Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E771B8A74F11EF9C6DAE9A762E951A.roa
File: 65E771B8A74F11EF9C6DAE9A762E951A.roa (raw, json)
Hash identifier: dW8r5RvOagDbhu6O5ffMJ7nAOvKbACMX9wmmcLAdMTc=
Subject key identifier: 48:E3:7F:0C:43:D9:23:DD:D4:A3:8E:63:C2:D8:B0:5B:1C:7A:40:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E771B8A74F11EF9C6DAE9A762E951A.roa
Signing time: Wed 20 Nov 2024 14:54:53 +0000
ROA not before: Wed 20 Nov 2024 14:54:49 +0000
ROA not after: Sat 30 Nov 2024 14:54:49 +0000
asID: 202656
IP address blocks: 45.199.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55004 (0xd6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:54:49 2024 GMT
Not After : Nov 30 14:54:49 2024 GMT
Subject: CN=673df83c-57ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:6d:8f:df:2f:b3:04:3b:21:f2:b2:2a:4b:
90:eb:6b:19:1e:f6:ae:d3:34:b3:79:b9:4d:c3:e1:
03:79:1d:19:e9:67:aa:c9:5e:2c:ea:d3:20:94:30:
d6:32:28:7d:42:bf:0e:30:71:a8:07:26:8d:d1:da:
f1:fb:cc:30:82:a8:1e:32:f9:9b:dc:34:e7:38:cf:
3e:a6:72:8a:31:a0:f8:45:9f:9b:0f:35:02:a4:d3:
75:27:bd:5f:56:45:ed:ee:5e:f1:57:3c:16:c4:70:
40:40:bb:04:18:81:18:6a:c4:99:a2:3a:53:ae:26:
49:5d:ba:19:cb:ad:ed:6c:5b:c9:eb:78:4a:d1:fd:
8c:32:b5:1d:35:b9:e7:00:69:53:b7:0f:68:f0:81:
09:32:c1:2d:79:40:c8:62:c0:3f:37:32:bb:14:87:
f2:52:a8:4e:a1:51:e6:87:78:ec:5d:fa:5f:ea:09:
e6:16:c8:44:b8:2c:d5:d3:5e:8a:db:68:bb:8d:3e:
33:39:a4:a4:c0:18:99:9d:02:bd:e6:74:84:7e:4f:
15:ba:2f:bf:b6:c4:3d:51:58:93:7d:bf:00:4c:d5:
b8:5d:10:51:47:c7:f1:3d:d1:0e:81:1c:57:ca:ed:
de:cd:d4:b6:da:93:bd:75:c0:3a:b9:58:3f:d3:16:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E3:7F:0C:43:D9:23:DD:D4:A3:8E:63:C2:D8:B0:5B:1C:7A:40:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65E771B8A74F11EF9C6DAE9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.247.0/24
Signature Algorithm: sha256WithRSAEncryption
83:15:97:b6:4b:6f:32:39:57:f4:c5:ff:cf:c9:cc:5a:61:b1:
7a:af:cd:23:6c:84:16:e9:a0:b1:4d:76:47:8d:c6:53:e5:11:
24:8c:9f:23:20:5c:cd:e8:b4:33:01:e3:43:63:8a:97:34:12:
d5:a9:73:99:14:57:a6:11:f7:7b:a3:c1:90:3a:76:1e:ce:8b:
85:f9:21:57:7d:08:b5:a9:ec:4f:c6:d2:5d:7a:58:b9:c5:4c:
b7:1b:e3:b7:b4:09:c6:9b:17:ef:87:cd:bf:21:7e:1a:ea:8b:
31:98:78:e5:8b:52:da:c2:3d:28:84:9e:dc:70:1b:78:8e:3a:
36:5c:1c:42:94:63:a3:89:42:a6:ea:bb:54:d2:ce:8c:60:3a:
47:bb:17:cd:9e:ae:88:72:ad:c3:69:ab:0a:56:bf:f8:e3:b0:
2f:c7:65:1f:49:0f:8a:03:f7:77:d4:5a:41:63:4c:1c:64:3d:
da:a8:82:79:54:b5:de:11:87:86:c8:46:ad:72:c0:4b:40:a7:
b8:bd:c6:19:66:71:af:f1:47:74:2e:54:60:9d:40:0a:17:91:
b8:3c:f5:01:33:fa:0a:8f:6d:fa:d0:26:d4:db:28:7a:38:b2:
f2:e4:d9:c3:5a:a2:a8:d5:28:48:3d:0d:e3:44:43:c1:d2:ac:
24:af:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:33 2024 by rpki-client on console-ams.rpki-client.org