Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D78F20FEA44811EF9617E095762E951A.roa
File: D78F20FEA44811EF9617E095762E951A.roa (raw, json)
Hash identifier: iL1aWMbVLs9MpcGaUbUXq6gE4GtDl3eE5ef+87Qbj2g=
Subject key identifier: E2:3D:21:09:2B:36:AF:02:A8:7E:89:D2:4B:63:45:65:51:9C:20:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D390
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D78F20FEA44811EF9617E095762E951A.roa
Signing time: Sat 16 Nov 2024 18:30:23 +0000
ROA not before: Sat 16 Nov 2024 18:30:20 +0000
ROA not after: Mon 25 Nov 2024 18:30:20 +0000
asID: 22773
IP address blocks: 45.196.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54160 (0xd390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:30:20 2024 GMT
Not After : Nov 25 18:30:20 2024 GMT
Subject: CN=6738e4bf-8735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c1:60:54:c7:e0:94:8c:cc:c2:1b:9c:83:ce:
a1:b5:b9:0c:e2:42:8e:da:34:54:d0:e0:4d:f6:93:
1c:67:cc:5c:f1:10:db:c1:c7:ed:22:7b:37:24:4b:
a5:78:6d:88:8e:ca:b4:d6:cc:92:b0:2d:b6:89:81:
9c:a4:5e:49:23:96:f7:89:c7:d6:31:20:4e:7c:f1:
e7:99:2c:71:e3:b2:2d:62:57:af:56:00:1a:c0:fe:
69:9a:e6:cd:46:56:04:16:ef:f6:f5:c0:6f:5e:84:
27:30:ed:02:56:5e:a3:de:25:01:1b:f7:8e:d8:5d:
7d:25:90:a2:19:3c:4d:b9:4d:75:41:bd:27:23:39:
9a:40:e2:cb:36:dc:e7:9c:7e:e8:3c:52:78:31:d6:
f8:67:a3:18:a3:c4:f9:b6:aa:c3:6f:47:c7:94:98:
25:f3:f4:1e:93:6c:b8:79:e7:cd:99:c7:f5:4f:51:
1d:fd:23:16:e5:e6:43:ce:44:08:dc:a6:f8:1a:76:
62:72:71:3e:87:cd:ce:a8:4c:85:ee:1b:84:40:36:
c0:0b:77:30:e5:0b:20:f6:a4:8c:d4:4d:fe:35:5d:
ae:4d:3e:34:12:a8:18:d8:b8:8c:20:08:be:83:1e:
1f:c9:b3:2a:32:b4:b0:9a:3a:2b:ce:06:ba:3f:2a:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3D:21:09:2B:36:AF:02:A8:7E:89:D2:4B:63:45:65:51:9C:20:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D78F20FEA44811EF9617E095762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:68:d6:7f:43:1d:88:ab:72:4a:32:8c:91:89:ea:65:aa:d7:
b7:7c:4f:65:91:89:68:7e:5a:4c:a8:f0:0a:9c:d7:c2:44:7d:
81:55:30:df:2f:7a:5a:4d:40:c7:9f:29:d4:78:97:51:90:43:
fe:69:4c:0d:8d:27:e4:5e:ca:14:fb:d8:be:7f:13:6e:ea:9e:
6a:62:ff:03:26:a4:69:fd:61:df:47:51:b4:50:a6:b1:c2:b9:
e6:cc:67:9f:c8:ab:47:47:9c:f2:7b:61:86:b6:d2:9f:8f:2e:
2c:72:1e:3d:da:e3:ea:20:c3:62:96:87:54:e1:ab:58:89:07:
3a:00:37:d0:79:a6:5e:f5:5c:42:ab:f9:ec:f1:4c:e5:f9:60:
7a:44:e2:ea:e3:30:42:a9:3d:57:bc:19:ab:e3:10:ea:05:1a:
89:d4:3f:67:e5:81:79:88:36:9d:eb:d3:e5:32:7e:90:ed:2e:
1e:1f:da:ba:30:f1:22:8c:70:ab:d3:11:86:6e:d5:16:b9:aa:
4b:70:4c:dd:af:7e:35:44:2b:bf:fc:d7:c4:da:50:63:a2:35:
5f:79:c0:42:a5:26:70:8d:8c:e1:d2:2b:a2:6b:aa:2a:3e:04:
dd:50:08:43:69:fb:f5:82:ce:08:ee:c6:9e:e4:64:49:22:c4:
ba:db:65:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:49 2024 by rpki-client on console-fra.rpki-client.org