Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B98E62C014411EF8F1A0635017001B1.roa
File: 4B98E62C014411EF8F1A0635017001B1.roa (raw, json)
Hash identifier: JAC/nT2TySqhGf92MAhGK7fWlw0rMMCgEzQi+Ap2cb4=
Subject key identifier: AD:21:79:69:7B:26:24:9F:4E:DF:58:67:0D:80:B9:38:8A:B4:D0:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8414
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B98E62C014411EF8F1A0635017001B1.roa
Signing time: Tue 23 Apr 2024 07:37:11 +0000
ROA not before: Tue 23 Apr 2024 07:37:08 +0000
ROA not after: Sat 11 May 2024 07:37:08 +0000
asID: 399989
IP address blocks: 45.196.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33812 (0x8414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:37:08 2024 GMT
Not After : May 11 07:37:08 2024 GMT
Subject: CN=66276527-4201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:19:05:f6:a6:cf:ab:de:f9:e5:c0:68:4a:
fe:8a:9f:b6:51:c3:b6:69:3c:55:97:b4:48:86:20:
c4:07:da:04:ce:7f:bb:23:4c:74:5d:38:a6:ca:ed:
08:b1:a9:bc:92:3c:4a:12:40:49:83:59:ca:00:05:
d8:7a:f3:c0:a1:06:31:91:73:82:81:a1:6a:a7:96:
32:90:d4:54:d5:d7:0c:87:81:86:8c:8f:5b:7e:4a:
28:fb:78:4b:3b:ae:4d:ac:9c:2c:47:3e:09:15:53:
b2:b9:b7:c0:9f:86:e4:ea:83:e7:0c:8a:9d:68:f0:
26:33:95:b1:c3:28:38:af:85:00:b6:3a:c2:e7:a1:
40:7d:76:02:34:4c:fe:2c:a8:2c:c1:9c:69:8c:f8:
ec:d4:c6:10:59:33:b8:2e:b5:ac:3c:d0:98:f6:f4:
df:f0:92:bd:87:7b:38:5a:e6:e2:65:61:70:91:44:
ba:07:dc:7c:d7:0c:fc:a6:59:8f:14:95:ea:22:ea:
b1:7f:0b:46:cd:4d:62:8b:6f:6d:22:e8:f2:93:25:
44:33:54:9f:4d:68:58:8b:78:d3:bf:8a:25:78:3b:
87:c0:09:7e:7b:a2:71:50:7b:91:95:64:14:4a:27:
7b:40:af:ee:10:40:7e:92:0c:d4:9a:c6:c2:b8:b3:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:21:79:69:7B:26:24:9F:4E:DF:58:67:0D:80:B9:38:8A:B4:D0:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B98E62C014411EF8F1A0635017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.60.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:32:ac:d2:aa:88:11:ff:10:bb:06:86:2b:c0:6a:69:b8:4d:
10:92:9e:bd:20:01:95:8d:a7:24:02:ef:1d:85:ad:e0:27:14:
af:ec:9e:69:50:0b:03:44:b8:92:57:60:15:41:f1:b5:ea:47:
87:81:ab:01:64:62:ab:f8:c2:91:a3:24:c7:d2:62:3a:aa:ba:
ce:18:11:2a:e2:00:78:92:c5:03:77:7f:c7:69:ed:d1:41:c5:
a2:3b:0c:21:0e:9b:11:22:d7:7e:70:48:41:b8:33:05:f8:b5:
41:5a:37:e5:f4:eb:9f:c6:69:e6:27:9a:c8:f1:0a:e1:17:b2:
c2:e3:94:ca:f4:34:4d:e5:2b:ef:02:c5:a3:3d:1a:b5:97:1e:
cc:61:dc:77:b0:4a:9d:4c:e8:5d:56:1f:08:ef:27:c1:6c:e6:
3a:02:8a:94:3a:4a:51:78:ea:89:eb:8b:d5:4a:19:0a:7e:61:
fa:dc:ea:5c:d2:90:90:31:0f:05:90:ce:05:64:fa:ba:3a:3d:
a2:ed:f1:97:c9:cc:a9:15:b2:37:97:e3:b4:f8:5c:6f:e6:13:
de:aa:35:a5:9a:b8:70:7f:34:e5:00:c9:d1:98:f1:40:73:47:
45:6f:45:6f:f1:de:42:0b:d3:78:86:ed:22:19:02:51:37:27:
9a:23:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org