Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4177B498A7DE11EF8AE21DA3762E951A.roa
File: 4177B498A7DE11EF8AE21DA3762E951A.roa (raw, json)
Hash identifier: 1vvlq69EC6pUxE6+2U9YfMTrkfmI1hgruSFrVmBaFKI=
Subject key identifier: 7E:94:B6:4A:68:DE:9D:A8:6D:4E:48:7A:E4:94:5F:E6:9A:5F:92:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D70D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4177B498A7DE11EF8AE21DA3762E951A.roa
Signing time: Thu 21 Nov 2024 07:57:29 +0000
ROA not before: Thu 21 Nov 2024 07:57:26 +0000
ROA not after: Sat 04 Jan 2025 07:57:26 +0000
asID: 42831
IP address blocks: 45.198.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55053 (0xd70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 21 07:57:26 2024 GMT
Not After : Jan 4 07:57:26 2025 GMT
Subject: CN=673ee7e9-4f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:e7:34:42:f7:f2:88:17:7d:f2:97:1d:bc:
3c:db:78:b0:84:36:9f:fc:36:ef:87:67:7f:df:a2:
cd:5f:49:1e:05:9b:f0:cc:bd:de:37:29:09:94:ff:
db:7e:27:6f:b9:e0:47:86:4f:e7:d0:45:e3:e8:85:
c2:c5:b6:dc:ac:7c:6a:07:1d:e5:1c:7c:26:00:23:
94:1e:f1:6f:0b:69:52:3b:dd:c6:1f:4e:e6:71:89:
6d:c6:4f:a0:82:32:bb:67:3c:ce:f5:78:f1:42:11:
f9:be:c9:5d:e3:a4:8d:aa:7c:90:99:36:f4:c2:fb:
67:ab:70:ba:84:2a:c3:3a:d2:39:f7:89:41:f0:8e:
16:1e:c6:21:8c:da:3a:ab:b0:ae:5c:09:aa:a9:c3:
a1:d8:f7:36:29:27:57:08:cd:d6:b7:6c:d4:a2:c0:
a5:87:2a:a0:a1:0b:03:f4:76:2d:c1:c5:58:50:2b:
e7:42:f7:84:1b:99:d3:9d:84:38:8a:7b:fb:5c:4c:
2d:46:37:f2:b6:64:fd:36:47:62:1a:f1:a3:ef:26:
3b:f3:6a:d9:3c:72:bb:8c:34:b5:f6:e4:6b:e4:5c:
64:de:32:7f:dc:bf:42:31:c7:2c:0b:9f:7e:92:49:
1a:d6:8b:12:0c:d6:53:ea:9c:c5:ea:51:d5:b9:84:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:B6:4A:68:DE:9D:A8:6D:4E:48:7A:E4:94:5F:E6:9A:5F:92:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4177B498A7DE11EF8AE21DA3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:6a:dc:c9:e8:77:7d:2f:41:a8:16:ee:66:bb:16:90:00:64:
d6:50:93:3e:df:59:9b:54:4c:c7:5f:04:f7:dd:95:61:e8:f9:
fa:69:2b:9e:3e:86:92:ab:ab:f4:37:b6:00:e5:ee:cd:31:5b:
53:ba:c3:fb:12:34:98:39:76:13:34:ee:63:90:4c:94:c2:d4:
14:17:6f:8b:8e:75:b2:64:c3:a9:31:60:24:dd:c2:0a:9f:67:
c1:15:1b:8e:48:f0:89:53:f9:26:3c:ee:f5:f6:ff:ef:dc:98:
5e:78:ed:c7:68:f2:d6:98:a4:98:03:24:1a:f4:09:38:a1:8e:
79:17:6e:9d:f8:b0:53:56:1f:74:33:c9:ea:3e:44:94:ed:8a:
4f:17:7d:43:83:92:e3:1c:90:4d:e4:f5:d7:60:dd:bd:be:09:
94:13:03:4a:ee:cd:66:6d:f6:95:89:6d:11:09:e9:19:4b:e3:
dd:e3:ef:c2:cb:70:10:be:47:81:6c:6c:e6:97:a6:ff:b4:ef:
e3:5a:72:f4:ce:fe:b2:ef:0e:90:58:19:31:12:b2:ca:aa:39:
ea:e2:63:7b:ac:66:0f:4d:29:29:6a:38:6c:ac:ce:b6:db:36:
28:63:28:19:dd:74:cf:00:c9:07:de:7d:05:c6:c0:c5:a3:b1:
c0:8d:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org