Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9643AC98A64911EF8753B4B3762E951A.roa
File: 9643AC98A64911EF8753B4B3762E951A.roa (raw, json)
Hash identifier: uB/+FRKJi274Ch9HaKWwBtnyptElbKAyA32IGpqKuRw=
Subject key identifier: 44:6D:17:E4:CB:E5:74:50:E4:DA:0E:8C:5D:91:32:03:44:32:7D:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D556
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9643AC98A64911EF8753B4B3762E951A.roa
Signing time: Tue 19 Nov 2024 07:40:46 +0000
ROA not before: Tue 19 Nov 2024 07:40:42 +0000
ROA not after: Wed 04 Dec 2024 07:40:42 +0000
asID: 57456
IP address blocks: 45.202.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54614 (0xd556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 19 07:40:42 2024 GMT
Not After : Dec 4 07:40:42 2024 GMT
Subject: CN=673c40fd-6df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:cb:12:ad:34:61:87:6b:af:2e:01:6e:f1:
f4:79:b3:59:7b:bf:ee:b1:90:57:a1:e3:38:f9:00:
52:25:d1:ca:f4:59:37:de:41:c8:c3:d1:6c:54:5e:
37:ba:e8:77:58:49:37:b5:d7:a1:01:80:a7:25:c0:
f7:2f:fc:26:15:87:ba:d2:47:89:1a:30:d8:6d:a2:
fc:7d:79:e1:3f:3a:f2:55:cf:da:42:73:2f:d2:09:
5f:1a:53:5c:c1:36:7c:e3:3c:5a:b9:1a:a2:55:17:
11:8d:bc:f3:bc:2c:f6:1b:5e:3d:fe:d8:29:81:46:
1d:9b:55:de:11:6f:c4:1f:ab:58:af:db:e2:64:44:
da:92:f8:d1:dc:0e:0f:10:3f:5c:79:71:3a:1b:4c:
af:96:e9:95:df:27:c8:7b:1d:e5:90:57:4d:4a:89:
08:1f:ba:e9:68:c2:af:d6:d4:17:47:32:0e:22:5e:
ca:89:17:50:b8:6a:61:1f:56:fb:28:d9:13:1a:cc:
51:07:b8:bd:e0:97:69:6b:8f:c1:ca:53:3c:52:d5:
33:62:f7:32:15:24:b2:09:d5:d2:ed:37:b9:c0:e3:
29:e5:2c:2a:68:c5:a2:73:5c:fa:c9:28:12:e6:5e:
ed:71:08:6e:6b:ea:86:b0:76:50:2c:b1:9f:fb:70:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:17:E4:CB:E5:74:50:E4:DA:0E:8C:5D:91:32:03:44:32:7D:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9643AC98A64911EF8753B4B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.46.0/24
Signature Algorithm: sha256WithRSAEncryption
79:cc:87:64:71:94:87:c8:81:23:82:ad:41:3e:f2:65:5a:8d:
ee:ad:04:5f:c4:9b:8b:b9:c4:c2:bc:65:76:fc:2e:b1:8c:13:
7d:3d:f2:b2:52:cc:d5:ec:15:50:a6:aa:70:7a:0a:e6:ab:cd:
88:4d:87:2b:ca:c0:2f:eb:3f:27:9b:fe:be:94:9c:bf:3e:d6:
85:22:f5:27:dc:80:39:d8:f5:b0:70:2a:df:d9:4a:b9:50:85:
6a:da:e6:8d:ad:ba:24:80:e9:c1:0b:23:3a:88:4a:a2:b9:b3:
70:a6:3d:92:ff:42:2b:40:8b:6c:f5:a7:e8:df:dd:40:25:ef:
ee:0f:d2:a3:67:73:a4:71:f5:a4:5b:08:ef:30:22:cd:28:da:
6b:8c:2e:a0:4f:35:5f:76:74:ac:1b:4f:53:31:a5:14:77:a7:
4b:71:1f:03:96:5e:c4:2c:80:51:bf:a0:f8:4c:82:92:7b:c7:
b1:e6:8b:71:89:70:ce:77:6c:b2:11:1d:f4:3b:22:ee:c6:2c:
09:4a:4e:be:70:17:32:7f:ef:03:7e:5d:36:ca:e1:c7:ca:7e:
85:1f:5a:3a:0b:17:ba:cb:b8:05:5c:c0:4e:0e:4c:c9:71:ec:
0c:16:ba:53:c2:5b:68:bf:7b:0a:d2:97:89:2f:28:6f:58:bd:
32:d4:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:41 2024 by rpki-client on console-ams.rpki-client.org