Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D2E5F14976611EFBFB48547762E951A.roa
File: 8D2E5F14976611EFBFB48547762E951A.roa (raw, json)
Hash identifier: kdiAVyEEAjaWMt1qEUYn49xNgDfHKMuEvqUzjb3oKk4=
Subject key identifier: AB:28:6A:51:30:EA:C1:F1:DE:78:43:D0:7C:44:99:34:1C:D3:25:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D2E5F14976611EFBFB48547762E951A.roa
Signing time: Thu 31 Oct 2024 09:00:18 +0000
ROA not before: Thu 31 Oct 2024 09:00:15 +0000
ROA not after: Sun 01 Dec 2024 09:00:15 +0000
asID: 54600
IP address blocks: 45.196.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51968 (0xcb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 31 09:00:15 2024 GMT
Not After : Dec 1 09:00:15 2024 GMT
Subject: CN=67234722-f563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:7e:5d:0a:fe:f8:8e:e2:fa:ef:9e:59:f9:
d5:b5:26:2c:c1:18:12:8c:22:b4:14:93:33:f9:05:
26:d4:a0:19:68:26:35:36:ee:92:4b:6e:80:6c:ec:
fc:1c:43:eb:04:26:ce:9e:a3:43:68:49:05:de:1b:
23:fb:31:98:74:44:95:c2:11:3e:16:4a:d9:f7:61:
d7:7e:a4:dd:3a:60:c4:18:ea:0b:31:e7:7f:48:93:
3c:72:0f:48:1c:1b:56:ee:cf:02:3f:0b:6c:a5:69:
f9:b1:36:82:44:87:24:c7:28:1c:43:0f:47:06:87:
8a:ca:9c:fc:ab:a0:fa:34:db:a5:08:53:08:3a:be:
d8:37:d4:04:31:d9:9a:72:b5:a6:34:eb:0b:14:bf:
47:ce:b1:8c:ff:9d:ec:d4:a2:8c:62:9e:c2:5f:a9:
ca:26:fb:2a:5f:b0:bb:30:09:1e:92:f5:10:d7:85:
f1:de:1c:0b:7e:60:12:f5:01:33:08:06:e0:30:c4:
4c:a6:67:bc:7c:23:b2:14:d2:ea:22:19:5f:45:30:
f6:e2:43:cf:4b:d8:7f:1f:1f:b0:a5:e1:54:bd:dc:
1c:8b:21:41:0a:44:2c:e0:3f:6f:6a:0a:75:d4:e8:
ea:6e:eb:15:c6:f9:92:7d:46:33:2e:66:bd:82:c7:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:6A:51:30:EA:C1:F1:DE:78:43:D0:7C:44:99:34:1C:D3:25:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D2E5F14976611EFBFB48547762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.160.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:88:eb:a5:85:f0:31:b7:eb:ef:a9:84:d8:83:2a:b4:bf:de:
75:c5:af:83:59:bc:ab:97:41:3a:2b:f4:25:8b:a5:c3:24:d0:
12:2c:a1:16:a6:b0:25:35:d0:44:6d:f1:b4:a4:7e:23:76:ab:
b8:86:f3:d4:5f:c4:7f:5a:a8:3b:1d:ab:07:ca:d0:9c:a6:8f:
6a:97:fc:32:46:17:05:f4:1d:bb:1f:a1:2b:92:aa:28:af:9a:
4f:39:14:b0:fd:32:34:71:38:03:e8:10:4a:48:10:ea:65:6c:
d3:60:35:25:61:23:30:cb:c5:d3:85:bf:87:b7:e5:6a:e8:8b:
57:20:b0:27:fc:72:51:79:5e:51:84:40:6e:90:1b:a6:3f:44:
cd:f4:a4:ca:27:55:e3:3f:00:6f:04:9e:9d:be:31:c1:1d:16:
33:17:0c:bd:33:c3:a3:d5:52:f2:86:4b:0f:36:8b:3b:b1:b2:
0f:bb:e1:ba:b5:c4:77:da:3d:17:c4:8c:43:76:eb:7a:32:74:
de:c8:db:80:f8:b5:4b:e8:d6:be:82:d7:89:ae:d9:c5:85:52:
a7:af:b6:0d:8c:75:09:b5:ab:d6:d9:00:24:29:ed:6c:fa:3e:
db:9e:99:5a:c1:82:60:74:4c:ac:7c:af:c3:a7:70:43:3c:70:
24:d7:77:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:39 2024 by rpki-client on console-ams.rpki-client.org