Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A36E6B2A74E11EFA3304596762E951A.roa
File: 8A36E6B2A74E11EFA3304596762E951A.roa (raw, json)
Hash identifier: VjYGzzzq+3IHEMqa24WmBeprkMGkjKKu/9j1cyWHMFo=
Subject key identifier: 47:90:B9:D8:76:F8:AA:E4:F0:54:55:39:1D:74:F4:34:1C:12:E5:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A36E6B2A74E11EFA3304596762E951A.roa
Signing time: Wed 20 Nov 2024 14:48:44 +0000
ROA not before: Wed 20 Nov 2024 14:48:40 +0000
ROA not after: Sat 30 Nov 2024 14:48:40 +0000
asID: 202656
IP address blocks: 45.199.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54994 (0xd6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:48:40 2024 GMT
Not After : Nov 30 14:48:40 2024 GMT
Subject: CN=673df6cc-0a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:47:d5:09:27:ca:5f:59:16:13:83:f2:b4:
c5:b7:23:77:0a:ff:e7:52:e3:8e:de:59:e6:1c:83:
e9:8f:89:c2:4b:2f:44:f7:ae:ea:d2:bd:3d:f7:58:
ab:c0:c7:f9:e0:2c:45:a8:0b:16:ed:6c:03:5f:78:
3d:9e:f0:5b:62:9e:86:41:af:0b:03:26:2e:93:53:
9d:fb:84:cb:ba:aa:08:f6:83:59:82:61:8d:39:79:
00:20:42:ad:b5:60:e8:d8:8e:03:b2:cc:dd:55:8d:
69:1c:2f:f9:50:a9:bc:fa:32:ff:02:a8:b8:22:16:
f2:d3:7e:ce:a3:ca:9b:84:60:1e:74:16:03:e5:2d:
77:7e:82:a5:72:5c:94:12:31:0f:3a:81:14:f4:ea:
b5:25:34:2f:2b:bd:e3:cf:cd:60:e5:65:9f:64:cf:
07:74:c8:06:45:4d:a6:15:77:b4:6f:1d:6d:87:3b:
c4:28:09:93:e9:b6:8f:98:49:4e:2e:88:c0:4d:ee:
86:af:86:5a:87:57:de:74:23:34:96:d8:d6:64:ca:
3b:4d:bf:ef:ea:de:c5:4d:f3:40:37:b2:90:9c:95:
3d:3c:55:7e:2d:31:a3:a7:61:23:39:42:64:44:ce:
a8:11:bc:11:fd:af:9a:16:f3:1e:6e:3a:ca:f1:22:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:90:B9:D8:76:F8:AA:E4:F0:54:55:39:1D:74:F4:34:1C:12:E5:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A36E6B2A74E11EFA3304596762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.241.0/24
Signature Algorithm: sha256WithRSAEncryption
66:1f:91:d2:ad:25:f3:9a:12:9f:f1:cd:a5:65:7d:b2:3a:d9:
9c:8f:d2:68:7e:05:ab:9e:6a:0b:e7:60:56:4f:62:5f:40:17:
88:30:ae:2c:cc:69:b1:8e:99:5a:c7:05:a7:be:12:df:59:f5:
cd:88:5d:44:88:17:43:4f:de:db:5f:b2:6c:16:45:8f:65:00:
01:f2:f1:0a:66:6a:1c:51:9a:40:d3:70:ca:1c:89:bd:79:d1:
5a:86:85:2a:88:85:65:34:a6:99:0d:7d:e3:12:92:28:09:a4:
64:af:f8:58:e9:6c:6c:12:75:92:f7:14:54:6a:3d:30:a8:8c:
24:91:5d:d2:e7:66:ef:d3:d0:e6:06:c6:ba:3f:2d:37:24:02:
25:e6:64:13:53:89:c0:a6:7a:78:aa:c0:bf:47:30:04:1a:e4:
97:05:01:c6:fc:0f:34:e7:51:a4:df:0c:99:82:41:d5:7b:6d:
bf:4f:33:44:9b:dd:dc:5f:0e:bd:57:0c:4e:de:3c:d6:ba:5f:
bc:33:fb:b6:b0:fd:c0:01:10:ef:d2:9c:b8:1f:42:93:b4:aa:
a1:9a:d0:68:e5:86:d5:0e:d2:57:2a:c2:5b:78:0c:9d:2d:75:
63:1a:56:ff:36:7f:4b:a1:55:69:82:8a:45:ef:2c:66:55:28:
4d:c2:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org