Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/753AB8F696AF11EF941BA7BE762E951A.roa
File: 753AB8F696AF11EF941BA7BE762E951A.roa (raw, json)
Hash identifier: nuSqH+kiKgOyCp1CniDV4PbefRWUYIFOav/82eW/H9c=
Subject key identifier: 50:7D:AB:A9:89:08:0B:2B:66:9E:EE:42:02:58:7A:49:4D:47:84:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CA1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/753AB8F696AF11EF941BA7BE762E951A.roa
Signing time: Wed 30 Oct 2024 11:09:40 +0000
ROA not before: Wed 30 Oct 2024 11:09:37 +0000
ROA not after: Sat 23 Nov 2024 11:09:37 +0000
asID: 54467
IP address blocks: 45.204.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51739 (0xca1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 11:09:37 2024 GMT
Not After : Nov 23 11:09:37 2024 GMT
Subject: CN=672213f4-e265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e7:3a:19:ef:bb:11:80:1f:33:54:31:e0:60:
79:3c:b6:a0:a7:ed:9b:d5:cd:b1:38:11:27:a6:be:
59:c9:6c:b9:a7:d2:20:f1:07:0f:86:80:fa:57:2f:
00:1c:e3:72:23:de:00:85:91:78:77:3a:f8:b5:7c:
a3:83:3a:ae:b3:8f:ee:e5:94:f5:ee:7c:ac:7f:08:
40:5d:e1:7b:0e:5a:f5:5b:f4:3f:10:90:95:02:d1:
b2:ff:69:bb:bb:a5:49:3c:0b:37:0d:75:a4:13:e8:
b7:d4:0a:25:42:65:38:79:78:b3:d3:cf:be:cc:b6:
ea:5d:eb:66:6c:3d:90:fd:60:8c:32:88:29:b7:5d:
8b:e2:0e:2e:29:24:0f:54:ee:38:1b:67:fa:20:e3:
f4:6d:e8:aa:11:d9:e8:f5:4c:e8:af:d4:93:42:9b:
a4:e0:0b:0c:b9:ab:ea:43:cd:e3:41:4a:a8:e1:29:
b3:17:04:e5:42:10:84:04:2e:a0:e7:37:dc:4b:08:
2a:d6:fd:27:ec:8b:17:d0:81:2e:a8:90:b7:f5:33:
61:0a:af:c8:98:98:b2:cc:8d:52:25:e6:66:0f:9b:
c8:c3:17:d1:2b:57:97:53:c6:a6:05:b0:cd:68:89:
2f:ae:5b:82:5c:1a:99:c7:f4:1b:ad:00:16:b3:b3:
9e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7D:AB:A9:89:08:0B:2B:66:9E:EE:42:02:58:7A:49:4D:47:84:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/753AB8F696AF11EF941BA7BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:16:45:f1:3a:49:ad:e4:67:6b:4f:25:69:92:13:c5:42:9e:
e3:21:6b:67:03:55:fe:81:39:be:48:23:48:69:cb:c1:f0:79:
69:aa:c4:ab:0c:2e:42:da:68:ab:7f:93:14:24:03:1b:f6:0d:
01:29:81:a4:1d:9f:3a:60:c0:63:aa:39:07:88:13:2d:7b:98:
00:26:c8:60:bd:e1:22:44:f8:af:07:1c:97:47:6a:b6:52:cf:
9f:ae:2f:bf:64:21:7b:2c:68:e6:23:a1:9d:b8:27:a4:63:a7:
d1:51:a3:91:2d:aa:b5:9e:26:1a:fa:06:95:ec:8a:8e:7b:98:
37:de:66:01:f0:e4:ce:57:42:db:e9:68:42:c5:f8:d0:e9:b0:
b4:5a:71:33:22:21:ff:aa:53:78:49:53:3e:4e:c6:bd:8d:fa:
6e:ad:d6:a5:d7:b3:c4:56:eb:d0:9e:17:c2:26:16:3b:60:f0:
61:b1:40:44:ce:e0:92:03:2c:0d:e8:1e:b7:f5:48:f0:a6:a9:
74:07:ec:04:fe:b8:e3:58:b2:b8:43:f6:ad:c6:a3:d2:4c:c9:
72:dd:be:67:9d:16:62:1e:b4:db:c1:64:62:88:62:b7:15:e9:
96:82:f1:f8:21:6e:fc:05:e2:6e:85:80:22:93:3d:4e:ec:c2:
53:02:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:35 2024 by rpki-client on console-fra.rpki-client.org