Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B972F02217E511EF81D6282A017001B1.roa
File: B972F02217E511EF81D6282A017001B1.roa (raw, json)
Hash identifier: NAojQTKKM/knSjGuMPyYA1k3fj0gF+WSFY7qx6qAKdI=
Subject key identifier: 11:6E:36:86:B1:B2:AF:70:64:8F:9C:90:C1:A1:14:47:14:DE:57:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 8B0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B972F02217E511EF81D6282A017001B1.roa
Signing time: Wed 22 May 2024 02:48:10 +0000
ROA not before: Wed 22 May 2024 02:48:06 +0000
ROA not after: Mon 26 May 2025 02:48:06 +0000
asID: 212552
IP address blocks: 45.195.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35598 (0x8b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 02:48:06 2024 GMT
Not After : May 26 02:48:06 2025 GMT
Subject: CN=664d5cea-d9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:9c:e7:b0:40:51:f6:f7:56:71:cb:6e:b9:
bd:b1:a3:25:8a:03:01:68:f3:a0:f7:4b:aa:6b:49:
94:94:73:25:8e:8f:94:ab:43:95:69:27:53:b0:e5:
80:b6:c0:f3:32:24:d2:ca:de:7b:11:d2:ee:89:2c:
15:5e:e7:2b:46:b4:54:13:83:41:06:70:0d:8f:28:
53:24:9d:dc:32:e7:23:03:87:25:0e:fb:25:eb:40:
0c:49:dc:32:ec:bd:35:f8:20:36:24:30:e0:88:fd:
90:93:e6:92:8e:4e:cc:6c:ea:9e:af:47:80:57:81:
a2:3b:0b:9c:82:85:b3:5a:ed:b9:13:8e:de:8a:a5:
4b:4d:1c:69:44:52:8b:cd:dc:6c:1a:6a:46:29:b1:
7e:93:1c:c0:aa:ef:3a:16:eb:46:96:eb:de:ca:c3:
84:65:b5:32:89:1b:63:44:3c:01:1d:1c:84:d1:57:
1a:e6:f2:c2:1e:3c:4c:e2:6b:e9:c9:45:ac:61:d6:
e5:22:29:fa:5d:ac:f9:3c:d6:67:f0:67:e2:90:22:
b5:f9:8a:0c:ab:83:16:c0:6e:31:62:2c:5c:27:fd:
e6:bc:71:66:2d:86:3a:dd:c3:f2:4e:a5:27:34:20:
5a:07:0f:73:86:76:66:73:f3:b5:94:62:69:01:d4:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6E:36:86:B1:B2:AF:70:64:8F:9C:90:C1:A1:14:47:14:DE:57:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B972F02217E511EF81D6282A017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:57:c0:31:33:63:b6:7a:f9:13:df:e8:58:f1:1b:23:0d:8d:
5b:c2:48:f3:00:b0:8c:3c:77:73:71:7b:df:2a:37:e9:df:de:
b4:89:0a:44:a5:6c:a5:dd:79:ed:53:78:b6:51:d7:31:31:15:
a3:ee:a0:f8:72:7f:e0:4d:28:6a:7b:30:68:06:44:de:8c:6b:
29:fc:5c:a2:d6:8a:4f:e5:7a:09:43:f7:b9:31:be:12:e6:c2:
bd:b0:f2:5c:f3:92:d6:b5:5a:0a:f6:93:31:ad:a2:51:ef:ef:
20:5c:a2:47:58:00:b7:ce:5a:8c:28:93:37:84:67:b0:e0:ee:
35:af:ce:d8:e8:8c:26:66:8f:8f:59:33:15:d4:26:fa:94:84:
92:dc:52:8b:76:5e:61:43:e8:c9:97:33:99:4b:b8:f8:b9:48:
29:83:6c:95:1d:ee:b6:30:a6:6a:df:7d:d0:c6:8c:04:8a:dc:
2d:1a:18:3a:38:f7:a5:2e:70:1f:ec:53:7b:12:61:be:da:07:
72:7d:77:9e:97:a4:fe:a1:e8:27:ce:a2:32:ec:b1:59:34:0f:
32:ca:46:f7:dc:7f:31:4f:86:a1:11:15:6d:9f:6e:96:8d:36:
ce:04:50:9f:b6:7f:89:a3:0a:28:3c:77:02:29:1b:58:7e:10:
e9:aa:f3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:45 2024 by rpki-client on console-fra.rpki-client.org