff:5d:55:d4:52:a5:e2:16:88:46:64:c4:
8b:5d:e9:ea:51:1c:4e:4e:c7:a5:ab:a1:3b:cf:a6:9d:fe:20:
0a:88:1f:29:74:8b:40:33:33:d8:10:9b:f3:15:2a:55:ac:92:
c3:01:bf:70:1f:39:4f:9e:e8:e0:a9:24:86:6d:29:eb:19:8b:
87:06:00:5a:1d:dd:36:24:59:50:6e:ff:80:a4:b9:51:f4:ce:
7d:03:95:33:47:32:62:08:62:71:1f:84:14:0f:a5:d0:b2:13:
02:ce:4f:df:65:8d:19:74:e2:b4:e4:b6:95:eb:92:86:72:1e:
ed:b8:b0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:26 2024 by rpki-client on console-ams.rpki-client.org