Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9210256EA74F11EF9CB2E39C762E951A.roa
File: 9210256EA74F11EF9CB2E39C762E951A.roa (raw, json)
Hash identifier: rAnsv7k8EXkGuhl5FindVUXKW+G44S7rlkE2w9QCfqY=
Subject key identifier: 22:00:3C:27:A0:F0:51:6B:54:66:DC:98:20:E2:C9:C4:25:2D:F6:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9210256EA74F11EF9CB2E39C762E951A.roa
Signing time: Wed 20 Nov 2024 14:56:07 +0000
ROA not before: Wed 20 Nov 2024 14:56:03 +0000
ROA not after: Sat 30 Nov 2024 14:56:03 +0000
asID: 202656
IP address blocks: 45.199.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55006 (0xd6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:56:03 2024 GMT
Not After : Nov 30 14:56:03 2024 GMT
Subject: CN=673df887-bcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:3e:7a:42:3a:35:ad:27:17:2d:17:c4:c3:
25:88:36:99:04:e1:d0:0e:e3:f7:a1:3d:c5:12:90:
e5:49:9f:fb:61:64:e8:96:c6:0d:ea:89:5a:67:94:
6c:33:3f:2d:e5:9b:dd:6d:ba:bf:cd:c3:78:6e:93:
09:f6:fc:62:2d:b7:60:0e:be:6e:3f:92:5e:bb:32:
ff:91:40:41:1c:d8:35:be:3a:dd:ad:88:52:9f:d7:
1e:5c:67:db:07:02:55:21:b7:a4:77:cc:61:e8:2e:
4c:4c:69:09:55:b5:fc:3d:67:28:4c:e1:40:4c:72:
c8:ca:57:ec:28:4b:1a:6f:47:a2:63:ac:0a:3e:89:
39:7c:51:79:ba:21:f0:22:7e:38:85:38:33:1e:b2:
c2:a2:88:64:46:3b:a0:48:05:d3:f3:ba:ee:0d:26:
5e:1a:74:36:6a:33:86:52:c8:2c:37:46:0d:98:27:
97:1b:b8:c5:59:88:fc:7d:cd:53:92:b8:f9:b0:ab:
92:86:d2:7d:d0:d5:21:10:a0:dc:a6:65:c7:29:71:
c6:fe:e8:c0:e8:1b:00:cf:24:4c:1d:80:2b:29:ce:
8e:3a:ab:61:dc:5a:e4:a2:4e:e6:bb:48:7c:e8:37:
0c:a3:1d:c8:f1:6f:b2:3c:27:79:e4:fc:b9:f9:aa:
eb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:00:3C:27:A0:F0:51:6B:54:66:DC:98:20:E2:C9:C4:25:2D:F6:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9210256EA74F11EF9CB2E39C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.248.0/24
Signature Algorithm: sha256WithRSAEncryption
94:40:e1:ad:a2:52:b2:13:d9:5d:69:63:9f:67:71:c0:52:c3:
65:53:32:34:3e:3f:63:48:97:c6:d4:69:0b:94:ff:b6:2c:76:
a6:b1:fe:eb:16:01:72:3b:33:12:2e:01:67:37:23:08:31:dc:
ea:34:50:c2:b1:4c:43:c2:57:7b:86:72:51:31:a3:98:33:b4:
0f:50:0f:0c:4d:0c:7e:aa:ae:55:5b:2d:9e:16:a1:d8:b4:cf:
27:de:54:5e:57:e6:b9:91:02:fc:df:57:ce:3e:c0:ea:91:96:
20:b4:5b:df:61:3c:61:61:3d:a2:d8:2c:aa:e5:60:0f:09:83:
93:31:98:dd:4d:44:5e:0b:0c:03:c2:2d:c2:dc:11:60:d9:a6:
72:16:2a:c7:70:57:44:50:cf:00:44:67:25:88:e0:3f:ed:77:
92:6c:90:cc:e4:17:32:f4:35:1d:1b:7e:8b:0a:94:4e:6b:65:
ed:e9:6c:af:64:59:d4:79:0b:31:55:e8:fb:4b:7c:74:e3:df:
15:00:e9:70:b0:88:a5:21:af:28:53:65:ff:b3:07:81:a2:84:
6a:fd:8b:9e:dd:53:ec:90:83:39:90:75:1f:cc:fd:ff:f2:d9:
cc:6a:07:95:4b:af:89:30:53:01:7e:82:cb:30:0b:7f:07:3e:
0c:7f:57:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org