Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A9BE7ACA32C11EFBDA0D4A6762E951A.roa
File: 5A9BE7ACA32C11EFBDA0D4A6762E951A.roa (raw, json)
Hash identifier: lK3UbA1MWXYLleiFn3YiC+RKwQ7/mEq/sw8lMggD4q8=
Subject key identifier: C6:9C:8B:E8:CD:C6:3E:9C:A4:8C:6F:05:DA:98:C6:55:86:ED:4C:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A9BE7ACA32C11EFBDA0D4A6762E951A.roa
Signing time: Fri 15 Nov 2024 08:33:57 +0000
ROA not before: Fri 15 Nov 2024 08:33:53 +0000
ROA not after: Tue 17 Dec 2024 08:33:53 +0000
asID: 23470
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53977 (0xd2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 15 08:33:53 2024 GMT
Not After : Dec 17 08:33:53 2024 GMT
Subject: CN=67370774-27bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:71:e9:52:ce:2f:ed:d0:22:bf:72:e2:6f:
1c:8d:aa:27:fc:01:2d:98:6a:ce:15:09:bb:57:a0:
75:cf:52:6c:c6:d5:06:ca:bf:56:ee:3b:ab:8e:05:
8d:37:4a:be:8f:46:3f:34:35:87:b2:7e:31:e5:57:
a3:8a:6d:e5:c2:b4:4e:3c:4b:5c:cf:db:16:f9:b7:
8e:ba:92:f9:79:e3:bd:26:b2:e3:16:c8:7b:c4:38:
09:10:fe:df:91:b1:ee:d0:27:ee:1e:80:98:ad:3d:
33:1f:4c:00:f5:81:68:db:d8:b5:75:5b:52:8d:91:
df:5b:bb:45:bc:3f:1a:ba:42:4c:9b:7f:e1:be:92:
e7:dc:b5:25:c9:97:a1:01:fc:58:f5:3f:8b:fd:aa:
67:b3:07:8a:8a:31:66:bd:9d:dd:bc:96:35:d5:14:
e9:9f:02:cf:a8:b6:8b:1d:58:da:22:28:a0:1b:ea:
ce:2f:b9:b0:20:41:e0:94:f1:a2:57:e8:ca:49:57:
1b:a1:ce:89:e3:e1:de:ef:d4:81:69:67:ae:b0:93:
7f:c6:21:ef:f3:af:a9:a6:d1:89:1b:db:e7:34:e1:
c1:b3:c8:80:f2:92:d8:73:e9:81:71:63:26:34:9f:
37:0c:16:82:ea:ce:01:a3:d5:b0:bf:01:75:c9:b2:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9C:8B:E8:CD:C6:3E:9C:A4:8C:6F:05:DA:98:C6:55:86:ED:4C:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A9BE7ACA32C11EFBDA0D4A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
25:97:23:cf:e2:ee:31:20:45:12:6a:95:6e:3b:2c:cf:f3:3a:
e2:e6:b3:01:38:b9:36:bc:80:4d:56:81:49:5b:5d:0b:55:12:
11:61:74:ba:8c:6c:85:23:4a:ba:f4:7a:16:6f:e8:17:a1:8e:
4b:aa:15:55:46:56:0b:1e:0f:7f:20:11:51:e6:27:b4:c4:ba:
1a:1e:81:01:19:41:49:f8:7a:be:79:35:b3:1a:96:6e:e3:5e:
f4:3f:60:12:c7:50:ec:15:7a:e2:87:63:1a:70:79:0c:3a:f9:
f0:8e:29:99:e0:83:1b:d7:2f:c0:29:ce:eb:62:0b:43:e9:23:
5a:9a:19:8b:f5:2a:89:a2:b5:31:f0:fb:c0:7b:c7:fe:a1:c9:
fa:80:0f:89:63:d2:5d:36:d1:b3:af:09:10:0b:19:6e:7d:4a:
2b:14:52:79:ba:52:35:50:eb:01:47:dd:1b:17:f9:c4:c8:af:
d9:03:f0:a2:7a:3c:71:ee:13:c1:75:a8:28:16:a6:84:18:08:
ff:b3:d7:a4:88:8e:7d:f8:ac:bb:52:0d:28:24:9d:28:3e:1f:
53:fb:30:52:28:fa:07:65:42:20:8b:08:f4:26:53:19:89:37:
c7:ad:8d:0e:f3:cc:b1:8a:87:4a:ac:99:c9:ef:4d:e6:5a:f3:
7b:b1:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:30 2024 by rpki-client on console-fra.rpki-client.org