Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/486CD58E9AAB11EFA9F66B61762E951A.roa
File: 486CD58E9AAB11EFA9F66B61762E951A.roa (raw, json)
Hash identifier: xkNW9KZNOPxYZTJcTywWPwp6Kf/smDtUzOsYbjwyUyk=
Subject key identifier: 07:B1:36:86:5C:57:86:84:5C:E5:15:E7:A0:4C:DF:1F:F9:5A:41:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CD8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/486CD58E9AAB11EFA9F66B61762E951A.roa
Signing time: Mon 04 Nov 2024 12:49:52 +0000
ROA not before: Mon 04 Nov 2024 12:49:48 +0000
ROA not after: Tue 03 Dec 2024 12:49:48 +0000
asID: 141883
IP address blocks: 45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52622 (0xcd8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 12:49:48 2024 GMT
Not After : Dec 3 12:49:48 2024 GMT
Subject: CN=6728c2f0-3c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:b0:00:9c:b9:d7:6d:cb:55:20:ac:b4:c7:
ce:cb:d2:84:50:cd:a1:5b:9d:4f:82:f9:1c:69:51:
99:8e:a7:b3:d3:7a:bd:5f:8a:f4:ef:7c:f1:60:90:
24:bb:ec:7e:82:11:d7:b5:5e:50:34:6e:eb:64:63:
4c:08:51:35:cd:96:2e:e0:eb:61:a7:aa:2e:19:4a:
64:c5:82:5e:bd:69:6e:82:60:20:23:f8:51:2f:52:
0b:c2:df:c1:31:8e:24:ed:b9:d4:b4:6f:72:d0:87:
5a:e5:e1:60:e0:28:28:62:de:6e:1f:7b:6d:a2:76:
e1:e1:39:e4:b0:48:f3:93:f9:39:0c:09:1e:56:24:
d3:da:67:5e:7f:40:32:20:e9:a4:c2:df:eb:fa:d6:
e2:db:6a:48:4d:35:58:08:56:30:54:cd:3d:5b:82:
b1:30:03:5f:a6:53:eb:50:e1:0e:ea:7e:b4:bf:10:
21:40:ee:a4:59:6a:b5:1e:ec:82:0d:4e:d2:4f:5b:
4d:ff:2f:5d:69:a0:0a:da:f8:d8:9f:a8:e1:9d:ee:
ef:7c:88:40:db:cd:5a:a6:03:6b:bd:b1:5e:84:f5:
0f:71:0f:b2:7b:5a:6c:ee:59:29:91:76:c5:67:bf:
4b:d7:f5:0d:6e:ab:92:1d:7d:8a:db:21:54:5b:7a:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:36:86:5C:57:86:84:5C:E5:15:E7:A0:4C:DF:1F:F9:5A:41:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/486CD58E9AAB11EFA9F66B61762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c2:20:c2:c2:2f:08:d8:9d:87:89:7e:95:79:f9:3a:ab:bc:
10:e1:c9:76:9e:86:3b:39:9b:ca:1b:08:e4:2c:fd:c4:8b:ef:
e1:6d:2e:ad:9b:b9:96:8c:55:59:e5:7c:bf:cb:6b:6e:d7:5f:
6e:57:fd:67:0a:5e:02:4e:36:dc:23:20:b9:31:51:ae:f0:73:
9c:71:57:88:f8:75:93:c0:ad:0c:e8:82:cd:63:5a:0d:dd:4e:
bc:44:dd:9a:21:ec:0c:90:b8:78:59:cf:82:9b:36:63:f3:43:
1f:bf:bb:d1:85:47:bd:08:8f:9f:39:9c:ef:df:6e:ed:48:9a:
9e:95:84:9f:fa:e3:f4:14:13:e1:86:00:12:da:7a:01:26:53:
20:84:20:c3:93:cd:2c:49:15:40:14:0c:34:90:9c:3c:66:d1:
e2:44:b0:0c:51:c6:da:b5:72:cb:39:c5:d2:81:15:23:7f:ce:
83:e1:10:1b:b3:79:be:a8:31:a8:81:6c:7a:5d:69:74:e5:4f:
91:75:b7:f4:54:ca:ed:f6:87:e6:64:0f:63:86:6f:fe:51:7d:
a7:bd:d4:82:98:92:25:a6:5e:c2:e7:7c:ca:54:ba:09:71:f0:
0e:64:b7:e1:41:2d:2c:45:cb:aa:2b:e9:df:1b:61:f4:eb:7c:
ab:c5:5c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:28 2024 by rpki-client on console-ams.rpki-client.org