Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FC08E969EAF11EFB869E5AC762E951A.roa
File: 3FC08E969EAF11EFB869E5AC762E951A.roa (raw, json)
Hash identifier: wP15N7vJnXWLJkhrlMjuShcHGk9RGUmXQK+QGLFQERY=
Subject key identifier: A7:80:13:AB:06:72:35:0E:08:DA:C1:18:00:9F:77:1B:70:98:91:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D02F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FC08E969EAF11EFB869E5AC762E951A.roa
Signing time: Sat 09 Nov 2024 15:28:20 +0000
ROA not before: Sat 09 Nov 2024 15:28:16 +0000
ROA not after: Thu 12 Dec 2024 15:28:16 +0000
asID: 398823
IP address blocks: 45.202.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53295 (0xd02f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 15:28:16 2024 GMT
Not After : Dec 12 15:28:16 2024 GMT
Subject: CN=672f7f94-5ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d1:81:0b:3e:43:38:a5:ac:e2:2b:28:ac:ba:
66:3d:ef:89:8e:5e:19:97:1c:ea:e2:01:7e:9c:c6:
fd:77:c3:ec:48:e6:c9:3b:70:27:93:55:7b:73:54:
f6:06:e0:8f:52:7c:68:89:3d:23:ab:ae:c3:15:30:
43:a4:99:5e:8e:e1:66:3b:ca:af:65:c9:a1:b1:be:
56:e9:c8:cb:0c:b3:c2:6f:af:56:94:ac:52:ad:ee:
20:be:84:16:1a:b8:7c:55:73:eb:4e:74:58:22:ac:
71:7f:05:bd:39:8a:cd:d1:f0:df:3e:38:57:cc:ca:
ff:51:03:db:c1:33:5f:b6:41:35:ef:60:e6:6b:f3:
4d:3c:cd:56:23:24:d9:f4:5d:59:ef:8c:71:96:92:
bd:fe:13:2b:ab:2f:50:e6:47:f2:cf:48:6c:bf:ef:
ba:b7:b7:44:97:d7:7b:05:eb:78:d0:6f:88:cd:6e:
72:00:75:db:c8:3a:a8:8d:74:60:d7:5b:e8:02:9c:
c5:c8:91:f9:02:4e:65:5f:b7:5f:d9:80:5e:95:25:
72:fd:a1:1d:9c:6b:26:3e:a2:55:85:c3:e3:75:ca:
c5:fa:39:73:99:b5:ca:05:5c:88:93:5f:6b:ac:00:
93:1d:43:c2:91:a8:c8:46:e5:a4:02:17:a0:02:60:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:13:AB:06:72:35:0E:08:DA:C1:18:00:9F:77:1B:70:98:91:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FC08E969EAF11EFB869E5AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.224.0/19
Signature Algorithm: sha256WithRSAEncryption
95:3d:ff:9b:6c:d7:c4:e0:07:c1:1c:29:49:ec:8a:86:54:6d:
91:79:ba:c0:d3:9b:a6:ea:33:9e:87:0b:85:c3:d9:6a:c6:e3:
4e:5b:97:c9:b1:a6:f2:a3:be:49:6f:ce:5a:43:e1:38:bd:49:
21:7f:6f:3c:e4:48:64:fe:18:aa:ca:32:61:07:6e:f9:b8:39:
cd:18:cb:68:e1:dc:f3:57:42:db:43:81:89:a5:86:a1:ae:4a:
16:33:74:86:fd:ca:b9:a4:e3:e1:da:0a:5a:b8:96:ba:0f:59:
a5:76:2d:31:93:ca:33:5d:60:19:d8:51:01:c8:45:9e:7e:b0:
5a:25:48:31:84:2a:5c:2f:bc:c9:12:7f:52:17:12:c3:84:a4:
ab:e1:e4:9e:37:6b:42:9d:70:a2:64:1a:5e:ac:0d:cc:ce:d6:
94:1f:3f:39:45:2c:eb:f2:a3:02:1a:fe:57:86:b6:8b:09:49:
56:47:4a:1d:94:05:c1:e4:5d:6f:5c:54:e4:93:a6:2e:32:42:
02:ee:cb:a5:fe:3d:71:90:47:dd:5b:8b:c9:27:cb:53:8c:71:
4b:43:85:66:d9:ae:61:ad:7b:a5:32:3b:1a:c6:d1:3f:70:dc:
21:a0:d9:d7:c6:4d:0e:b3:c0:8f:47:51:96:3d:6a:cc:ea:fd:
e4:1d:7c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org