Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E788B88614B11EFBF9BE247762E951A.roa
File: 9E788B88614B11EFBF9BE247762E951A.roa (raw, json)
Hash identifier: EH7val/pp9jy22/nCfHovD4TMfGzr4t4tG8PltFCjQw=
Subject key identifier: E1:A4:74:FA:78:8B:5A:8C:CE:DA:93:B0:B8:03:71:30:16:58:71:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: AD14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E788B88614B11EFBF9BE247762E951A.roa
Signing time: Fri 23 Aug 2024 12:31:28 +0000
ROA not before: Fri 23 Aug 2024 12:31:25 +0000
ROA not after: Mon 03 Mar 2025 12:31:25 +0000
asID: 7018
IP address blocks: 45.196.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44308 (0xad14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 12:31:25 2024 GMT
Not After : Mar 3 12:31:25 2025 GMT
Subject: CN=66c88120-d71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:a8:71:73:a4:08:ee:24:6d:ab:2d:ae:41:
50:b3:75:ed:30:53:41:b0:0d:d7:50:f5:a2:ca:c1:
f5:d4:04:53:93:5a:3d:45:10:63:b5:35:98:89:84:
f7:3c:3e:e9:5d:c4:0e:8d:69:e6:ad:47:f1:35:07:
7c:56:17:48:67:10:de:18:59:cd:de:54:93:2b:13:
2f:11:70:fe:aa:be:82:dd:5f:2a:ac:7a:1d:3f:65:
ff:e4:5a:6b:bf:96:d5:64:1c:06:fe:87:17:58:56:
4a:e6:ea:6b:4a:7f:f2:aa:77:95:fe:62:61:d5:da:
14:9e:78:5a:06:57:de:f3:b5:5f:41:ad:24:25:82:
c5:88:5f:92:5a:7d:88:8a:1b:77:1a:2b:1e:b3:20:
47:28:ca:4a:3d:5a:61:4f:ca:6f:34:2d:93:d7:fc:
03:95:f5:ba:7e:99:f1:af:0d:2e:e9:71:7c:e3:65:
ab:60:09:4e:1d:41:2c:ac:78:8d:e3:b2:2e:a4:68:
35:22:4b:97:45:3c:97:d4:cf:d0:78:4d:e4:e3:d3:
3e:4b:72:1d:bb:7e:7e:b7:6e:16:d7:47:83:5f:28:
61:7d:c7:1b:01:c9:11:8e:20:1e:e7:60:c4:79:13:
a6:3a:69:6c:2f:e9:fd:a9:1b:9e:4f:71:4e:bb:e1:
3e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A4:74:FA:78:8B:5A:8C:CE:DA:93:B0:B8:03:71:30:16:58:71:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E788B88614B11EFBF9BE247762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.144.0/21
Signature Algorithm: sha256WithRSAEncryption
39:ad:40:2e:12:b3:58:14:7a:1d:d2:55:ed:d2:e8:20:4c:56:
07:ad:a4:21:f2:5f:e4:b1:38:78:58:36:9a:fa:f0:08:48:ae:
f3:41:5e:61:f7:8e:98:4f:f9:76:48:29:83:83:0e:2c:f1:ed:
4f:da:c4:d9:26:49:e0:72:43:a5:f0:59:00:a0:54:ed:eb:9c:
d6:e7:32:b7:98:5b:9d:95:97:c0:9e:57:36:35:27:c8:20:92:
71:f8:74:fb:7e:c1:4c:eb:0b:ea:2b:df:e9:64:a6:97:00:0f:
54:ee:1e:63:d0:f4:8a:4d:28:d1:56:81:42:8e:7a:0a:e6:a7:
3c:6c:ef:1d:f3:fe:85:bc:a2:29:ce:c5:c4:fc:52:50:17:e8:
ea:53:f9:54:6e:f5:d9:a1:32:90:e6:31:7d:d0:e6:03:e7:95:
d9:15:61:7e:8e:4e:d3:0a:0c:49:ab:c3:e1:f5:a8:c2:19:3b:
b8:34:6b:ce:2a:73:ac:d7:a3:4a:95:29:28:a6:25:59:14:cb:
f7:aa:5e:a4:0c:7e:18:d6:94:78:7b:76:10:5b:be:73:e0:43:
c0:f4:20:cc:f8:3d:cc:49:b2:71:0d:8e:a9:59:44:a0:39:35:
c1:b2:7b:aa:17:8f:37:d0:19:06:4b:8f:bf:18:79:eb:ea:a0:
69:b9:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:42 2024 by rpki-client on console-ams.rpki-client.org