Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/569B4046A19A11EF80DA6AB8762E951A.roa
File: 569B4046A19A11EF80DA6AB8762E951A.roa (raw, json)
Hash identifier: 2gN8vyqArG8qYrfDCeHscZIFQSsHJJGvt+EDenxIGsE=
Subject key identifier: A8:E8:BC:C5:01:D3:13:20:1F:D2:A8:65:45:B2:E8:A3:28:42:81:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D252
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/569B4046A19A11EF80DA6AB8762E951A.roa
Signing time: Wed 13 Nov 2024 08:36:12 +0000
ROA not before: Wed 13 Nov 2024 08:36:09 +0000
ROA not after: Sat 23 Nov 2024 08:36:09 +0000
asID: 136778
IP address blocks: 45.204.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53842 (0xd252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 13 08:36:09 2024 GMT
Not After : Nov 23 08:36:09 2024 GMT
Subject: CN=673464fc-1cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:25:1f:1f:c8:92:ee:97:8a:37:32:c1:89:
25:c4:ee:f9:96:a8:36:bb:f5:e6:96:a9:d6:ac:23:
e6:df:7a:f5:61:a1:1d:a5:a3:11:80:74:c6:0f:02:
01:7c:5e:39:87:2f:66:c3:d4:aa:e7:b5:08:60:4c:
e7:33:52:7c:82:05:a5:4a:5b:54:2a:6e:f7:5b:a5:
2f:b2:75:b0:a2:6a:56:42:7e:93:9d:99:bc:1d:b6:
da:d1:3f:d3:c0:52:2b:d5:15:2d:71:88:91:58:5c:
a2:64:ad:ed:15:c4:9c:73:2f:08:84:bd:c0:ee:6e:
57:f9:04:63:19:45:d6:54:1e:4d:ab:7d:2d:18:0c:
37:a1:6d:eb:e0:ed:e7:d3:e8:e3:ea:d7:53:82:1e:
64:4b:f5:9c:99:c5:9e:b0:24:2d:fa:78:64:54:31:
0f:c1:a9:2f:cc:f2:f7:96:73:ca:e6:66:36:62:a0:
4c:32:d3:50:65:1b:ec:cd:55:8a:99:ef:13:cb:e7:
2c:9b:cf:53:58:3f:01:87:3f:20:c1:8f:2c:12:35:
0f:c5:a8:59:ec:52:09:24:55:0d:42:3d:64:e8:31:
4e:20:4e:e9:5e:e5:c1:33:8c:83:3e:3d:0d:27:3a:
96:60:54:6f:a5:73:0f:bf:85:e8:4d:a3:98:e2:0d:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E8:BC:C5:01:D3:13:20:1F:D2:A8:65:45:B2:E8:A3:28:42:81:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/569B4046A19A11EF80DA6AB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.82.0/24
Signature Algorithm: sha256WithRSAEncryption
69:be:c0:6d:ba:66:4d:fa:40:78:23:91:d1:9d:e3:3f:19:79:
bf:80:42:84:3f:15:e9:4b:59:77:60:02:3d:a3:9c:c3:b0:f9:
5f:68:c3:56:af:4b:98:d5:ff:83:71:ec:e5:6b:a2:c0:a2:bb:
35:0e:7f:3a:d3:f1:67:7e:d0:a7:9c:28:1f:36:21:13:2b:2a:
33:ef:12:40:6a:8a:3a:8b:ef:33:ca:80:6f:a6:1a:75:47:58:
88:db:ee:d1:d6:39:ab:5d:89:2a:42:c7:63:31:b6:c0:ce:43:
f2:4e:86:8a:85:a8:7f:39:33:32:8b:aa:11:27:f2:5e:bf:9f:
01:93:70:84:e8:43:40:f0:1b:ba:87:ee:cb:ef:ff:5a:27:de:
a7:ac:b2:93:a6:cb:95:70:d2:60:7d:1d:ca:73:e1:75:ac:84:
4c:be:4c:d7:d7:ee:99:e7:ff:84:4a:46:94:f1:8c:41:bd:82:
a7:de:7b:31:de:be:99:1b:e6:c4:0a:31:16:29:c3:68:04:da:
67:19:af:80:aa:d2:15:4b:91:44:e6:d9:67:a2:8d:56:d3:08:
1c:c7:fa:48:7b:19:b2:2b:bf:8c:b0:c8:ec:7c:f5:9c:37:09:
bb:ef:fb:95:f2:93:0e:78:a0:dd:36:7c:e7:97:39:87:57:36:
e2:ab:ce:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:29 2024 by rpki-client on console-fra.rpki-client.org