Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61ED73F4A74611EF9ED41F64762E951A.roa
File: 61ED73F4A74611EF9ED41F64762E951A.roa (raw, json)
Hash identifier: NvY8hIIZ2VfrY4q9Zy/hYZ6pZyARyy7YzSsnGX+7x+Y=
Subject key identifier: 36:99:61:A0:70:A8:E0:BB:98:21:A0:54:E1:2E:56:C9:07:3A:93:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D675
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61ED73F4A74611EF9ED41F64762E951A.roa
Signing time: Wed 20 Nov 2024 13:50:20 +0000
ROA not before: Wed 20 Nov 2024 13:50:17 +0000
ROA not after: Sat 30 Nov 2024 13:50:17 +0000
asID: 44559
IP address blocks: 45.199.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54901 (0xd675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 13:50:17 2024 GMT
Not After : Nov 30 13:50:17 2024 GMT
Subject: CN=673de91c-85e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:b1:de:f3:fc:8c:96:8f:ed:60:24:df:27:
40:88:95:cc:7f:2f:a1:34:9b:76:c3:dd:a5:d7:e5:
c7:d2:35:5c:7f:5d:88:4b:69:c3:5c:8f:fc:b5:36:
21:55:58:6d:76:8f:1c:51:4e:08:7e:6c:13:8e:09:
c2:98:c0:61:28:f7:25:94:c0:db:6a:15:97:2e:19:
f4:4f:13:92:2d:e2:d0:19:a7:b5:3b:3e:ae:07:01:
6f:2c:4f:5d:1c:30:bc:2e:87:30:64:e8:d8:8b:c3:
5c:48:8d:27:e6:be:3d:85:45:66:4a:7a:c1:f5:68:
8a:8f:87:bb:29:ed:60:e1:08:f9:f0:e4:cb:83:32:
6d:37:70:08:66:a1:0e:5b:65:64:3c:0f:bc:7e:a4:
a4:23:44:c5:0a:9f:77:83:3b:f2:a9:5d:40:48:e3:
a7:9a:c6:1e:1a:93:00:26:df:64:41:b4:49:14:c8:
cc:9e:bf:87:2f:a4:d3:08:70:f1:81:41:4e:eb:30:
5d:89:ec:ce:4f:4a:f0:ce:00:42:fa:30:2a:2a:67:
99:10:7f:c1:1b:f0:fb:ab:d0:a5:c7:d9:c2:8a:51:
3f:ac:df:da:bb:1e:31:0f:0e:bf:c9:3d:66:7f:46:
a0:a7:7a:7c:21:00:9f:83:c4:c4:8b:39:58:cd:1a:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:61:A0:70:A8:E0:BB:98:21:A0:54:E1:2E:56:C9:07:3A:93:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61ED73F4A74611EF9ED41F64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.216.0/23
Signature Algorithm: sha256WithRSAEncryption
05:5c:db:6f:42:4d:c2:75:2e:10:13:76:fb:b2:6f:e0:37:bd:
50:35:5e:be:01:83:ab:1f:51:0f:d2:af:ad:1b:6a:20:c8:a0:
df:1c:54:98:a8:77:c2:95:dd:ab:21:5e:58:e8:bc:14:dd:43:
3b:d8:be:93:78:58:63:b9:93:bb:11:b7:12:6d:5b:1b:26:d6:
43:0a:ed:4d:96:fa:05:f1:3d:1a:69:e4:01:f4:bc:79:e1:ec:
af:2f:21:7b:75:b4:b2:ad:1d:16:8b:2b:60:b1:c9:db:86:f7:
ce:be:e3:89:f8:fd:e1:11:53:aa:26:df:29:fb:7c:63:07:97:
8b:59:26:cd:50:73:7c:92:18:80:ce:c4:20:53:d5:be:33:fe:
fd:c9:70:4f:02:be:fd:8e:9c:10:39:4a:7f:94:85:b5:4a:e2:
0a:62:b4:9e:eb:a2:51:af:6c:83:32:32:b8:e7:95:d4:de:b5:
d9:93:37:ce:fb:3a:64:9c:46:82:d0:1b:1d:0e:77:42:50:76:
72:bc:c9:bd:72:16:af:c4:01:6e:14:73:f6:7e:73:e2:5b:d8:
dd:23:db:df:42:9a:46:06:a4:cc:37:11:2f:0a:63:63:f2:ae:
3b:3d:9f:3f:87:8e:f9:26:8e:93:a8:d3:b9:40:3d:ce:da:30:
dc:26:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:32 2024 by rpki-client on console-ams.rpki-client.org