Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AC9E05AA73411EFA8C5F971762E951A.roa
File: 6AC9E05AA73411EFA8C5F971762E951A.roa (raw, json)
Hash identifier: S0mqgPryjdJiXxmN38E0w1QiyiBmfbEcIBsb500aoEk=
Subject key identifier: 8B:FC:5D:82:0D:15:E9:EA:3D:FB:7E:10:9F:65:79:7C:38:E1:13:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AC9E05AA73411EFA8C5F971762E951A.roa
Signing time: Wed 20 Nov 2024 11:41:44 +0000
ROA not before: Wed 20 Nov 2024 11:41:41 +0000
ROA not after: Mon 02 Dec 2024 11:41:41 +0000
asID: 39600
IP address blocks: 45.204.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54755 (0xd5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 11:41:41 2024 GMT
Not After : Dec 2 11:41:41 2024 GMT
Subject: CN=673dcaf8-5192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:5a:56:dc:e4:d6:9b:31:02:56:fb:91:fe:
8b:3c:83:b6:a4:fe:04:51:f7:cf:fc:ea:8a:a4:95:
8d:07:65:2f:97:b5:b4:57:28:60:9c:ba:4c:a5:9d:
cd:92:38:e9:d6:c4:92:94:49:c1:61:b4:91:49:df:
3e:4d:dd:a0:8d:29:35:6e:4f:90:a2:35:9e:91:b9:
f1:59:55:ce:a0:b1:37:9e:80:5e:46:c3:83:49:29:
69:c6:a1:9a:63:8b:1d:6f:5e:0f:fe:97:f4:c4:a2:
7a:21:a8:0b:24:0b:01:46:18:ec:ff:6c:cc:bb:2f:
92:f0:4c:6c:96:6c:29:f8:db:b2:34:66:f9:b2:1b:
68:dc:a3:4d:fe:b5:c0:df:2a:f6:6a:46:f4:68:48:
5b:c2:0e:ca:7d:56:0e:bb:6b:ae:44:0e:e4:8a:74:
b4:db:c1:b3:52:a5:3a:1a:04:81:dd:6a:2d:19:b8:
df:4d:d1:8e:f7:78:4e:a3:7f:49:75:0d:12:f1:fa:
c8:88:64:bb:5b:9a:12:0e:60:e7:1d:81:58:75:39:
c1:62:59:e3:73:90:35:89:73:8a:98:2a:f0:c7:a5:
c5:a5:76:d0:aa:1e:22:ba:49:e4:46:b0:f0:7f:d0:
ff:c4:db:e9:9f:73:7e:be:87:f3:5c:1f:6f:cd:29:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FC:5D:82:0D:15:E9:EA:3D:FB:7E:10:9F:65:79:7C:38:E1:13:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AC9E05AA73411EFA8C5F971762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.24.0/24
Signature Algorithm: sha256WithRSAEncryption
97:38:93:87:7f:37:55:dd:1b:f0:14:57:44:94:da:3b:01:d4:
46:4b:9b:9f:0d:2f:38:cc:d7:12:49:29:9e:f6:2e:f0:12:68:
31:71:2e:87:46:1c:1f:a9:ee:36:39:a9:6a:0a:05:b5:23:13:
a5:98:58:60:83:df:fd:74:1d:63:c9:09:be:d5:1f:15:52:6d:
3e:e2:46:fb:67:00:9e:ee:54:38:d8:be:39:ac:02:88:7c:e4:
d7:a1:71:e1:37:45:7a:2e:8a:d2:3e:34:41:ed:fc:f0:6a:c4:
6a:82:af:46:44:c0:c9:a4:97:99:27:c5:3e:b5:72:29:c7:5e:
fd:30:f1:ee:2c:66:39:12:85:23:a5:72:b5:7c:cf:cf:b8:7f:
93:fd:f0:e9:ce:48:14:ab:77:be:ec:01:67:04:ff:35:2b:5d:
f2:92:9a:9a:c0:73:e5:94:42:fb:f8:4d:d9:fc:88:68:f2:0e:
00:36:21:25:9b:f5:75:18:8e:cc:73:5e:67:e3:1c:72:10:f7:
44:75:29:f0:8c:9f:6a:07:18:b6:26:5d:df:36:16:30:b8:00:
45:5f:90:a9:0b:b0:60:d2:d9:d4:dc:af:f9:53:1e:55:e0:80:
79:f2:4f:4e:24:59:a7:4d:f7:da:db:d9:df:3f:30:8c:34:bc:
fb:34:f2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:34 2024 by rpki-client on console-ams.rpki-client.org