Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/924ABE34157611EEA7304C1A4AD9E6FC.roa
File: 924ABE34157611EEA7304C1A4AD9E6FC.roa (raw, json)
Hash identifier: kZ3KmERUa4pOVl6/DZ7DI8Mbs6EOdePW17Axo1KKM3Q=
Subject key identifier: A0:9F:2F:E9:F2:3B:00:11:BB:C3:1A:C1:76:AF:49:89:A7:1F:91:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 2DEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/924ABE34157611EEA7304C1A4AD9E6FC.roa
Signing time: Wed 28 Jun 2023 05:42:30 +0000
ROA not before: Wed 28 Jun 2023 05:42:26 +0000
ROA not after: Tue 29 Oct 2024 05:42:26 +0000
asID: 135607
IP address blocks: 45.194.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11756 (0x2dec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 05:42:26 2023 GMT
Not After : Oct 29 05:42:26 2024 GMT
Subject: CN=649bc846-b3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:16:89:0a:92:db:95:9c:10:c3:30:c8:ac:
b3:0f:76:28:e1:7f:15:af:ec:d9:e1:6f:49:e6:bb:
af:91:71:9e:4d:94:b8:49:67:85:69:64:73:f5:a8:
25:c8:50:45:29:6f:53:7d:c2:73:26:05:e4:c9:de:
a0:ca:f7:9e:f5:d0:39:fb:34:34:59:e4:d3:67:49:
01:6c:6e:27:47:bc:ce:80:cb:cf:e4:81:d9:bb:5e:
96:e6:f2:1c:db:91:9f:db:91:b6:24:da:24:fc:02:
29:1e:76:f3:dd:76:ae:73:40:94:3f:ca:25:59:16:
b7:2d:0f:e9:7e:cf:84:4c:f0:4c:4c:2b:5e:68:93:
14:03:4d:0e:2b:49:a5:2b:ba:41:de:1c:7a:89:d3:
ef:ac:cd:79:9c:a4:a3:a7:04:fe:9c:36:f2:80:e9:
7b:11:ac:50:9a:c8:99:7b:e8:86:23:5d:1a:a8:6e:
fd:40:b7:d2:ac:09:6f:c0:c2:0d:e4:29:b4:76:1f:
cd:99:f9:37:80:b5:8a:92:53:e3:bd:f0:af:37:60:
71:27:6f:1b:bf:34:d6:dd:aa:b2:80:9f:db:e4:36:
c1:65:75:7c:62:d8:81:8a:40:9f:f0:f5:28:b9:96:
e6:6d:4d:f8:71:79:8a:97:0f:20:cd:a7:d0:26:96:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9F:2F:E9:F2:3B:00:11:BB:C3:1A:C1:76:AF:49:89:A7:1F:91:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/924ABE34157611EEA7304C1A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:12:b7:a9:9f:85:20:b3:52:7f:ff:93:a9:2b:69:4c:86:b1:
aa:e5:9f:b5:e6:91:7e:ab:cf:61:1b:c9:ce:d0:9d:2f:f7:18:
80:e7:84:6a:11:9b:29:2e:6c:1b:27:da:56:e8:df:63:f4:4e:
34:d8:31:45:fa:f0:22:23:20:37:1c:c0:68:d3:35:14:12:b0:
37:2c:9f:64:0f:d2:e9:8a:e8:56:aa:a0:eb:ce:b5:37:fe:9b:
a8:4c:c1:c5:ce:81:94:a3:b7:ed:4f:37:46:c5:c0:6b:84:0d:
28:b8:d4:bf:5e:b9:3b:0e:44:47:1b:27:c9:23:03:bd:7a:41:
c0:dc:71:f8:ef:98:1f:21:3a:cd:63:49:d3:46:1a:3e:e0:05:
5a:7b:69:9e:1b:96:f0:3b:42:38:e0:31:e7:04:14:c2:28:8f:
b2:5c:a6:ac:9a:10:c9:d2:05:bf:15:4a:c7:8f:cb:12:8b:0b:
ca:8f:5a:de:1b:ca:27:64:e2:6b:8a:4f:5a:d3:16:0f:b2:7e:
8c:5b:84:48:87:7c:89:fd:e6:c1:23:16:b8:28:7d:25:88:80:
38:3b:fd:bc:fe:ad:dc:83:a9:10:14:3d:bb:da:6d:4c:47:cd:
5a:45:a8:9f:db:2f:18:3f:6d:4d:2a:51:1b:e6:07:41:77:c9:
00:74:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org