Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FD316049CDF11EFA72F8452762E951A.roa
File: 9FD316049CDF11EFA72F8452762E951A.roa (raw, json)
Hash identifier: E43G6SJkcYEhttPgJD+uq06O9ntw+UDteIgpsRuOsC4=
Subject key identifier: 41:E3:10:0E:06:AB:3E:C9:4B:33:37:38:C1:79:2D:99:D0:69:31:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CFC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FD316049CDF11EFA72F8452762E951A.roa
Signing time: Thu 07 Nov 2024 08:09:34 +0000
ROA not before: Thu 07 Nov 2024 08:09:31 +0000
ROA not after: Sat 30 Nov 2024 08:09:31 +0000
asID: 984
IP address blocks: 45.195.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53186 (0xcfc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 7 08:09:31 2024 GMT
Not After : Nov 30 08:09:31 2024 GMT
Subject: CN=672c75be-dd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:17:73:b2:1c:92:18:75:0b:13:3b:e2:8c:
ec:d6:7f:fa:d6:b8:72:f8:91:ba:4a:c6:db:3b:61:
b6:8d:85:c6:77:7d:63:58:39:c3:c5:93:ca:c6:65:
e5:62:b5:e6:bf:32:d8:c6:7f:0d:84:93:f5:3e:36:
31:bd:eb:f9:74:f4:ec:7a:ea:eb:75:e7:12:b7:34:
11:19:df:e8:1a:e4:85:49:1f:e2:3e:a2:23:4e:2b:
76:19:3d:98:4f:2b:13:3c:ed:07:40:24:13:7a:55:
90:2b:22:8e:40:73:fc:12:3d:bf:88:34:ad:aa:b7:
d9:28:3b:5d:2e:8a:db:4b:9e:bc:5e:09:d3:f5:71:
f2:4c:1c:3b:12:65:79:f1:06:7e:be:3b:7e:f7:ad:
9d:b7:80:5d:35:53:73:80:dd:06:c5:c7:03:40:59:
c4:28:94:5e:1f:5d:d7:ab:f7:fc:89:11:1c:6e:1b:
d3:c6:af:18:5f:51:03:07:1e:89:5b:4b:cd:50:a7:
5e:7e:03:83:c3:be:98:97:f1:92:60:4a:18:80:ec:
3e:e0:6c:21:fd:ee:21:48:ac:9d:91:ce:54:06:89:
e2:61:92:b9:a0:4f:82:36:d4:f8:af:29:0b:ce:17:
76:91:b7:14:f7:ca:e6:d8:65:d2:b7:93:fa:a5:9e:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:10:0E:06:AB:3E:C9:4B:33:37:38:C1:79:2D:99:D0:69:31:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FD316049CDF11EFA72F8452762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.246.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d0:1a:5b:b5:4f:d2:1d:c8:c0:6c:e4:54:92:3e:7d:68:14:
27:c4:f6:c4:8a:97:58:9f:aa:14:3f:d4:cc:90:07:5e:d3:f2:
a6:33:75:42:52:ff:08:57:1d:b2:be:88:97:28:17:60:bc:f7:
9d:f2:b2:77:60:56:72:d9:af:da:84:91:13:0b:3b:27:be:4a:
69:ca:e1:a1:dd:4d:1d:9f:d3:15:a5:3d:db:34:5f:99:6e:97:
a8:33:fb:6f:99:8e:13:b8:76:fd:ca:b4:c9:79:63:7e:be:5a:
55:56:10:c9:ec:20:11:8a:8d:e6:dd:ca:70:ca:21:fa:8f:24:
b9:dd:38:82:b1:f8:e6:0d:66:60:2d:e7:04:3a:eb:f8:01:29:
2b:cc:57:28:22:ae:60:66:42:af:a8:c9:d1:54:33:38:b3:de:
8b:61:4c:df:09:5e:89:df:a7:fc:56:f7:11:1b:33:bf:a7:89:
ad:f9:a2:9d:96:e2:d1:7b:5b:2b:48:e0:44:e1:d4:35:4a:f1:
79:ad:ec:f7:91:d8:3d:47:e0:ac:0e:b5:d0:e5:b3:05:54:52:
7e:69:9b:7b:d5:ba:31:00:79:16:56:41:92:f0:28:48:97:f7:
55:15:0e:81:fa:77:b7:85:07:ac:e2:df:97:5d:29:28:e8:9f:
34:1b:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org