Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93BB3EAEF91711ED9C8315194AD9E6FC.roa
File: 93BB3EAEF91711ED9C8315194AD9E6FC.roa (raw, json)
Hash identifier: TPQXjjCgDLFKhfmpo1YiI5a394QL+/OqRR80EmqEKGg=
Subject key identifier: D2:BA:79:91:B9:F7:B2:95:D8:01:E3:BE:52:F1:B6:A8:48:FE:97:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 26C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93BB3EAEF91711ED9C8315194AD9E6FC.roa
Signing time: Tue 23 May 2023 03:11:58 +0000
ROA not before: Tue 23 May 2023 03:11:54 +0000
ROA not after: Wed 15 May 2024 03:11:54 +0000
asID: 399626
IP address blocks: 45.204.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9924 (0x26c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 03:11:54 2023 GMT
Not After : May 15 03:11:54 2024 GMT
Subject: CN=646c2efe-ea63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:55:10:dc:40:e1:9c:00:3c:76:99:b3:e6:
99:56:2b:52:26:43:93:e3:fa:5c:1f:af:39:77:16:
ee:c9:92:e3:f0:43:5d:7a:be:a8:f0:b3:42:b9:b3:
2b:e7:e0:a6:82:31:a7:48:65:ef:8a:82:f8:ac:47:
85:bc:67:39:3c:ef:43:e1:13:6f:f1:ad:46:1c:0c:
31:db:13:fe:ae:0a:8f:b2:67:c3:e8:d8:b1:ff:56:
57:b2:3d:1d:24:b7:87:00:33:3b:fa:63:82:a8:9e:
de:81:ac:54:d4:23:25:d8:53:27:5a:30:a2:66:11:
46:a1:97:21:a2:b3:56:d4:14:9c:54:81:03:ce:15:
01:e5:01:1f:64:31:e1:93:b2:bd:dc:19:68:30:a6:
60:c0:18:41:4e:e2:f9:b8:e7:e2:12:bf:3f:ba:b2:
74:6a:11:d9:c3:c5:a6:9f:d7:96:55:83:d9:34:98:
21:63:b1:f2:bb:4b:a4:44:ca:4d:37:5d:cc:a8:a5:
f2:78:25:95:95:c4:6b:48:3d:f9:8d:00:65:5b:59:
2d:9b:ae:11:9d:8e:80:37:7b:ed:b4:52:dc:b9:f1:
b8:ba:15:dd:56:46:a1:fe:58:66:5c:0d:e7:84:94:
00:00:a3:aa:a0:7f:b0:f9:06:7b:4c:20:08:ca:80:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:79:91:B9:F7:B2:95:D8:01:E3:BE:52:F1:B6:A8:48:FE:97:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93BB3EAEF91711ED9C8315194AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f2:51:49:27:76:58:81:02:be:dd:8d:5e:8e:9f:49:a2:66:
9a:8a:ba:a2:3a:43:ab:35:73:4f:61:94:85:98:8d:58:31:ce:
0e:19:f1:94:1d:78:b5:bd:49:7a:54:00:d5:d7:e5:2b:0c:43:
da:b2:35:80:36:c3:36:ee:2a:11:d4:31:47:4f:56:7b:34:84:
9b:20:15:f4:1e:01:55:b0:15:0b:0b:74:fd:5d:b9:ee:ca:83:
a5:2d:84:de:5e:4e:41:2f:f1:78:d6:ce:da:a8:a9:5b:3f:f7:
4c:b3:e0:b4:99:2f:9b:b5:42:66:54:2a:28:85:6b:64:04:f2:
c4:97:45:c6:46:1b:f6:6a:8a:81:83:0b:bc:65:95:a1:03:ee:
20:a4:fb:0d:a1:e6:4c:18:21:b9:bf:d5:46:69:2e:87:35:2b:
ee:34:2d:52:20:ea:e6:fd:39:29:02:8b:5f:a0:15:35:4d:5f:
f4:ff:90:d1:49:f2:7d:d0:1e:1e:26:2f:d1:25:8b:ba:87:06:
96:c3:95:e0:6f:2a:58:fd:c4:68:30:be:5b:df:56:e2:d1:0d:
65:93:30:bd:5c:8e:72:8c:29:86:a6:24:c8:3a:3f:5b:cf:09:
98:d0:5d:c7:1e:e0:78:91:74:e5:c8:a4:c3:da:ba:bc:50:86:
21:97:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org