Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C468106A45A11EFB342C583762E951A.roa
File: 4C468106A45A11EFB342C583762E951A.roa (raw, json)
Hash identifier: yHbA8Ef22LnnWHeTsDtlYKUg0DpfRBapCQO7hKD6ISU=
Subject key identifier: C1:DE:CB:3F:95:FA:9D:AB:2A:BE:13:AF:26:8D:03:2A:79:AC:B4:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D416
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C468106A45A11EFB342C583762E951A.roa
Signing time: Sat 16 Nov 2024 20:35:21 +0000
ROA not before: Sat 16 Nov 2024 20:35:17 +0000
ROA not after: Wed 27 Nov 2024 20:35:17 +0000
asID: 39600
IP address blocks: 45.197.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54294 (0xd416)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 20:35:17 2024 GMT
Not After : Nov 27 20:35:17 2024 GMT
Subject: CN=67390208-7f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:b4:26:dc:00:ea:9b:ab:10:7d:c1:f8:3d:
d0:31:0b:7b:e8:d3:13:ed:06:55:c7:5d:07:bc:af:
c4:d8:07:04:ed:c2:ba:1d:9c:09:e8:1b:b2:33:a1:
bc:d1:9e:34:b3:17:4f:16:3d:86:52:bc:9e:d7:a2:
5c:e0:83:47:15:c3:61:ba:2d:ad:b6:83:bb:e4:fe:
51:95:3c:e2:88:73:e2:4e:97:52:ee:4e:22:a1:86:
ad:64:52:cf:72:5b:5d:93:24:1c:dd:da:db:54:d3:
ab:f5:54:02:bc:24:d1:86:90:5e:c8:df:ac:b0:b7:
2a:e5:17:c5:55:4b:cf:97:32:0f:ad:f9:e2:f4:a4:
7c:13:b0:d6:5b:9f:c7:2c:af:bc:dd:d7:bd:19:00:
7f:5f:2f:2c:86:d7:61:a5:fe:96:ea:84:08:45:0d:
92:cb:9b:cc:c0:c2:28:ad:47:4f:8a:0d:9d:74:ba:
28:42:e0:22:f0:ec:ec:b4:2a:f1:61:80:7b:30:74:
2d:bb:6c:9f:40:57:3d:8e:aa:dc:38:78:da:e0:c6:
e4:82:7c:0e:34:73:a9:56:56:fc:2f:d3:a0:fa:02:
58:ca:32:3d:4c:98:04:9a:26:b9:29:bb:8e:53:f1:
25:53:92:c6:41:09:b6:96:87:45:55:23:b3:8e:3e:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:CB:3F:95:FA:9D:AB:2A:BE:13:AF:26:8D:03:2A:79:AC:B4:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C468106A45A11EFB342C583762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:16:45:90:c6:dd:6d:67:53:30:3f:c7:26:8e:cb:94:b6:41:
32:ec:f0:08:4c:3c:60:5f:b7:5f:7f:00:f9:8d:0a:e7:95:4b:
e4:1e:7b:0b:5d:52:c4:e8:3a:6b:15:f5:5c:ca:b1:3a:5f:38:
38:c0:c0:d8:b6:cc:c0:95:75:6d:42:bf:a1:c5:e0:62:e6:5b:
de:cd:b1:9a:be:5f:55:ff:76:a0:7c:95:3b:50:78:71:f6:99:
a6:29:17:8f:6a:52:02:98:62:91:c2:6c:9a:c9:a3:69:9e:ff:
d8:2f:fa:ae:d2:c8:82:54:c3:90:f1:4d:9a:f4:11:dd:a1:2b:
07:d1:43:4e:b8:bc:78:7f:63:df:12:e9:70:b8:d4:bf:81:5c:
31:25:cf:fb:fd:d8:6d:0c:3f:c8:d2:66:f3:ae:57:58:90:6f:
95:1c:bb:a9:63:ab:eb:e2:67:87:ec:52:25:5a:41:30:f0:71:
d0:27:3e:da:64:62:35:af:d4:db:02:cf:84:bc:be:88:23:4e:
46:98:4c:42:b8:cf:ff:68:c0:c7:09:29:4d:f6:24:93:b3:4d:
96:bc:d6:39:64:83:8a:3e:58:85:87:7c:ee:9f:f4:ed:26:16:
a2:36:5e:88:dc:d7:85:c6:de:02:b9:ba:e1:c1:a3:c8:c4:29:
df:a5:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org