Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A439A3648ACB11EF9F4BA25C762E951A.roa
File: A439A3648ACB11EF9F4BA25C762E951A.roa (raw, json)
Hash identifier: bKN3SdIIZd+Cj4aW+9uh3dXLC40fKutjX8bQzNVMv2k=
Subject key identifier: 76:65:F4:E2:7E:0D:A9:31:56:9F:DE:69:B5:29:67:19:F5:67:38:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C4B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A439A3648ACB11EF9F4BA25C762E951A.roa
Signing time: Tue 15 Oct 2024 08:01:11 +0000
ROA not before: Tue 15 Oct 2024 08:01:07 +0000
ROA not after: Wed 27 Nov 2024 08:01:07 +0000
asID: 20473
IP address blocks: 45.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50361 (0xc4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 15 08:01:07 2024 GMT
Not After : Nov 27 08:01:07 2024 GMT
Subject: CN=670e2147-fd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a8:f5:4a:19:b4:3e:9a:4f:7a:6b:eb:ff:1c:
30:12:f0:12:a2:40:7f:37:0b:02:37:07:7d:6b:cb:
9d:7d:4d:90:62:ca:6d:1c:99:61:8b:75:09:bd:2b:
10:94:f6:70:4b:bc:8d:fb:1e:fa:05:3a:9e:31:f8:
28:ee:6c:6d:ac:29:ee:a0:f1:ad:0d:9d:01:4d:00:
cf:ed:bb:99:5c:6c:f3:f4:e1:32:60:63:ca:ca:e9:
5b:49:c5:f4:dc:5c:1f:85:64:34:fa:93:14:b3:8d:
31:41:be:ef:c2:70:cb:77:fb:ed:b4:89:4c:d8:6e:
f3:c2:2f:df:02:68:5a:1c:af:4a:fe:e9:d3:33:6f:
27:06:23:37:8f:5b:b9:8a:6c:b4:e9:1e:7f:4b:f9:
bb:02:8c:c7:d3:c2:f9:43:72:b0:12:7b:7d:71:8e:
f9:2d:89:47:2a:ba:23:a8:c6:c5:04:29:89:6a:9a:
28:f5:fe:e8:7e:4c:30:71:86:db:61:a2:c0:88:4a:
c9:79:e4:d3:93:fb:f6:e7:f5:8b:1c:35:e8:c4:1c:
58:df:4a:44:96:3d:85:95:92:fc:38:62:2c:d9:3b:
63:4d:1a:0f:d0:83:96:da:76:d7:e1:f1:7c:ab:c3:
1c:94:ea:63:92:96:2e:67:e1:43:1e:8f:0b:2c:df:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:65:F4:E2:7E:0D:A9:31:56:9F:DE:69:B5:29:67:19:F5:67:38:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A439A3648ACB11EF9F4BA25C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3d:a4:b5:16:58:be:8a:0d:9e:45:37:b1:8f:16:16:aa:be:
42:bc:92:b2:b4:cc:93:d3:da:2f:bd:97:f3:a9:42:f0:3b:d9:
16:d6:1a:86:93:e8:01:6a:dd:f1:0a:95:8d:3d:2c:42:8d:4c:
73:f6:21:59:7e:fd:d3:a8:53:d9:d0:86:01:ea:57:3f:c0:40:
6a:4e:87:7e:d6:b1:7b:63:5a:20:82:db:2b:7f:57:c0:35:38:
df:87:1a:7b:81:65:83:53:96:20:84:2d:6a:d7:ec:63:75:0d:
29:51:ab:93:28:9b:64:bb:3f:2c:7c:9e:a4:74:fe:e4:01:d5:
19:e5:85:08:b8:a2:d1:d6:26:79:5c:d6:9d:45:e1:6c:2d:c2:
7a:0d:27:a1:1a:0b:bb:b5:db:7c:39:d5:34:02:4f:9c:2c:89:
01:45:b8:ba:3d:76:12:9a:a8:60:f9:ab:4e:42:ed:cf:ac:0e:
d6:e7:a9:c1:85:5e:25:77:87:dd:ad:f7:8d:db:1b:fb:be:e9:
bd:21:04:da:9f:2c:fb:27:95:82:1f:8a:75:a3:b4:68:d6:8b:
e2:d7:9b:e4:a2:b3:0b:84:66:0d:f8:86:50:87:b6:80:c3:42:
98:9e:86:68:fd:44:4f:3e:9d:b0:aa:80:2a:79:45:0f:42:cb:
f0:d5:7e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:43 2024 by rpki-client on console-ams.rpki-client.org