Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ED1A174983211EF8DE1154D762E951A.roa
File: 8ED1A174983211EF8DE1154D762E951A.roa (raw, json)
Hash identifier: lYF0SeFP/jHdrEAbZCugB9bl9Wfn/h2ou+Kn5aiw6s4=
Subject key identifier: D0:F4:AD:01:A9:7B:E9:0A:57:05:66:C9:78:BF:0A:F9:F2:27:E1:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CB6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ED1A174983211EF8DE1154D762E951A.roa
Signing time: Fri 01 Nov 2024 09:20:38 +0000
ROA not before: Fri 01 Nov 2024 09:20:35 +0000
ROA not after: Sun 01 Dec 2024 09:20:35 +0000
asID: 398823
IP address blocks: 45.205.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52075 (0xcb6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 1 09:20:35 2024 GMT
Not After : Dec 1 09:20:35 2024 GMT
Subject: CN=67249d66-6ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:1b:0a:dd:2b:15:b8:be:f6:e6:8b:6d:9d:
93:9c:12:8f:9d:49:67:ed:4a:9b:df:cb:93:4a:49:
b8:8e:60:83:6c:27:f3:c7:85:91:32:f8:0a:74:c0:
7c:eb:39:72:52:c7:27:dc:bb:14:a7:ea:d9:6f:f0:
3c:a4:6b:e4:14:60:09:a8:b1:77:3b:a5:2f:a9:bc:
f0:f4:78:ef:ff:99:a1:5c:88:54:60:34:c4:11:41:
b0:bc:2e:d7:1f:5d:d0:ca:b3:03:2c:08:ae:07:71:
73:07:48:91:12:57:3d:10:63:79:20:ae:2a:c0:57:
51:67:68:88:b7:b2:de:c1:08:7e:ad:46:b7:32:6b:
6d:d6:de:54:a7:0d:a5:2f:27:f1:aa:42:48:5f:47:
ac:4d:a2:bb:e8:03:fd:bb:c8:b6:2c:d1:2b:ce:40:
31:c1:07:9e:50:30:34:6a:85:0f:65:25:56:89:ad:
e4:a6:07:c7:f3:28:77:ab:1a:61:38:c7:58:ad:6f:
ea:0f:6e:87:87:79:3d:e9:9f:fe:07:36:aa:9e:a5:
bb:7d:fe:b3:fa:83:eb:83:68:49:ae:55:24:de:c2:
f4:ad:bd:e0:fd:be:4b:b2:f0:33:cc:ad:f0:58:ed:
c2:ba:29:aa:77:40:13:c8:b9:0f:53:cc:35:db:51:
1d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:AD:01:A9:7B:E9:0A:57:05:66:C9:78:BF:0A:F9:F2:27:E1:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ED1A174983211EF8DE1154D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.112.0/20
Signature Algorithm: sha256WithRSAEncryption
21:b2:12:e7:a3:35:37:18:13:db:f9:3c:38:03:eb:82:f5:1b:
ae:21:e0:dd:78:3b:f8:02:35:a5:e8:26:7f:ea:de:cd:21:c9:
5a:4b:fa:81:ea:c4:45:8d:ea:08:16:e9:0f:a5:24:27:87:33:
c6:af:de:22:95:4a:df:17:81:0a:f9:0b:9b:56:4c:30:7a:16:
45:ee:db:33:fd:4e:25:98:67:c4:c8:e8:cb:bf:bf:46:dd:4d:
35:31:c6:68:20:ee:a0:c3:f8:c2:82:d5:f5:4c:8a:6f:b8:92:
1a:cb:60:80:d0:44:2e:e5:49:59:a2:e1:55:00:50:1f:c0:dd:
34:fa:55:32:b0:18:9a:2f:45:b2:87:2f:c9:d7:61:b1:41:df:
02:cc:a4:c5:ec:a7:e1:43:c3:fe:47:8a:f2:56:13:26:6f:8b:
d7:a5:14:f6:27:08:1d:dd:fd:f8:9a:a5:1e:df:c1:49:79:ab:
40:1f:00:90:3b:5f:f0:ac:c2:9c:b3:cf:78:df:5a:3f:e1:c1:
f6:75:32:a9:4d:be:b8:27:12:57:be:d8:4d:0b:97:54:74:1f:
68:fd:2f:bd:f3:1d:bd:0c:3a:54:56:0a:d3:37:d2:c9:a6:03:
14:93:7e:42:89:5e:28:9e:f5:e4:66:69:53:a5:c3:67:63:e1:
4f:69:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org