Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/894EEED4A4C911EFA8AF4F49762E951A.roa
File: 894EEED4A4C911EFA8AF4F49762E951A.roa (raw, json)
Hash identifier: QgWwRljqBid+cc4bARW/xPbs7h1ehRNmlzHoM510d/0=
Subject key identifier: 12:99:A5:5B:B4:25:9F:50:2F:E1:D8:2E:14:5A:DC:F7:E2:5B:2E:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D4B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/894EEED4A4C911EFA8AF4F49762E951A.roa
Signing time: Sun 17 Nov 2024 09:51:37 +0000
ROA not before: Sun 17 Nov 2024 09:51:33 +0000
ROA not after: Mon 25 Nov 2024 09:51:33 +0000
asID: 9009
IP address blocks: 45.192.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54449 (0xd4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:51:33 2024 GMT
Not After : Nov 25 09:51:33 2024 GMT
Subject: CN=6739bca9-9bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5b:0e:2f:b7:b5:39:94:9d:f5:f6:80:c6:99:
7a:67:3a:b8:d7:e0:f7:e2:a1:88:be:c6:bf:4f:a8:
bc:cd:ae:14:86:1e:44:37:83:2b:0c:5c:c2:82:af:
68:82:9b:1a:8b:64:c8:98:04:7e:5d:d7:f5:19:81:
74:e1:11:00:ba:2b:72:7c:cf:79:94:a5:c6:0c:9b:
4c:5c:e1:c1:bf:14:81:3d:91:95:03:cb:42:34:91:
1f:7d:d2:2e:84:e7:d7:80:c8:00:53:a4:cc:40:c8:
11:36:39:df:75:1c:d1:d8:6e:a6:e6:b5:ce:10:52:
f7:f7:45:2e:56:37:c9:b6:b6:48:21:6b:de:40:d2:
fd:8f:09:d9:76:78:92:a9:29:01:fa:b3:ea:59:81:
3f:7a:7d:da:df:5b:75:fb:2c:3a:6e:50:3c:4c:b5:
e6:e0:a2:7a:17:85:d3:b3:82:d6:8c:e3:85:87:b5:
92:ba:34:8d:e5:c6:91:bd:f4:a8:c6:92:25:ba:77:
f1:c7:d2:26:36:ff:94:6d:f3:3f:c6:2d:42:63:f0:
90:66:b1:41:da:10:59:ad:4b:50:81:9a:57:0f:4b:
61:a0:7d:26:2d:17:31:64:3a:aa:e0:bb:cf:b5:a6:
fb:f2:89:49:a2:e3:94:b3:64:00:f8:12:62:90:30:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:99:A5:5B:B4:25:9F:50:2F:E1:D8:2E:14:5A:DC:F7:E2:5B:2E:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/894EEED4A4C911EFA8AF4F49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:9a:0d:ea:6c:1e:88:33:02:6f:9d:17:21:0e:07:94:2e:ac:
57:6d:36:54:e9:f5:3b:1f:a2:a3:65:0a:62:40:d8:44:3d:e2:
7b:a4:7e:2a:92:54:2d:e8:4d:6c:1d:49:c8:42:25:89:e0:47:
59:6e:62:1f:2a:5c:7b:84:cc:7f:78:e0:4d:ab:91:49:02:1c:
6a:e5:6e:43:6b:8b:e2:6b:26:30:50:6d:77:23:2f:a3:2e:c1:
56:82:f5:68:ce:36:3a:f4:04:78:ec:8c:36:1f:b8:d4:34:37:
d6:0a:98:af:ef:d8:5e:aa:f4:94:48:df:73:4c:32:c2:a7:41:
d3:28:21:3d:e4:a3:28:69:c2:1d:29:53:1e:d2:ca:b4:5d:0e:
f1:19:37:78:4c:26:7d:2e:9e:9e:3c:a8:e6:be:6c:7c:c9:4d:
15:1c:e5:8d:ef:0c:48:54:dd:88:e8:8c:53:e7:b4:45:29:18:
71:0e:9a:cc:2b:92:82:fb:f9:e4:42:4e:20:ef:3b:ae:2b:10:
f3:57:d8:23:e3:01:c7:97:76:c4:14:fa:51:c9:cb:96:71:0f:
4a:8f:9f:18:1c:c5:c5:f2:26:8e:25:9d:d1:5f:8d:6d:0a:19:
df:82:e1:a9:37:d6:f6:23:e8:be:c5:cb:54:c1:a4:c8:ce:27:
be:ca:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org