Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A17B2742993011EF948B3C8A762E951A.roa
File: A17B2742993011EF948B3C8A762E951A.roa (raw, json)
Hash identifier: UWqJPVziS/cAeEAloizLWYR9S96gPOtu/BEX4tfoicY=
Subject key identifier: 9D:81:93:93:B4:BF:32:22:30:E3:A7:F9:C4:AE:E0:A7:51:C4:7D:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CC8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A17B2742993011EF948B3C8A762E951A.roa
Signing time: Sat 02 Nov 2024 15:39:22 +0000
ROA not before: Sat 02 Nov 2024 15:39:18 +0000
ROA not after: Wed 04 Dec 2024 15:39:18 +0000
asID: 42831
IP address blocks: 45.198.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52366 (0xcc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 2 15:39:18 2024 GMT
Not After : Dec 4 15:39:18 2024 GMT
Subject: CN=672647aa-3a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:7a:b4:e4:f0:7e:fc:35:e2:53:cd:07:03:
97:6e:74:31:19:cf:0d:ca:c3:db:c5:1c:7c:62:05:
c8:5e:44:ab:f2:bf:75:28:3a:0f:9a:17:14:ff:89:
69:58:ee:ae:42:f8:d8:7d:7a:29:91:32:84:32:5f:
15:8f:7d:3f:f8:f4:3b:49:5a:5a:ed:37:fa:3a:e4:
49:a6:60:31:9a:ef:fc:72:0f:88:c7:5b:c6:23:48:
41:60:16:c0:f4:34:3f:9e:fc:8f:fa:d6:68:52:1f:
06:3c:1d:20:ff:1b:42:42:78:d6:09:c1:eb:09:37:
0a:18:ed:f8:49:b0:3c:a3:59:7d:a5:d2:6f:02:44:
da:74:ad:7c:bb:2a:0f:3f:9d:84:0e:dc:2d:37:b5:
34:fa:9f:14:d4:34:22:db:97:8a:07:81:33:a9:3d:
2e:b3:29:cc:e8:19:5a:8d:ec:47:df:40:03:29:ff:
73:00:d5:6e:47:d2:a1:26:6f:bb:b8:de:da:41:0b:
06:10:63:85:ac:06:1f:a1:66:7f:2e:08:96:be:c6:
c4:64:e4:34:da:7e:43:20:c2:cf:cc:e2:cc:c2:66:
04:c2:5d:dd:94:d7:2f:26:81:31:30:3e:21:c8:12:
0b:5b:b1:0c:0c:c3:cc:9d:fd:b3:7a:56:07:e8:61:
09:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:93:93:B4:BF:32:22:30:E3:A7:F9:C4:AE:E0:A7:51:C4:7D:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A17B2742993011EF948B3C8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.176.0/22
Signature Algorithm: sha256WithRSAEncryption
63:c1:a3:9a:b5:a4:5a:a8:e5:e6:37:99:05:71:9c:e1:2b:1b:
53:f0:4b:ae:25:ba:27:f2:48:ac:08:eb:a2:f0:1a:3c:f4:34:
50:7e:70:4a:c9:82:7d:92:31:b4:01:b8:b5:2b:8f:a6:f3:eb:
73:a3:74:6c:26:1d:1f:e3:de:4e:71:70:1a:f4:04:2e:e2:95:
5a:a2:5f:e4:37:d6:8d:e7:49:17:c8:11:ba:55:4b:77:8c:4e:
61:38:c3:23:25:1b:5e:8f:02:52:b8:4d:30:80:1a:97:5b:a6:
23:21:a8:17:ed:a8:e1:3e:d9:c5:a4:44:19:38:bc:61:13:de:
9f:2d:c7:b7:4d:74:52:eb:a8:2b:f7:82:f2:80:71:31:d1:37:
45:15:a2:63:10:2a:96:6b:00:c9:e9:9d:ea:f8:82:6a:0a:31:
90:e7:a5:9b:d0:b7:9c:95:4c:6a:83:f4:73:82:53:84:72:68:
15:c2:90:89:b2:50:5a:d0:07:8c:29:7d:7d:17:31:a0:b8:11:
f9:a6:5e:a1:b1:1e:1d:b1:18:fb:0a:f4:8e:d8:89:04:8b:0d:
ce:7e:70:b9:24:b8:e0:54:8c:0a:e3:2a:9b:e2:a8:6a:25:da:
44:b3:4f:b1:6a:33:9c:c5:ff:28:2f:d3:97:85:e9:03:cb:13:
d9:ea:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:42 2024 by rpki-client on console-ams.rpki-client.org