Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B7F04D0A72411EFB9018C8F762E951A.roa
File: 7B7F04D0A72411EFB9018C8F762E951A.roa (raw, json)
Hash identifier: uABgMcnty/LojKUP7fDN4yGzrwPOLwXFchbSOvDL2eI=
Subject key identifier: F0:C8:2D:5C:37:F6:5A:18:01:36:EC:20:52:3C:56:0F:C6:9D:95:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B7F04D0A72411EFB9018C8F762E951A.roa
Signing time: Wed 20 Nov 2024 09:47:40 +0000
ROA not before: Wed 20 Nov 2024 09:47:37 +0000
ROA not after: Mon 02 Dec 2024 09:47:37 +0000
asID: 5065
IP address blocks: 45.204.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54737 (0xd5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 09:47:37 2024 GMT
Not After : Dec 2 09:47:37 2024 GMT
Subject: CN=673db03c-f8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:9c:fd:86:fa:f7:c0:2d:1d:d8:d6:c0:e9:
cf:82:c8:22:86:77:4e:97:1a:d4:39:24:9e:47:cc:
86:33:c7:2f:e5:92:7d:c3:d0:29:a0:48:78:a9:ea:
b9:8e:76:6f:81:6f:ff:17:fd:58:36:7d:ad:57:6c:
af:79:53:6f:c8:b9:28:49:79:fb:30:51:df:34:6a:
e4:e5:38:6a:ef:e4:79:c9:e9:47:69:d6:18:ca:6a:
41:be:64:c2:8f:10:e0:e1:b6:ce:90:bb:ed:d0:3a:
8b:e6:f2:9c:80:9f:d4:80:5d:40:22:40:6d:50:ce:
b0:93:f5:17:cd:0c:38:5c:b4:85:ab:dd:ea:86:70:
73:d0:a7:a3:b2:62:1a:51:06:38:ab:5c:fe:42:42:
72:ed:e0:6e:d6:94:ac:4a:0a:f3:c9:21:59:f8:5c:
25:bf:8c:b4:62:e6:5f:6b:65:96:09:6d:98:7b:46:
00:31:a3:01:ce:96:f1:45:0a:5b:34:3c:9b:10:46:
59:c4:22:fe:78:2a:f8:5e:f2:fd:92:cf:8d:24:b4:
73:f5:45:30:7f:05:37:b8:98:b7:16:fa:93:70:e9:
37:57:cd:f7:de:1b:e9:6a:fb:fb:f5:4d:bc:03:78:
82:41:db:5b:22:9a:41:f5:66:ac:87:8b:b2:c6:15:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:2D:5C:37:F6:5A:18:01:36:EC:20:52:3C:56:0F:C6:9D:95:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B7F04D0A72411EFB9018C8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.76.0/24
Signature Algorithm: sha256WithRSAEncryption
40:18:3c:a3:51:28:15:80:8e:70:bf:71:02:e8:44:ad:26:ab:
1a:3d:66:42:fc:ce:36:f4:31:c6:0e:f8:cd:31:38:f6:2c:04:
46:a5:a1:11:1e:6b:01:23:47:d2:08:06:dd:9b:bd:ac:d7:3f:
50:66:bb:d4:3f:82:6a:29:64:69:53:af:0f:9b:c6:4d:94:d9:
db:dd:6f:3b:49:aa:24:a4:fe:5b:0a:82:d6:1e:9f:8e:82:c6:
8f:10:f9:6d:85:32:29:42:5f:5c:ca:2e:73:ba:53:05:82:5d:
98:61:94:88:3e:c6:f1:98:06:58:58:f7:c7:a2:4c:42:27:4a:
00:8c:54:31:96:b7:ba:86:aa:02:c5:7c:03:ce:c2:3e:b7:63:
3d:f6:f0:a0:c4:63:9b:22:b3:28:cf:69:94:6a:20:89:49:92:
49:2a:52:5e:24:ec:d1:c7:04:e3:d6:c8:f3:b0:e6:c2:fc:33:
f0:34:60:2f:2a:02:aa:e8:bf:11:91:c4:b5:d2:3c:b3:8e:a6:
9b:28:f5:c7:e3:48:ef:01:71:f6:cc:e0:99:5e:d9:c6:bc:50:
8a:2a:2c:99:32:24:b5:be:63:07:f1:9b:71:c8:44:9d:ef:ca:
e0:10:38:e7:0b:57:b0:24:d2:f4:d3:be:22:2c:c0:d6:ec:91:
f9:a3:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:36 2024 by rpki-client on console-fra.rpki-client.org