Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CDDDEE018311EFABB9C733017001B1.roa
File: 45CDDDEE018311EFABB9C733017001B1.roa (raw, json)
Hash identifier: BTFvUdXPtO322cmYTS0kZxG+vqZ07J3bfKFHEtP2698=
Subject key identifier: 98:48:D7:3F:A0:D3:E8:44:19:64:E4:EB:6A:F7:C4:BD:49:FB:9B:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8451
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CDDDEE018311EFABB9C733017001B1.roa
Signing time: Tue 23 Apr 2024 15:08:00 +0000
ROA not before: Tue 23 Apr 2024 15:07:56 +0000
ROA not after: Sat 25 May 2024 15:07:56 +0000
asID: 137547
IP address blocks: 156.245.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33873 (0x8451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 15:07:56 2024 GMT
Not After : May 25 15:07:56 2024 GMT
Subject: CN=6627cecf-16b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:01:33:93:b4:a5:63:e9:2e:00:86:93:f3:
08:8b:10:d0:3e:d6:d2:f4:32:75:dd:96:09:26:fe:
66:46:16:59:c0:e9:ba:e6:b6:38:0d:49:30:bd:52:
92:9b:c4:73:1f:9d:4c:9e:a0:24:60:e3:6a:e7:1c:
5c:bc:66:c4:1f:38:c7:6c:12:04:70:2b:87:f7:f5:
c7:01:d3:b0:b7:3e:8b:b1:e6:c3:10:7f:29:dc:79:
a2:6e:96:63:3c:fa:d2:27:85:5a:01:af:04:4e:e7:
9e:a6:f2:81:a2:05:8b:76:15:d0:e2:41:d1:5d:e2:
ca:df:66:c3:a6:50:94:f3:3a:3d:ce:7a:a4:bb:75:
9d:75:a4:b1:0b:dc:54:0e:c4:08:14:01:be:16:a7:
af:69:a9:0f:08:9b:8b:2c:7e:e0:1c:e5:40:2e:f1:
fe:b6:7d:50:22:33:7a:6b:47:b5:c8:90:35:57:69:
f2:68:81:48:00:3b:52:50:4a:00:c9:7b:11:d6:c4:
46:94:b1:be:2b:5d:3e:1a:25:93:04:3e:6d:53:c8:
e0:bc:d5:3c:8f:5f:7f:6f:92:c3:08:e9:7e:a1:e2:
e9:e8:33:03:91:59:66:e3:1c:38:30:0b:d2:03:7f:
39:5b:11:e1:87:3d:de:b0:24:02:0a:2d:72:d7:b0:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:48:D7:3F:A0:D3:E8:44:19:64:E4:EB:6A:F7:C4:BD:49:FB:9B:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45CDDDEE018311EFABB9C733017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.244.0/22
Signature Algorithm: sha256WithRSAEncryption
55:b2:e3:01:82:e9:b5:33:f0:16:09:dd:76:dc:46:46:c2:f1:
38:c6:9e:ee:11:89:c4:86:66:d0:2e:ac:f8:72:56:65:77:30:
72:34:a1:27:d9:fb:c5:0e:6d:75:c6:84:fe:5f:27:9d:5f:c2:
7d:10:a9:85:f3:2f:3b:76:38:62:5c:c0:fb:94:98:f7:98:5f:
6e:8f:71:6a:2a:7a:6d:44:8a:fe:e6:83:49:94:0e:46:09:48:
6e:9d:ae:a7:0c:c7:90:1a:dd:df:5f:d9:3f:98:87:b0:fb:68:
9e:49:9e:9d:f0:42:42:92:f4:98:e0:44:6c:2a:bb:2a:ec:50:
73:88:b4:c0:62:ad:56:45:c4:c0:43:4c:5a:69:44:a6:59:48:
cb:58:21:07:75:03:c5:b1:ea:2a:7f:fa:e7:f1:d7:d9:e2:1b:
27:aa:99:51:81:da:15:53:af:f5:76:d9:06:e6:f0:82:c6:5d:
a6:bb:a4:5c:c4:41:31:4c:38:93:1e:87:38:da:a7:b0:1e:af:
40:36:88:72:62:91:70:0f:62:87:17:e9:d4:73:7a:c4:fc:c8:
69:fe:0d:a2:64:ed:c8:6b:14:c7:54:b2:15:38:9a:75:ea:29:
27:bf:f3:97:10:23:0d:75:b7:7e:e9:09:75:83:81:47:3c:c1:
7a:b7:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org