Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41C46A5A7E3E11EFBF997BB2762E951A.roa
File: 41C46A5A7E3E11EFBF997BB2762E951A.roa (raw, json)
Hash identifier: biGxQtHUEMX3InAFe0Uq/bfLsdxJJpI718SknyL7Tlw=
Subject key identifier: 79:00:41:FF:EE:78:74:AF:70:4E:1F:E6:8F:00:8D:AB:63:97:64:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: BC83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41C46A5A7E3E11EFBF997BB2762E951A.roa
Signing time: Sun 29 Sep 2024 08:38:53 +0000
ROA not before: Sun 29 Sep 2024 08:38:49 +0000
ROA not after: Mon 30 Dec 2024 08:38:49 +0000
asID: 17561
IP address blocks: 45.194.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48259 (0xbc83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 29 08:38:49 2024 GMT
Not After : Dec 30 08:38:49 2024 GMT
Subject: CN=66f9121d-c399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:6f:09:19:e7:da:9a:05:d7:f7:64:35:9b:
d0:f6:ce:8e:48:84:56:90:8f:e1:30:51:0b:fe:d3:
58:36:53:24:98:a2:17:5f:43:96:ba:71:a3:19:5a:
f6:d9:c9:63:6f:3d:ac:7e:d5:e5:39:7f:82:29:56:
d0:78:df:bd:e2:41:db:38:ac:06:fb:89:2e:d6:e1:
9b:1e:ec:22:54:0e:44:3c:d6:bb:52:f3:d7:2a:e0:
fd:60:20:97:d3:b7:ee:d2:bd:61:e3:18:9f:83:7f:
70:3a:fd:7f:1f:bd:fe:6a:92:78:0c:52:3f:4b:83:
70:04:ec:ab:e8:ce:f0:b3:65:22:72:a9:c8:11:f8:
74:d3:ca:1d:cf:50:37:12:d1:6c:dc:da:9d:60:a8:
87:41:88:d5:fd:7e:9e:f4:f2:04:1c:37:fe:d5:a8:
64:d8:94:b3:3d:4d:cc:af:85:89:df:75:4f:c8:84:
a6:9f:7a:c9:36:53:17:34:16:07:95:3a:7d:75:9b:
77:7d:22:7a:79:85:09:6c:65:b9:4f:4d:3a:d6:f6:
96:10:c1:ce:fc:56:85:b7:8a:c5:6e:43:2e:ad:58:
5a:30:07:06:e5:cd:1f:b0:dc:27:d9:f6:f3:5f:67:
a4:db:54:d3:ec:26:71:07:65:df:f1:36:e1:05:1c:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:41:FF:EE:78:74:AF:70:4E:1F:E6:8F:00:8D:AB:63:97:64:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41C46A5A7E3E11EFBF997BB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.124.0/24
Signature Algorithm: sha256WithRSAEncryption
21:bc:d7:42:6a:aa:e7:60:72:5d:6d:9e:12:93:26:df:df:a6:
66:6f:33:f5:21:56:d1:31:14:45:3a:60:48:e5:b7:17:fa:27:
2e:7b:9c:56:37:d8:68:e7:20:3f:70:7e:79:29:d6:43:fa:62:
01:eb:4a:8d:09:85:dc:5e:de:b3:c5:14:c3:a4:c6:97:62:d7:
f4:dc:17:1e:c1:9d:92:6c:7b:63:15:c5:11:80:6f:f4:e5:7e:
6c:5f:08:0e:4c:24:2b:9a:49:ce:92:7a:5d:c5:d6:7e:db:ec:
db:d6:b5:31:82:93:06:86:94:a9:40:40:bf:19:75:9c:4a:24:
12:0e:71:c7:b7:8d:9d:82:4c:29:eb:6f:7d:a2:85:45:c3:78:
c3:96:55:49:d8:42:ca:df:a4:f4:07:8b:cc:cb:dc:be:68:44:
6c:3d:e1:bb:4b:28:c9:a3:5c:1f:23:89:66:a1:fc:b9:26:6b:
51:a1:94:6a:c4:f5:ff:b9:f2:9b:7e:a2:93:5b:c4:d4:f8:1a:
51:ee:34:c3:40:10:5f:77:3f:c9:be:b4:ed:e0:67:3c:1c:f3:
ec:d4:50:b4:bb:b0:4a:3a:f8:8b:03:7a:58:5f:bf:c7:23:b2:
3e:c1:41:1a:13:4e:19:11:91:af:8c:bc:41:c4:6d:4c:21:53:
1a:10:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org