Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C7741EA4D811EF84A967A4762E951A.roa
File: 46C7741EA4D811EF84A967A4762E951A.roa (raw, json)
Hash identifier: SBKZLgxrf7BBySwZfBPW5ispj/VWHpng0YUsUk2PUAA=
Subject key identifier: 9A:96:F7:67:0E:3C:2C:10:B9:1B:67:D3:BA:2E:51:25:36:4F:AC:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D51B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C7741EA4D811EF84A967A4762E951A.roa
Signing time: Sun 17 Nov 2024 11:37:08 +0000
ROA not before: Sun 17 Nov 2024 11:37:04 +0000
ROA not after: Thu 28 Nov 2024 11:37:04 +0000
asID: 133847
IP address blocks: 45.200.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54555 (0xd51b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 11:37:04 2024 GMT
Not After : Nov 28 11:37:04 2024 GMT
Subject: CN=6739d564-c1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:fb:d8:9e:98:38:8c:ca:96:dd:a1:1d:06:
6b:5c:3b:32:c3:34:a4:1e:5d:32:d8:ea:43:89:90:
1e:f7:98:d2:7c:64:94:ea:9b:94:c8:7d:e0:de:d1:
b6:42:12:d9:9f:95:7e:19:17:62:25:4d:b9:69:50:
7a:21:5c:76:dc:4f:91:9e:72:18:50:bc:32:08:12:
51:c4:59:12:41:e1:cf:8a:6d:80:74:77:64:57:b2:
59:12:fe:84:ad:53:b1:6a:01:ab:8b:a9:6c:11:65:
23:a5:61:f5:a9:e0:53:31:87:f4:10:e9:00:ba:7b:
56:d2:97:8f:a7:f4:ec:4a:4e:f0:95:9c:d2:0b:ed:
83:e3:a1:b0:4a:ca:56:92:50:a1:2c:29:b4:ae:2b:
7e:48:da:77:bf:e0:f7:04:22:d6:b0:ea:26:45:cf:
0c:1e:f9:5d:d3:e0:18:50:00:c9:75:1e:58:fe:fe:
d8:76:74:64:92:8f:1f:9a:a7:8f:7d:b1:8a:f4:dc:
33:8b:7d:65:8c:1b:2f:2c:21:5a:2f:ba:d1:11:a2:
b4:c9:4b:a3:35:6d:31:ec:54:15:be:19:fa:5a:45:
b0:c7:bc:16:99:e3:06:b9:eb:0c:06:28:84:51:c3:
2a:90:73:8c:d2:5f:65:27:7b:fd:37:18:90:ca:74:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:F7:67:0E:3C:2C:10:B9:1B:67:D3:BA:2E:51:25:36:4F:AC:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C7741EA4D811EF84A967A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.90.0/23
Signature Algorithm: sha256WithRSAEncryption
80:f9:dd:bf:3b:e3:e9:78:5b:af:ea:5b:e8:3d:56:da:ff:48:
d4:1a:d8:a1:05:83:39:83:3d:1d:88:3a:f8:98:3b:de:93:7a:
73:56:73:ed:a5:f0:a3:0b:8e:ad:1d:e3:60:31:c4:30:f2:3e:
f7:99:e7:fe:4d:4d:61:4d:c1:39:5b:90:82:b6:44:58:41:b2:
b9:85:f3:10:41:b8:83:ef:ef:84:ee:c6:ba:3d:26:be:9f:c6:
67:23:a7:ee:43:41:f0:e2:ef:5b:56:99:1c:41:7f:d9:1a:c5:
c7:4d:f1:0c:34:52:92:33:77:66:54:a6:77:0b:84:65:b5:4d:
3e:10:44:16:51:fc:14:9d:6f:3f:74:5b:67:67:5b:19:f1:de:
e2:c9:12:0c:8c:a7:7d:1d:25:9b:1f:b4:ff:85:2e:4d:7e:d0:
ca:61:33:58:91:b7:d1:d9:62:9e:30:c7:38:04:9e:87:70:68:
e2:9c:11:18:8c:97:6e:1b:9e:69:7f:77:4a:ec:d8:62:4f:fa:
cf:3a:6c:9a:6c:72:26:b1:fa:22:fe:d0:2d:97:b8:7f:cf:c5:
de:15:14:2c:c2:f2:fe:13:62:2a:dd:51:ce:5b:c7:4e:db:fb:
c4:9f:a2:0c:8d:b6:52:9f:7b:30:e7:fc:5f:91:5c:0d:1b:c6:
8c:5a:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org