Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F1E54707E3C11EFA6508EA5762E951A.roa
File: 3F1E54707E3C11EFA6508EA5762E951A.roa (raw, json)
Hash identifier: LrtIONyUwgv6Kc9jy79bbYnYjM0Cdmqzl8tyeD7pYUI=
Subject key identifier: B7:62:08:22:83:50:3D:C5:A4:CD:CC:78:0B:F7:84:51:90:4A:5C:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F1E54707E3C11EFA6508EA5762E951A.roa
Signing time: Sun 29 Sep 2024 08:24:30 +0000
ROA not before: Sun 29 Sep 2024 08:24:26 +0000
ROA not after: Mon 30 Dec 2024 08:24:26 +0000
asID: 17561
IP address blocks: 45.201.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48237 (0xbc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:24:26 2024 GMT
Not After : Dec 30 08:24:26 2024 GMT
Subject: CN=66f90ebd-a256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:67:1f:bc:a3:37:e4:c9:cd:0b:1b:6e:d0:
91:0d:58:aa:de:3f:30:44:ca:63:88:48:4f:28:b7:
ca:8b:31:79:eb:ca:0b:3e:d4:38:b0:a6:f4:96:5c:
0c:a8:95:e0:a8:09:94:c5:1c:83:f6:d3:0d:2d:ed:
ab:b0:08:4a:d9:b7:81:96:ec:90:47:c7:3e:40:aa:
da:8c:5d:48:29:31:90:3a:4c:3a:b7:25:2b:84:47:
98:e2:dd:18:ae:19:7a:8e:a1:ef:75:ff:04:f1:29:
ad:b3:c6:2f:9f:82:4e:fe:a7:5a:c8:6b:99:e1:26:
45:cc:5c:f8:c2:1d:bc:1c:76:36:d0:45:f3:63:8d:
3a:90:6c:a2:92:7f:89:a2:1c:6a:4c:41:ef:f9:a3:
7d:8c:4b:f0:30:3a:8d:fd:bf:69:92:1c:b3:8a:84:
e5:f8:e5:3d:bb:91:dc:a6:6f:62:2a:5f:75:6b:2f:
c7:86:9d:10:71:3f:ad:f4:e2:a2:52:1f:1c:c2:e6:
65:fb:30:b0:08:64:fc:23:24:0d:cc:9b:1f:fa:27:
9a:20:4a:bb:fa:74:a5:83:c9:98:67:c6:25:25:5a:
29:f0:af:93:a8:49:ce:ae:99:74:b7:27:c5:3f:f4:
08:4d:8b:33:4c:c9:82:80:4f:85:b8:79:55:51:ad:
58:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:08:22:83:50:3D:C5:A4:CD:CC:78:0B:F7:84:51:90:4A:5C:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F1E54707E3C11EFA6508EA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.239.0/24
Signature Algorithm: sha256WithRSAEncryption
92:87:a5:ae:64:2b:ac:70:40:9c:55:a2:4d:37:b0:59:b2:52:
6a:ec:16:d0:1a:8a:18:64:d6:40:4f:f3:1f:27:08:18:87:76:
85:88:b3:75:ba:81:23:2b:6e:6a:06:23:e5:a5:c5:56:68:1f:
7b:89:39:8c:a0:94:65:fc:06:94:ad:2d:b7:b5:6e:79:54:95:
9f:ba:30:0b:eb:4e:1f:cd:42:89:24:0f:25:43:f3:63:32:ea:
9a:33:03:ff:db:60:30:7a:39:39:2c:c1:20:33:9d:6b:49:2c:
36:46:c3:bd:67:4f:68:3f:0c:67:3e:46:75:28:24:b0:68:85:
26:a1:80:15:97:02:47:fa:46:21:e7:39:9b:28:03:59:7c:2f:
de:b2:d1:05:de:53:98:16:a6:85:4c:24:d6:6c:12:ad:1e:57:
83:cc:53:2b:5c:78:c5:bb:68:b2:36:bf:b3:8c:b8:7d:c2:a3:
67:2c:2d:a5:cd:3b:1a:98:21:00:46:6e:7b:d9:1b:cd:3b:78:
30:cf:b6:61:ed:97:a2:20:1c:49:3f:e3:3c:05:a8:fa:66:b0:
a3:dd:00:82:31:8f:07:cd:7b:5c:d8:b3:ce:cb:df:04:58:3c:
31:b3:7e:22:88:a0:23:c2:8a:b8:c6:dc:87:da:89:ec:d1:89:
21:9f:ed:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org