Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98D2DBEE33A611EEBDA6827B4AD9E6FC.roa
File: 98D2DBEE33A611EEBDA6827B4AD9E6FC.roa (raw, json)
Hash identifier: crnqNdn+YrQJ6a6bRWh+FbEel5EETZECk//QrqHE+f0=
Subject key identifier: B2:A5:22:3E:7F:80:03:F7:05:5F:E3:C0:58:32:45:B3:14:D1:A0:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 3385
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98D2DBEE33A611EEBDA6827B4AD9E6FC.roa
Signing time: Sat 05 Aug 2023 15:41:52 +0000
ROA not before: Sat 05 Aug 2023 15:41:48 +0000
ROA not after: Tue 06 Aug 2024 15:41:48 +0000
asID: 60446
IP address blocks: 45.195.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13189 (0x3385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 5 15:41:48 2023 GMT
Not After : Aug 6 15:41:48 2024 GMT
Subject: CN=64ce6dc0-20b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:f0:61:4c:bc:29:52:97:91:a1:61:fd:91:
37:a6:23:6b:1d:47:74:8c:87:d8:59:4c:5f:62:5a:
18:0b:18:33:55:f3:5e:04:2c:6b:d8:eb:7e:44:b2:
83:af:1a:3e:dd:ec:cb:d8:9d:56:72:72:2a:b9:f4:
ef:65:72:34:d6:51:69:2f:62:64:33:8b:f6:66:0b:
b8:c2:b0:82:5c:3c:4d:b3:82:f0:70:ea:45:5a:1a:
51:ca:e9:42:05:43:13:44:04:2b:62:ee:d1:6a:a9:
54:2d:c0:a7:ab:20:d7:fe:a7:2c:59:e8:8d:20:18:
43:f2:8d:d4:6c:77:14:46:6c:21:bf:af:c0:d3:ef:
88:5e:88:74:75:7f:fb:ca:c6:63:12:aa:2f:09:74:
8f:71:ae:7b:59:c1:12:dc:3f:bc:5f:26:34:d1:bb:
7b:25:0e:a2:b4:9f:03:45:cc:1f:6e:c7:90:23:05:
96:41:ed:7a:f6:46:80:ab:b5:8b:a7:ea:66:2f:4b:
89:85:19:38:a3:94:36:1f:77:e5:c0:84:ad:66:55:
b0:a2:69:1f:c3:68:ca:a8:0f:04:10:aa:d9:10:c1:
b0:97:15:0f:b3:1f:4e:40:29:ec:80:34:d0:ef:7e:
da:7d:73:58:9d:28:e7:53:d5:9f:1c:ac:9f:9d:16:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A5:22:3E:7F:80:03:F7:05:5F:E3:C0:58:32:45:B3:14:D1:A0:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98D2DBEE33A611EEBDA6827B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.77.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c2:60:b2:d8:03:60:ea:d4:1f:ad:6e:9e:2f:79:c6:58:62:
b2:31:0b:59:bd:e4:1f:e3:55:4f:5b:ed:06:09:d6:b8:8a:c6:
8b:89:90:ab:91:82:fa:ca:81:83:97:92:cd:69:1c:70:40:61:
d3:a7:41:91:e7:b6:c5:8c:5b:8b:33:09:1e:e2:01:fa:fb:08:
95:9e:ec:76:e5:4a:8d:94:f9:19:da:a0:d0:a5:fe:fd:ff:9f:
21:e9:c8:28:35:8c:4d:b9:7b:34:33:c4:c0:6e:31:2f:c7:8a:
e3:40:b1:0b:53:15:e5:83:7c:a8:11:c5:99:ed:76:5d:ad:72:
0b:2c:ae:78:02:ed:9c:e2:40:83:97:47:b7:9d:33:cf:37:bc:
ed:b5:e3:05:d1:3c:50:8a:ae:d6:c4:c0:43:7f:c3:42:7a:d3:
e3:fa:af:93:27:d3:b7:ef:fd:39:2b:5c:32:77:fe:43:99:a1:
e9:98:1d:15:c4:28:be:74:9d:77:2f:64:ea:de:28:fc:20:7e:
14:7e:5b:f8:4f:d2:c4:bf:1a:22:02:ee:13:f7:39:46:5f:de:
f6:03:9f:d9:99:ae:0f:05:cd:a9:ed:f2:c5:07:27:7a:5c:9d:
44:05:53:c4:73:4b:2e:53:da:e4:68:f7:af:d7:22:47:69:0a:
3a:07:6d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org