Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE6135EC9EB011EFB6E58DB5762E951A.roa
File: BE6135EC9EB011EFB6E58DB5762E951A.roa (raw, json)
Hash identifier: qbYGWzsEkRXwWD7qThspGvY8T/dFsNhUmLlem2FGGdc=
Subject key identifier: F5:C0:3F:ED:23:EC:AB:F6:5B:34:37:E1:A5:FA:99:3A:62:C5:4C:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D03F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE6135EC9EB011EFB6E58DB5762E951A.roa
Signing time: Sat 09 Nov 2024 15:39:02 +0000
ROA not before: Sat 09 Nov 2024 15:38:58 +0000
ROA not after: Tue 13 May 2025 15:38:58 +0000
asID: 26617
IP address blocks: 45.195.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53311 (0xd03f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 9 15:38:58 2024 GMT
Not After : May 13 15:38:58 2025 GMT
Subject: CN=672f8216-0eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:a2:f7:83:17:70:f1:e3:82:f1:61:7b:ea:
14:d2:48:fa:b7:38:8a:5d:65:eb:f1:2d:0c:e5:1d:
5a:a2:91:05:db:84:62:5c:7a:e9:df:93:1b:49:93:
0f:76:de:44:5e:8a:16:52:85:11:57:3c:b0:6c:1e:
76:7a:3b:f0:77:5a:23:8c:a6:36:84:11:9b:7b:76:
7c:30:1e:ee:72:61:e0:f6:c2:2b:26:e4:db:5c:18:
28:bf:3d:5e:07:b3:8b:5f:72:60:5b:66:d8:4d:4a:
a5:f7:7c:4f:7e:5b:39:33:60:ed:28:14:08:93:30:
e4:91:1c:8e:82:0f:7e:fd:db:2e:ca:95:e0:1f:77:
fc:37:43:42:87:a7:8b:b9:d9:77:f3:aa:f2:12:a1:
c3:85:8f:bf:96:3b:f6:2d:d9:b5:8f:d3:19:b1:52:
5a:21:78:8f:19:21:fe:a2:89:3b:2b:b7:39:65:89:
a5:27:5c:51:df:12:5d:39:82:ba:a7:29:a7:7b:7e:
2e:87:b5:07:81:68:67:7f:45:de:83:51:eb:a8:e9:
5e:5b:b4:1b:0f:ff:7a:e6:d9:17:b5:a6:e6:8c:0e:
a8:78:a1:44:ea:99:32:eb:f3:72:cc:91:4e:6a:bb:
ac:3e:a0:12:09:72:56:45:71:b6:22:fd:c0:a2:f9:
ed:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C0:3F:ED:23:EC:AB:F6:5B:34:37:E1:A5:FA:99:3A:62:C5:4C:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE6135EC9EB011EFB6E58DB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:17:5c:16:df:73:f4:ab:c0:e7:0b:89:c6:13:29:f0:03:03:
fb:b3:50:ee:7f:d2:56:3e:70:ac:cb:eb:40:df:1e:a2:19:03:
a7:b8:9f:71:30:fb:a4:e2:40:e6:a8:9f:e7:0b:a9:2a:71:6f:
42:b6:af:6d:d9:dc:14:94:d5:e7:63:ee:35:4a:d2:07:26:b9:
ca:a3:14:61:46:e9:ac:b3:43:6b:bc:ce:d1:c2:fd:3a:62:79:
05:48:d1:c4:b9:76:53:87:ad:52:58:34:90:13:b8:ab:b5:bb:
bc:d9:8f:3c:4a:97:d0:9c:56:cb:1d:b5:76:6c:2c:33:9b:f7:
8e:66:60:18:16:0e:6b:48:b2:21:8b:ff:0a:bc:94:fe:e8:68:
a8:ab:3e:88:95:78:6c:08:a1:52:4b:4b:7b:74:3d:5d:77:ee:
d6:4d:7f:5f:84:11:30:9f:d5:1a:be:92:5f:09:b8:8c:df:fe:
87:b2:ad:c4:68:e9:bd:af:2b:27:82:a0:c2:85:70:b3:bd:b4:
79:bc:a6:e7:6f:39:14:52:ea:ed:e0:af:ed:98:e2:88:c8:05:
00:17:fe:9a:f0:db:23:a9:b0:dd:09:d9:ff:60:1a:ca:42:19:
24:b0:b2:f7:18:74:84:fa:4f:fb:37:79:9a:1f:a1:b9:0b:95:
ad:d8:46:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:47 2024 by rpki-client on console-ams.rpki-client.org