Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8983C394982F11EFA534A5B6762E951A.roa
File: 8983C394982F11EFA534A5B6762E951A.roa (raw, json)
Hash identifier: bKgYbSBmZcQ2TLIAXEkq8dSaGQa6pW/FUvMHSF9116s=
Subject key identifier: 56:06:D9:3E:92:FD:CE:47:90:A5:35:F5:8D:C1:F5:17:A6:2B:34:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8983C394982F11EFA534A5B6762E951A.roa
Signing time: Fri 01 Nov 2024 08:59:01 +0000
ROA not before: Fri 01 Nov 2024 08:58:57 +0000
ROA not after: Wed 04 Dec 2024 08:58:57 +0000
asID: 42831
IP address blocks: 45.198.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52063 (0xcb5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 08:58:57 2024 GMT
Not After : Dec 4 08:58:57 2024 GMT
Subject: CN=67249855-1f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:d6:09:4a:66:6d:3f:f3:8b:0a:76:1d:a3:
17:7a:fb:94:b3:e5:be:68:cd:d4:51:fe:d9:a9:ce:
c4:11:af:f8:26:76:39:99:0a:b8:d6:12:24:93:38:
16:ec:6e:36:7f:17:3a:6c:43:06:89:8d:97:7c:60:
86:06:06:8f:7c:62:6c:36:b5:f9:54:52:f6:95:38:
94:6f:1b:5b:fd:98:33:dd:7c:37:85:e7:15:60:b7:
8c:02:ab:0f:0a:0f:22:f9:d5:d3:e3:1d:ed:ec:e6:
55:0e:00:e2:23:7b:15:cf:ec:99:8f:43:07:8f:90:
d1:95:71:a3:b8:81:38:da:d5:3c:c2:39:08:8a:bf:
39:c7:61:8f:6b:b1:d8:0c:33:56:40:1d:5e:38:e5:
ac:14:c6:6a:e3:69:25:3c:a5:66:44:43:6f:71:6a:
48:96:7e:24:7c:4f:68:89:b8:2d:71:95:75:cf:67:
fe:e4:73:a4:74:dc:21:6b:69:0f:83:76:59:f0:6d:
33:c3:6a:e6:99:b2:87:f1:c2:60:93:7e:c7:62:63:
37:40:64:17:92:6b:0e:f3:e8:7f:e8:2e:51:4b:e9:
6a:96:63:5b:6f:09:bf:53:ba:f5:95:50:b9:f8:49:
2d:3a:fd:7a:6e:1e:c1:f9:a4:32:46:4d:4c:74:85:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:06:D9:3E:92:FD:CE:47:90:A5:35:F5:8D:C1:F5:17:A6:2B:34:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8983C394982F11EFA534A5B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.128.0/19
Signature Algorithm: sha256WithRSAEncryption
74:d8:09:04:f6:5f:bc:f6:ab:be:df:65:f0:a0:6a:1e:16:0a:
0d:d3:a2:f3:24:6a:78:ea:6a:35:99:45:f2:8f:4a:23:99:a1:
f5:aa:b9:51:34:1e:df:2e:f5:1b:9d:68:d1:f1:04:b7:ce:3b:
45:53:7d:a0:a9:2b:11:a7:26:a1:1b:b3:50:1e:cb:a5:4b:cd:
7e:36:44:f8:1b:1e:59:ba:15:a0:11:da:81:62:2c:ba:e5:01:
60:88:f8:02:64:dc:85:3e:e8:4f:e0:80:13:8d:c4:73:17:90:
06:c5:d4:69:ec:7e:f5:1e:3b:68:7d:c1:25:a7:f8:33:2b:ab:
73:1f:5a:84:af:94:ec:25:31:62:ce:34:82:b5:21:8c:22:8f:
23:ca:67:cf:04:98:d4:68:21:7d:d6:8b:5e:d0:68:05:77:88:
8b:a1:f6:4f:b5:c2:98:1f:89:24:0e:d7:bf:05:d1:94:b7:9a:
fa:e8:61:1b:39:28:07:89:c3:ef:9e:d8:3a:27:eb:de:27:7d:
16:7f:67:8a:86:62:76:ab:39:31:b2:80:b4:0a:ac:9a:51:ce:
ca:19:45:f6:c0:46:1b:43:7e:99:b2:2d:46:8c:a5:a6:17:86:
bf:50:bd:c7:1e:ab:94:d1:29:c2:0b:a5:ad:37:e3:ff:3c:35:
a7:fc:d3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:39 2024 by rpki-client on console-ams.rpki-client.org