Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7B2BAC8A4C711EFBA3D75BC762E951A.roa
File: B7B2BAC8A4C711EFBA3D75BC762E951A.roa (raw, json)
Hash identifier: n4RGGQDLDo0cknVSiBOTBIGcAgbligtYloQ+l3m+gaM=
Subject key identifier: D3:02:3D:D0:70:26:3E:D1:71:79:11:C1:9B:EB:C4:E4:6B:D2:30:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D499
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7B2BAC8A4C711EFBA3D75BC762E951A.roa
Signing time: Sun 17 Nov 2024 09:38:36 +0000
ROA not before: Sun 17 Nov 2024 09:38:32 +0000
ROA not after: Mon 25 Nov 2024 09:38:32 +0000
asID: 7029
IP address blocks: 45.196.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54425 (0xd499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:38:32 2024 GMT
Not After : Nov 25 09:38:32 2024 GMT
Subject: CN=6739b99c-42f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:e5:66:91:61:ce:e9:e5:48:bf:e6:85:92:
ed:22:70:0d:98:30:4e:8b:00:25:6e:a5:8a:e7:64:
dd:38:ee:44:ba:3b:ca:da:21:54:70:79:76:dd:52:
a1:80:26:7a:6b:e8:8c:c0:c4:90:51:ef:ec:45:7a:
e8:7b:fb:56:c7:7c:ad:a3:d5:57:ca:b2:da:1e:06:
05:a8:fa:41:6c:05:29:11:ff:62:16:e6:34:0d:c6:
f2:0e:8c:b0:21:59:9c:7a:70:2b:11:c4:55:8a:9c:
ae:be:f0:20:66:6f:78:d4:15:5e:11:18:99:dd:95:
50:c3:05:4b:d1:cd:3e:6c:1b:22:f1:63:0f:e9:ad:
60:74:ae:8a:c6:0a:93:cd:42:be:4c:78:fb:9d:02:
60:a1:bb:2f:e8:6b:ab:7b:39:11:71:7f:41:20:4e:
9a:c0:72:9c:2c:0d:83:6c:da:8a:97:8b:4b:4b:26:
cf:6c:18:f1:0d:7e:70:8b:b6:53:c7:4e:01:13:38:
b0:c9:9f:7f:b1:87:80:bb:fa:24:da:1a:82:76:a2:
26:19:8b:9a:15:1a:df:b5:d7:34:22:79:9c:e7:6a:
5b:e5:b9:9b:0e:cc:32:76:c6:c0:fd:62:f1:29:be:
4c:cf:8d:cf:d6:bc:2a:d9:b2:8c:f2:5d:ee:fb:95:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:02:3D:D0:70:26:3E:D1:71:79:11:C1:9B:EB:C4:E4:6B:D2:30:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7B2BAC8A4C711EFBA3D75BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.48.0/22
Signature Algorithm: sha256WithRSAEncryption
11:e7:1d:be:91:04:b7:60:0d:eb:20:48:36:d5:26:b3:5d:e9:
cb:d9:77:fb:51:f1:8d:98:b4:6d:3a:7a:46:d5:af:8a:be:88:
58:d7:f9:69:af:df:1c:24:b6:10:5f:8a:b9:e2:2a:e4:3a:f0:
6d:be:95:19:0e:f4:e7:25:3c:4d:b4:88:f4:b5:11:d9:b9:81:
1f:f8:62:8b:a6:e6:d2:4c:44:f1:c5:61:dc:0b:da:d3:2e:f9:
d8:f5:02:15:71:7c:5c:38:16:d1:67:25:f4:97:d6:58:4d:cd:
e6:c0:9a:77:2e:b3:34:b6:45:54:4a:e8:11:14:ab:a1:53:42:
b0:0e:61:2e:f1:a2:0a:3c:69:50:32:5e:e2:20:74:b2:66:2d:
5d:83:60:3f:b7:c0:d2:85:13:cc:2c:51:6c:53:02:5e:40:17:
25:c2:a5:a9:5d:a0:6c:23:78:c9:bf:12:59:5c:8b:8d:95:7c:
88:e1:03:25:13:e4:f5:e7:7a:47:4f:49:15:ce:85:ff:83:38:
42:81:47:79:04:d4:ae:d8:a0:79:b0:99:dc:4e:cd:76:0e:dc:
11:05:9e:55:33:4b:39:75:fa:78:5c:49:ed:2f:59:90:c1:ac:
23:dd:b5:6f:45:50:c6:47:8e:68:8a:42:ef:ef:26:cf:f8:fd:
ec:44:53:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:46 2024 by rpki-client on console-ams.rpki-client.org