Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B993E08CA74811EF93341F71762E951A.roa
File: B993E08CA74811EF93341F71762E951A.roa (raw, json)
Hash identifier: 8SlWHAn00F5rXUktd/zpfPYbuwiNygxc927RLyIdR/E=
Subject key identifier: 0F:06:F1:BA:6C:E6:99:C5:EA:0C:BE:49:E5:18:C5:9C:FF:B8:DC:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D690
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B993E08CA74811EF93341F71762E951A.roa
Signing time: Wed 20 Nov 2024 14:07:06 +0000
ROA not before: Wed 20 Nov 2024 14:07:03 +0000
ROA not after: Sat 30 Nov 2024 14:07:03 +0000
asID: 202656
IP address blocks: 45.200.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54928 (0xd690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:07:03 2024 GMT
Not After : Nov 30 14:07:03 2024 GMT
Subject: CN=673ded0a-3659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:65:14:12:17:32:63:60:97:2b:3b:6b:f1:90:
8f:6d:51:4c:88:e1:0d:a3:c8:d7:90:55:e7:74:4d:
f7:9b:18:95:6a:79:e8:2a:16:ed:1b:ea:ac:ee:9c:
f4:de:9a:79:8e:7e:e4:77:0d:dd:e1:a2:d0:aa:8e:
a0:9d:38:e0:cc:21:1c:88:4e:0d:bf:46:af:ce:0a:
2e:9a:f8:d0:78:cf:4d:8e:f3:9c:f4:e7:d6:03:b5:
9a:ec:5a:28:54:4f:82:4a:f2:02:48:49:43:c4:7a:
0a:fc:ce:c3:e3:ec:08:ec:58:fb:95:55:21:49:d1:
c6:a1:ca:ff:93:b1:9f:a2:0a:63:ab:bd:0f:5e:aa:
28:53:7c:86:07:4d:75:3d:b0:16:fa:a9:35:30:68:
aa:ab:22:37:60:c6:6f:fb:c8:cc:2a:ed:63:1b:80:
5c:ee:e3:05:2c:61:8e:ad:c4:f4:46:ff:72:2c:f0:
2d:0b:f8:69:98:89:e1:a8:aa:cf:ec:8e:10:f7:fb:
a6:e1:84:12:f1:1f:e9:d7:91:a8:83:db:0f:17:57:
f9:94:59:8b:c1:78:e6:8c:0b:56:f6:0a:40:47:65:
5d:33:c4:67:a5:c2:ab:a3:e0:85:33:62:e4:0f:0c:
12:14:0a:17:ed:0b:f0:11:52:73:1d:bd:84:25:63:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:06:F1:BA:6C:E6:99:C5:EA:0C:BE:49:E5:18:C5:9C:FF:B8:DC:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B993E08CA74811EF93341F71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.166.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:cd:73:69:31:b3:10:16:dc:cd:8b:fd:d9:a2:ee:f7:84:1a:
81:70:29:47:c4:7b:26:91:fc:de:55:52:d3:11:f2:3a:fa:2f:
fb:2f:89:ae:30:42:f9:65:b5:f8:80:76:45:05:5b:03:36:6d:
a3:05:06:05:a1:ab:ac:87:09:10:b0:e5:aa:85:95:63:f7:80:
5f:5a:d3:fb:e7:84:12:28:b4:d0:dd:9a:79:12:4b:77:0a:5b:
e3:14:4c:e0:e3:95:a8:d3:f6:64:43:99:1a:98:4c:fc:b4:73:
a3:4a:d2:d7:20:40:25:6a:e6:e1:d5:a8:00:17:69:1d:c0:ec:
94:be:3a:b3:14:3a:a1:31:a5:d5:e0:a4:6a:8d:2f:ad:50:ca:
ba:d7:c9:07:85:2c:99:b3:79:3f:31:30:a5:97:33:32:47:51:
63:9e:7f:c4:25:41:61:14:43:31:97:d1:be:fa:83:7d:41:ea:
a4:99:65:48:93:0b:01:68:54:34:08:43:ab:1a:dd:24:39:53:
cc:41:62:a9:9f:f8:10:0b:43:27:c6:0a:9a:fb:ca:e9:da:50:
13:ec:96:4f:bb:ec:40:3d:ad:8e:e6:54:e4:20:7d:4c:ab:37:
57:c3:4e:03:6b:c2:68:79:58:6f:2e:6c:7d:1a:49:c9:87:8a:
fc:d5:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:46 2024 by rpki-client on console-ams.rpki-client.org