Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1CC312691DF11EFAAB6FA6E762E951A.roa
File: A1CC312691DF11EFAAB6FA6E762E951A.roa (raw, json)
Hash identifier: YLOjnSbDApdk/0LqwNgm+S7VztIAHJglkhOhmN7IoQk=
Subject key identifier: 9E:E9:F2:3D:31:3D:1E:D0:EB:DE:DD:40:86:93:10:41:3D:43:32:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C832
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1CC312691DF11EFAAB6FA6E762E951A.roa
Signing time: Thu 24 Oct 2024 08:11:55 +0000
ROA not before: Thu 24 Oct 2024 08:11:51 +0000
ROA not after: Sun 24 Nov 2024 08:11:51 +0000
asID: 138195
IP address blocks: 45.202.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51250 (0xc832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 24 08:11:51 2024 GMT
Not After : Nov 24 08:11:51 2024 GMT
Subject: CN=671a014b-d27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:da:fe:d1:48:1d:62:83:3a:ab:34:e7:7f:
ae:8e:a8:81:58:ac:71:cf:3c:3e:20:ee:66:a9:c5:
a9:b1:97:3e:3c:ae:5b:d8:03:97:9a:9f:e2:d9:f3:
97:39:79:30:cb:df:b0:4b:58:4c:4c:78:c1:bd:f7:
65:e8:62:a4:5e:f1:cd:c2:1c:ed:32:44:82:6c:8e:
15:41:aa:95:0b:70:a4:53:75:08:dc:ef:27:f0:57:
57:6a:89:a2:61:c3:8b:10:d5:39:93:9a:0e:0e:69:
ab:f7:13:48:ac:a1:75:00:54:a7:e5:10:80:11:60:
a6:32:20:3f:bd:89:50:d7:c5:84:18:6c:4b:e4:2c:
05:af:9f:72:f4:af:a0:1f:93:12:1b:2c:1e:54:30:
81:c8:8f:b9:cf:5d:63:d0:f2:9b:54:19:8c:e3:36:
d6:45:f1:5d:c6:80:7e:80:99:1b:2f:1b:0d:2e:9d:
f0:a3:56:f8:b2:dc:37:eb:96:2e:94:0a:67:17:ff:
26:d5:88:b0:82:7a:91:3a:6e:88:ec:9d:e0:27:06:
7d:92:f9:92:a9:96:be:65:d7:ab:b5:8c:ec:22:fb:
c2:b7:30:09:1c:96:bd:79:19:0a:32:bc:90:9b:b8:
d0:70:66:47:fb:6b:76:e0:0a:cf:48:62:83:1c:57:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E9:F2:3D:31:3D:1E:D0:EB:DE:DD:40:86:93:10:41:3D:43:32:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1CC312691DF11EFAAB6FA6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.205.0/24
Signature Algorithm: sha256WithRSAEncryption
24:16:96:2f:ee:be:de:61:08:ed:48:70:91:5b:3c:a6:00:7d:
ce:7d:ae:6b:54:5b:22:14:2c:a3:ca:5c:8a:30:5e:c1:93:3e:
0f:c1:a4:38:b5:2a:90:40:86:a9:75:f6:68:de:92:6c:f0:fd:
c3:13:36:d5:b0:6c:d8:e8:fa:9e:f2:1f:e2:44:43:25:62:a6:
12:0f:f2:25:04:16:f6:2a:d9:d6:5a:fb:8f:ac:75:7f:36:aa:
de:93:6d:ea:c1:f9:cd:9b:eb:c6:5a:e2:8a:c1:27:a5:33:d3:
9a:fe:11:86:60:b5:c2:4c:f7:0e:b9:3d:c5:08:49:c6:38:ed:
73:22:d4:04:42:99:4e:65:06:b7:7e:1d:ae:6c:c3:a3:8b:a2:
1c:c5:61:78:f0:e0:19:58:cc:27:e3:44:80:27:61:6b:e2:84:
2a:8b:84:8a:a8:37:a6:d1:c1:fc:e5:e6:e8:09:7d:e2:b7:e8:
b6:e0:b7:0b:00:27:71:14:e2:78:00:68:d6:95:ee:8e:a7:16:
43:9d:fe:c9:74:33:63:40:c0:8a:aa:94:e9:3e:72:5e:5b:72:
d8:ea:37:99:61:af:78:98:a4:2d:2f:c6:05:34:44:5d:1d:ba:
b1:4d:13:d4:ce:e7:07:51:6d:4f:86:6a:ce:38:6e:b1:54:89:
3d:91:de:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org