Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CC4F3E9F7F11EFAC68314B762E951A.roa
File: 45CC4F3E9F7F11EFAC68314B762E951A.roa (raw, json)
Hash identifier: WxeK1weXJpyw4Ao6dAKLhSDGm/9bZrbOJ9to5ng9TWs=
Subject key identifier: C0:E2:44:C6:3C:B7:B5:CB:F5:D0:E7:17:00:43:67:E4:3B:7D:13:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D10C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CC4F3E9F7F11EFAC68314B762E951A.roa
Signing time: Sun 10 Nov 2024 16:17:25 +0000
ROA not before: Sun 10 Nov 2024 16:17:22 +0000
ROA not after: Fri 17 Oct 2025 16:17:22 +0000
asID: 132813
IP address blocks: 45.195.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53516 (0xd10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 10 16:17:22 2024 GMT
Not After : Oct 17 16:17:22 2025 GMT
Subject: CN=6730dc95-1d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:82:6f:a2:3e:56:f4:bb:28:ca:2a:17:65:
4a:67:09:bf:bc:08:47:b1:c4:9e:64:a0:4f:e7:ec:
fd:9a:17:48:1e:47:5f:f8:f2:e5:41:f8:bb:8d:64:
69:d0:63:f2:81:68:04:5c:4e:52:56:cc:5a:86:15:
3f:4f:b2:55:58:c5:2f:e1:e0:4f:3e:f9:aa:d7:63:
7b:de:29:59:f0:98:cb:f6:02:fd:4d:8a:de:b4:e7:
86:84:98:c0:d4:f7:ff:43:30:63:35:49:cb:3b:ce:
49:79:f9:39:e7:08:93:2a:70:b5:ce:d6:b9:4f:33:
d1:7c:5d:9b:1a:62:88:5f:d6:61:0b:d4:8e:45:9f:
78:71:dd:53:74:a2:84:7e:69:99:fb:16:b8:ee:60:
fc:bb:18:80:c9:b2:78:73:58:7f:68:f9:9e:d4:92:
5b:51:f0:ea:9b:3f:2f:97:fa:a8:37:b6:b3:22:e4:
98:8a:5d:32:76:f9:8f:29:36:a6:5b:5f:0f:bb:90:
12:84:4a:67:ae:a6:64:4a:50:d0:f4:2a:41:2d:52:
40:39:be:1c:62:e5:bb:83:97:2e:07:27:a1:8a:73:
06:f6:b5:1c:5f:dd:4c:67:de:56:21:9c:aa:9e:51:
65:dd:3b:c6:77:a1:40:da:fe:9a:1a:08:a1:6b:1d:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E2:44:C6:3C:B7:B5:CB:F5:D0:E7:17:00:43:67:E4:3B:7D:13:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CC4F3E9F7F11EFAC68314B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
13:02:f9:c4:3c:79:e0:07:da:6d:5e:c2:b0:f3:a5:e7:66:0f:
d7:1a:b7:3a:4a:6f:76:04:03:ea:71:17:29:0e:85:7a:c4:61:
55:7e:2c:4a:4a:9e:9a:ca:ac:32:4e:7c:56:91:02:85:d6:49:
c9:9b:1e:00:97:73:25:56:fa:b7:01:11:ca:c8:7e:ee:c7:2c:
24:2e:9d:05:11:d1:89:b2:33:09:dc:b1:de:4e:dd:25:3a:98:
f6:44:9e:04:16:b9:77:f7:42:7c:50:82:61:ea:de:50:b4:a0:
26:1a:a8:a7:61:8a:2e:b1:ac:1b:45:26:76:7a:8f:cb:20:69:
4b:e7:3d:ef:ee:db:ee:37:f0:15:08:d6:a2:02:53:6f:d2:14:
40:99:f4:7c:13:fa:33:ab:d5:a9:36:61:10:31:c3:b7:6f:0c:
15:0f:a5:b6:b3:e2:53:d6:c6:1f:25:f2:05:79:cc:ca:db:d3:
43:34:99:a6:a8:ac:a2:4f:f7:81:c1:a3:c7:ec:54:5c:a2:76:
c2:8c:49:d3:f4:ba:66:5c:c8:12:eb:22:f7:4a:c0:a4:c5:76:
9b:21:36:da:e2:d3:15:2c:d9:64:68:61:6a:bf:bb:84:2a:9d:
55:e8:2b:ee:f4:82:db:81:65:2e:87:13:40:c5:c4:10:fa:80:
35:89:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:27 2024 by rpki-client on console-fra.rpki-client.org