Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42AFEA7CA44811EFA2829C91762E951A.roa
File: 42AFEA7CA44811EFA2829C91762E951A.roa (raw, json)
Hash identifier: qLKuBwR+78e2To3HDfJpdBTGfAqa8B7RgAuh46L51Es=
Subject key identifier: 04:59:22:7C:ED:74:9E:80:30:D6:80:21:48:B0:4F:9B:A8:4C:C7:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D388
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42AFEA7CA44811EFA2829C91762E951A.roa
Signing time: Sat 16 Nov 2024 18:26:14 +0000
ROA not before: Sat 16 Nov 2024 18:26:10 +0000
ROA not after: Mon 25 Nov 2024 18:26:10 +0000
asID: 399989
IP address blocks: 45.196.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54152 (0xd388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:26:10 2024 GMT
Not After : Nov 25 18:26:10 2024 GMT
Subject: CN=6738e3c5-1b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:84:00:d0:df:36:b1:36:f6:c0:75:36:5b:
7e:8a:db:a0:37:0d:f8:3a:95:a2:80:5c:38:00:73:
a8:a3:2b:c5:65:19:cc:8f:47:82:e9:05:2c:86:0b:
35:aa:12:0b:03:b3:90:68:37:f2:c0:a8:57:b8:13:
e2:ed:02:f8:a9:5d:48:1c:83:d0:79:f6:bc:0f:40:
2e:ac:50:a8:c0:be:48:8b:92:65:b9:d7:af:4d:15:
28:da:98:33:17:d9:8e:05:62:bd:c2:1a:1b:6e:90:
95:bf:0f:68:dc:3c:d6:fb:9a:6b:61:db:f2:b2:ce:
83:61:86:53:9b:11:61:1c:99:cd:86:48:0b:8e:3d:
ab:d0:d2:8d:21:86:d9:67:83:7d:d9:cc:c0:6c:5b:
d7:aa:0e:2e:6e:10:42:db:97:d5:c5:11:6e:a4:89:
23:aa:61:17:f1:b1:52:07:b3:11:d1:13:4b:e7:0a:
ad:3c:58:e5:c4:f6:6d:fc:83:e1:18:d2:3c:51:fd:
b8:63:7d:f2:88:02:bc:bf:79:64:b0:54:ec:00:64:
35:70:69:93:43:4d:99:bc:f2:9f:2e:95:f7:5a:aa:
1c:f2:3c:40:87:45:26:68:1b:07:a5:54:a1:f7:6c:
9a:55:a7:fe:15:d4:59:36:e6:4d:65:17:2a:58:a5:
91:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:59:22:7C:ED:74:9E:80:30:D6:80:21:48:B0:4F:9B:A8:4C:C7:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42AFEA7CA44811EFA2829C91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.32.0/22
Signature Algorithm: sha256WithRSAEncryption
24:f7:b3:4f:44:14:0a:be:db:55:27:66:4f:0a:9c:22:31:a1:
e9:cc:0b:8a:ae:08:bb:28:d2:ea:87:32:20:d4:69:1e:1b:b9:
bd:62:54:bf:34:e6:e2:19:ce:37:5e:b9:3b:58:54:80:fe:7f:
37:1b:b1:40:45:65:94:d8:b1:b4:f3:44:2d:f7:e5:9e:95:60:
12:db:9d:ce:71:3c:d2:8d:3a:5b:4b:9f:84:0e:8a:43:8c:ad:
d1:61:80:0c:3a:f9:cc:bb:ab:58:74:cb:79:ad:fc:08:d1:b0:
73:71:42:b9:f1:a4:11:0b:cb:6e:7a:84:b6:69:11:c8:8a:87:
6d:3d:18:9e:e1:84:5c:19:17:57:ba:f3:82:aa:5e:5e:44:44:
d3:f3:fa:25:61:d0:05:e3:24:a3:47:45:fb:91:fa:6b:ab:9e:
aa:1d:54:63:1a:71:0c:3e:81:95:f5:7f:e6:12:1a:11:27:39:
7a:1b:9d:7d:1c:8a:6b:b3:91:8a:b2:83:78:f5:8f:b9:fc:7d:
5c:46:f7:7f:61:8a:6a:eb:ae:a4:c6:06:12:19:1c:06:d4:e0:
ed:95:a9:24:8f:cb:98:e9:8d:ce:24:b7:83:53:7c:23:84:85:
91:c2:47:39:8b:d4:41:d4:0b:69:48:d7:ea:88:b6:b0:67:d1:
43:d7:ab:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:26 2024 by rpki-client on console-fra.rpki-client.org