Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9668BB34A44911EFB9EF289A762E951A.roa
File: 9668BB34A44911EFB9EF289A762E951A.roa (raw, json)
Hash identifier: cZX703f/mObrPJN7yJW5dQbOcrPPNSb0/oIrFFHHrrw=
Subject key identifier: 46:77:C2:14:F3:21:56:21:72:83:A8:D7:A4:13:AD:54:D0:10:CD:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D39A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9668BB34A44911EFB9EF289A762E951A.roa
Signing time: Sat 16 Nov 2024 18:35:44 +0000
ROA not before: Sat 16 Nov 2024 18:35:40 +0000
ROA not after: Mon 25 Nov 2024 18:35:40 +0000
asID: 9009
IP address blocks: 45.192.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54170 (0xd39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:35:40 2024 GMT
Not After : Nov 25 18:35:40 2024 GMT
Subject: CN=6738e5ff-87e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:0a:c8:d6:c2:ed:01:a8:7e:e8:12:d1:ee:
3c:4a:ad:46:ab:27:e5:16:87:a1:f5:2d:25:5c:d0:
e9:df:0f:38:1f:10:ae:2d:0a:19:70:1b:4e:de:37:
11:17:b0:53:e3:93:50:5c:b8:76:a9:96:b6:bb:4d:
f5:fd:3d:80:e4:3d:f9:be:0f:f2:d0:cb:a9:e2:60:
d4:b8:0e:40:96:d1:57:25:2a:20:9b:66:3e:4b:30:
92:4f:7a:c5:15:a7:8d:9d:c0:78:97:62:c1:d4:2e:
63:05:46:9d:26:b8:aa:c2:cc:68:e5:49:99:4f:41:
6f:10:c9:c5:6d:aa:6a:74:c7:d4:7d:fe:ec:5c:cf:
88:78:e3:f4:5a:88:b6:69:b7:53:ba:e5:82:91:ef:
da:21:20:64:05:69:5d:11:84:13:34:d6:5e:b5:db:
13:9b:d0:0f:78:92:58:79:72:25:42:50:23:19:a7:
bb:89:f9:8d:fa:a9:6e:df:61:af:eb:b6:69:fa:7f:
a3:e1:b5:97:a2:6f:ba:b9:65:e0:e2:21:a8:f3:0d:
7e:de:2d:16:74:b0:10:32:cd:83:8d:94:16:61:e5:
f3:a1:0a:7b:a2:38:f4:e5:b9:cf:e3:a0:b7:34:d7:
85:da:91:99:61:da:f4:47:91:e5:e0:d8:55:f2:f9:
96:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:C2:14:F3:21:56:21:72:83:A8:D7:A4:13:AD:54:D0:10:CD:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9668BB34A44911EFB9EF289A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.143.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d7:26:40:be:95:13:73:18:f5:0a:4f:89:da:9a:90:dc:43:
72:d3:50:d1:a6:57:d3:29:da:9b:bd:14:9d:8a:06:55:45:68:
c0:14:9f:5a:f8:f9:f8:7f:8f:0a:9f:05:5c:c5:49:73:f9:ec:
a2:58:4e:4c:d5:ea:d3:c4:ff:66:18:88:f0:bc:f6:30:91:f8:
78:53:ea:32:69:f7:7d:54:84:9f:dd:cb:3d:bd:57:25:ff:26:
0f:2d:7e:83:02:e0:57:3c:8c:93:7f:22:31:9c:69:f6:3b:59:
18:5c:4e:79:3a:c3:b1:11:82:77:db:00:bb:31:a6:ff:0e:a3:
a5:87:57:3d:30:f0:1c:51:a8:cb:11:3e:7c:5e:e5:93:c7:62:
06:ad:ae:be:81:0b:30:9a:ac:17:06:99:48:e0:f4:d0:85:2c:
63:84:01:d8:03:e3:8f:5b:1c:05:62:4d:2b:d9:63:12:ca:d4:
35:39:92:ef:de:12:22:f0:c9:3e:81:5b:f3:94:a5:c9:df:7b:
52:95:2c:2f:0d:e9:79:a8:e5:51:2c:a7:88:4a:7d:4c:b7:ef:
db:45:a1:8f:e4:3b:6f:08:fb:94:44:84:9a:50:ea:2b:a5:e2:
ff:94:74:c5:4d:2a:13:ca:ce:ff:6e:ca:67:f7:b7:f9:ec:86:
9c:1c:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org