Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C10E6EA4A73411EFB5C5E573762E951A.roa
File: C10E6EA4A73411EFB5C5E573762E951A.roa (raw, json)
Hash identifier: a88R3frs4g3n5QPfj3Be7DjX/nHChoUbfhGB4RkeuNA=
Subject key identifier: 63:49:61:70:86:1C:06:23:EC:FE:AC:EC:4D:1B:AA:90:EE:DA:52:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D5E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C10E6EA4A73411EFB5C5E573762E951A.roa
Signing time: Wed 20 Nov 2024 11:44:09 +0000
ROA not before: Wed 20 Nov 2024 11:44:05 +0000
ROA not after: Mon 02 Dec 2024 11:44:05 +0000
asID: 5065
IP address blocks: 45.203.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54759 (0xd5e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 11:44:05 2024 GMT
Not After : Dec 2 11:44:05 2024 GMT
Subject: CN=673dcb89-a438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ef:b1:95:cc:bf:5b:9c:4b:fa:3b:a9:5c:8f:
32:bd:6f:31:c1:64:cb:53:8a:a2:f2:1a:54:18:8f:
63:6d:2a:e5:a0:58:63:2a:80:9e:e1:b1:fa:80:dc:
e0:20:e4:ca:02:9b:fc:35:bf:a9:56:a1:7f:a4:12:
27:47:71:64:0b:4c:e4:76:1e:e6:0f:bc:6a:be:ce:
63:64:78:4b:55:42:21:95:b8:af:60:59:66:28:83:
8a:76:18:d3:ed:fa:07:cd:c5:c6:8c:5c:d6:32:66:
ef:26:01:63:f4:00:e2:c3:ea:e9:e8:a6:b7:53:2a:
74:16:30:a2:82:c5:46:37:45:e0:3f:00:ef:fe:04:
37:72:c6:93:d3:93:69:09:84:8a:e3:3f:19:f8:3f:
c8:96:55:19:7f:69:31:88:af:47:8c:f8:bd:ab:f9:
3e:cf:0f:33:c6:c3:07:8f:a3:b4:b5:ee:c0:3f:63:
f4:49:86:a8:6f:12:03:0d:c4:3d:ec:9e:58:45:b1:
39:a0:19:c6:68:7d:22:bd:ca:d9:89:45:ad:5f:4a:
c2:76:b2:20:2f:bd:58:49:dc:12:b0:ab:96:15:1c:
eb:94:01:36:37:ca:c0:0f:fe:a7:c3:31:e4:d2:8f:
f5:e6:1b:e1:f5:4d:c2:55:c1:1b:70:cc:71:65:4e:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:49:61:70:86:1C:06:23:EC:FE:AC:EC:4D:1B:AA:90:EE:DA:52:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C10E6EA4A73411EFB5C5E573762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.61.0/24
Signature Algorithm: sha256WithRSAEncryption
07:43:9b:58:0b:aa:35:db:6f:d2:1d:8f:c9:ba:e9:58:2b:97:
f4:42:9a:a8:bc:37:c4:ab:d6:e7:89:34:05:22:07:0b:11:75:
29:ad:bc:11:87:ad:0a:db:5d:5b:9b:56:c0:eb:9a:bb:dc:5c:
2f:74:f6:3d:51:66:b6:0a:8a:dc:5a:66:d3:1e:ee:26:b7:a2:
20:52:99:c6:5f:0c:55:37:40:bf:cf:15:dc:5e:a2:ef:e9:de:
3c:b2:87:72:d9:68:e9:5c:87:87:ae:94:6b:ed:cb:4c:30:f7:
bc:e3:04:5c:ee:fa:44:a3:b9:69:47:b2:8c:5a:42:a5:0e:11:
b9:64:84:f4:86:00:fd:6c:12:65:3a:8a:fe:cf:73:5b:6f:8c:
d1:77:0e:b7:cc:de:5f:18:e5:5a:38:9d:e3:96:a4:e8:9c:02:
c8:68:a0:e1:f8:f9:df:9b:a0:fb:59:64:03:59:d5:84:ac:82:
03:70:44:3f:d8:82:77:87:60:0e:6f:ee:33:5d:f4:c3:fc:70:
74:87:b2:3d:0c:69:37:00:06:fc:e6:05:47:f0:8c:a4:6c:f0:
3b:eb:10:8f:cf:32:43:df:14:26:b8:ef:35:9e:17:a5:42:55:
80:39:ca:ca:49:85:50:aa:c4:cf:b6:7b:6f:83:72:9a:fa:25:
09:43:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:48 2024 by rpki-client on console-ams.rpki-client.org