Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/594908E8A25B11EFB0086A74762E951A.roa
File: 594908E8A25B11EFB0086A74762E951A.roa (raw, json)
Hash identifier: yJnnk0lFj5qdJqT7C5HM3ovo5YJ7wcO5Q1eHYlfTTAY=
Subject key identifier: 50:7A:70:D9:95:44:98:17:F8:1C:F8:F3:67:84:8C:CB:79:F1:84:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D26F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/594908E8A25B11EFB0086A74762E951A.roa
Signing time: Thu 14 Nov 2024 07:37:50 +0000
ROA not before: Thu 14 Nov 2024 07:37:46 +0000
ROA not after: Thu 05 Dec 2024 07:37:46 +0000
asID: 6079
IP address blocks: 45.202.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53871 (0xd26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 07:37:46 2024 GMT
Not After : Dec 5 07:37:46 2024 GMT
Subject: CN=6735a8cd-35d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:b6:db:8a:df:5f:0d:8f:5a:0c:92:7b:5f:
a2:63:66:c7:fc:98:c4:d3:c7:3c:5e:59:e8:f5:d7:
a4:00:2f:72:82:11:58:1b:e1:6c:a6:64:52:c3:25:
7b:ec:39:ff:10:ec:69:84:66:8b:26:c2:9c:32:ca:
23:0c:59:7a:d5:70:32:0a:69:f5:eb:22:94:e2:ac:
0b:63:a2:16:be:3b:e6:45:51:8b:bf:e0:b0:88:a3:
90:12:43:fd:b7:b9:96:10:70:97:53:80:9a:39:58:
7e:b7:1f:cd:c5:81:4b:ee:ad:d8:79:c4:1d:51:54:
ef:43:a7:91:17:e3:58:94:02:1f:1e:96:c2:fc:8d:
33:ae:07:80:7d:79:f5:f9:b6:8d:6a:7b:5e:e5:3b:
76:85:28:2a:50:56:ae:44:ab:b4:c6:fc:f1:96:2c:
d5:a5:33:35:cf:0a:9c:55:46:04:63:72:6b:ef:5e:
9a:36:8d:d0:85:1b:f9:4a:b8:62:a4:1f:0e:50:17:
88:ff:be:58:be:a8:e4:f4:01:49:60:d2:57:0f:a5:
84:ee:96:d9:00:03:1b:a4:5e:ed:65:f6:66:d6:45:
2d:45:1f:8b:d6:a4:31:5c:6f:30:52:ed:27:b9:93:
3e:2d:e7:bb:f0:71:d5:03:e3:0f:f2:03:4d:0e:ac:
97:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7A:70:D9:95:44:98:17:F8:1C:F8:F3:67:84:8C:CB:79:F1:84:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/594908E8A25B11EFB0086A74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.114.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:00:69:bf:b7:a7:23:0c:3f:9c:a1:ea:47:f5:c5:78:15:7e:
75:8c:0f:3d:46:22:de:5a:86:81:91:d8:15:f3:90:82:01:65:
d3:2a:4c:85:cc:3d:11:ed:df:65:59:5c:04:27:4f:f3:b0:18:
93:22:ba:de:ea:1d:fa:3b:24:3b:00:42:a4:c5:f8:6f:12:8b:
2e:0d:c0:5f:48:13:29:8b:62:0b:f9:77:76:e8:cb:b1:12:42:
38:46:bf:bf:75:ba:3c:f3:40:75:90:03:eb:92:f7:e9:73:3e:
81:08:1c:ca:31:09:1e:d8:b0:73:07:e2:b8:f5:e9:a8:10:49:
ff:0c:dc:89:6b:58:35:f3:2b:fd:8f:e3:24:83:8b:0c:e0:d9:
9e:c0:ec:a6:0e:c3:a8:bb:0e:53:9e:f0:38:90:71:37:a9:5c:
43:7e:fa:51:7e:05:04:af:ee:3e:7f:2a:a9:2b:44:da:52:4a:
68:cc:40:3e:5c:2b:2c:dc:ff:00:ea:27:2a:18:42:a3:bd:02:
47:ea:d1:72:a2:63:11:fc:6f:ec:b7:de:59:cc:bf:3f:06:b1:
a5:2c:b4:9b:a2:48:cb:c2:e7:a5:96:4e:8d:36:10:f7:37:3c:
41:e7:6d:81:8a:f5:0a:ec:35:52:ff:72:d6:8b:88:4f:aa:1b:
7a:7b:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:31 2024 by rpki-client on console-ams.rpki-client.org