Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD8F15AF74911EE9409A757017001B1.roa
File: 9AD8F15AF74911EE9409A757017001B1.roa (raw, json)
Hash identifier: NZkr7ke9Ukr53Qrtnlhgt4A7lTe8zr1PBYJ1FyuGRUc=
Subject key identifier: 6B:E2:C1:D5:CA:35:31:C6:95:65:05:C7:EB:FF:1D:45:28:4A:71:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 821D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD8F15AF74911EE9409A757017001B1.roa
Signing time: Wed 10 Apr 2024 14:50:00 +0000
ROA not before: Wed 10 Apr 2024 14:49:56 +0000
ROA not after: Thu 17 Oct 2024 14:49:56 +0000
asID: 132813
IP address blocks: 45.204.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33309 (0x821d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 14:49:56 2024 GMT
Not After : Oct 17 14:49:56 2024 GMT
Subject: CN=6616a718-e114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:a7:69:91:35:0b:a3:85:c6:13:aa:3b:f9:
3b:fe:f6:8a:3e:93:eb:2d:c2:e1:94:e2:5e:a2:76:
45:6b:1d:a3:63:b2:85:73:f8:e6:a2:b9:d3:9b:0e:
65:2c:81:f4:b0:f8:c9:6b:9e:eb:55:ef:b4:7a:ec:
4c:82:eb:94:01:4e:b3:f4:3b:fb:34:eb:c0:cd:3e:
1c:d7:df:a2:a1:32:98:02:4b:59:3f:4a:88:ba:0d:
f7:43:a7:f3:12:e8:be:44:94:29:f2:d8:30:67:41:
24:a2:1b:bd:c2:f7:db:20:9c:71:08:d0:a9:85:fd:
db:ba:11:4f:9c:d1:57:78:e8:12:1c:10:88:88:fe:
c9:57:d9:23:e3:98:06:8a:b3:33:81:97:8a:6a:e1:
d8:8a:c8:82:9d:e3:71:05:16:ef:8b:d7:fb:24:bd:
17:df:2f:69:4b:9c:9a:18:d8:cd:a8:65:b5:d3:bb:
d7:d4:ce:80:06:b3:ac:71:e8:b1:d3:06:73:3f:1f:
81:6f:97:c3:92:ab:37:d4:0a:db:48:0a:5e:3e:ec:
f9:f1:2a:64:fd:ef:a4:5d:34:6b:c7:ed:45:67:95:
e9:00:76:fa:6e:e1:6f:ac:28:c0:a9:ad:81:5b:1b:
85:37:34:73:de:f7:08:7d:60:e7:f0:45:8f:ab:88:
19:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E2:C1:D5:CA:35:31:C6:95:65:05:C7:EB:FF:1D:45:28:4A:71:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD8F15AF74911EE9409A757017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.8.0/21
Signature Algorithm: sha256WithRSAEncryption
71:7e:bb:49:ee:ee:2e:f4:81:57:b5:bb:50:15:fd:cb:a0:ca:
06:3c:6d:f0:ef:0c:6e:b4:26:25:44:ef:62:4f:c1:53:f8:05:
0a:60:61:61:d1:3a:4e:a7:0a:23:d7:bb:d7:35:a3:91:e7:2c:
22:e9:9e:f3:bc:6e:ad:b6:8e:62:d4:9f:29:4f:15:bf:55:89:
c9:c7:cb:80:de:6c:18:aa:5e:67:32:cd:8b:65:51:f8:fb:51:
a9:29:ae:89:90:e2:c1:12:55:9d:90:af:38:a8:81:1e:37:bf:
83:e4:47:a9:49:24:f3:ea:12:6d:e8:44:fd:6b:73:72:d0:1c:
6f:c2:f4:1a:2d:cc:ac:73:8a:00:87:84:6e:35:44:4c:ff:9c:
63:1d:6d:f0:6b:56:b0:09:27:e7:de:64:13:2e:f5:0c:9a:8c:
89:af:73:16:8d:db:1e:17:54:82:e0:44:c5:ea:40:c1:40:20:
9f:22:79:c5:2a:7d:30:d7:6d:b6:63:f9:d9:c1:b5:a4:b9:42:
bf:a9:21:24:04:6b:43:39:93:d3:bc:68:5a:2c:d0:55:da:b8:
34:20:30:88:47:33:12:88:87:d7:ec:b8:5a:96:b1:b9:e3:a5:
a8:f8:85:dc:a3:5f:b2:f4:d9:4d:e1:a9:97:cc:a9:03:06:b7:
ff:4d:ff:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:56 2024 by rpki-client on console-ams.rpki-client.org