Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBADD802A25D11EFAA989E83762E951A.roa
File: DBADD802A25D11EFAA989E83762E951A.roa (raw, json)
Hash identifier: RphEwcOBUgDfbgp9Z/BwfNTXjMLgum/DFEbeHQlC03o=
Subject key identifier: B2:BF:2C:6A:B5:C9:AC:B6:EE:FC:C9:FA:4E:FC:89:BF:AA:08:9D:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D283
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBADD802A25D11EFAA989E83762E951A.roa
Signing time: Thu 14 Nov 2024 07:55:47 +0000
ROA not before: Thu 14 Nov 2024 07:55:44 +0000
ROA not after: Sat 14 Dec 2024 07:55:44 +0000
asID: 6079
IP address blocks: 45.205.86.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53891 (0xd283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 07:55:44 2024 GMT
Not After : Dec 14 07:55:44 2024 GMT
Subject: CN=6735ad03-e209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f5:88:65:80:45:0f:fd:41:00:77:05:72:dc:
f9:dc:de:5f:d8:f5:95:75:b5:aa:f1:4f:13:00:fa:
4b:a9:b1:d7:5d:9d:21:d0:03:b2:4c:22:e0:51:df:
b5:cb:4a:d7:a9:5c:ea:0e:f4:83:ad:a0:9f:43:18:
3e:07:3a:8b:bc:2f:04:da:4d:16:d5:0e:06:d7:9a:
35:f1:f7:ed:42:21:f6:5b:8e:2e:1d:9c:d0:b6:25:
35:82:06:01:fd:44:00:7f:5a:1c:8f:be:c5:0c:42:
ed:8c:e6:71:96:c6:81:d2:35:32:e4:bc:89:55:91:
f0:8c:38:93:41:01:98:a6:38:84:0e:17:e6:33:30:
06:2f:d0:38:82:8b:1f:d4:1f:d1:3c:8a:5b:45:45:
d8:6c:1e:10:46:e1:c5:b0:12:fa:43:a2:71:f2:fe:
08:54:b2:78:f5:8e:6d:63:2b:f1:b0:19:41:0a:f2:
69:e0:f8:2b:e6:58:ba:10:e4:cf:ca:3b:ed:f1:ce:
ee:16:a8:ce:a5:ca:53:39:cc:f8:2d:a3:99:aa:f0:
30:46:97:9c:7d:2b:4f:08:96:2a:fb:d7:8c:79:25:
a9:0e:c8:e8:85:a6:a6:9f:f0:94:75:46:ea:23:81:
39:fa:ab:e1:86:bb:f7:2c:cd:8b:46:83:43:37:1b:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BF:2C:6A:B5:C9:AC:B6:EE:FC:C9:FA:4E:FC:89:BF:AA:08:9D:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBADD802A25D11EFAA989E83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:41:4f:fd:da:f5:6c:b3:84:95:d9:f3:56:50:19:26:b1:e5:
49:e0:20:bc:19:92:81:04:75:47:c8:96:19:c7:7c:ed:5c:4a:
6b:c2:0f:b2:8b:bf:a3:1a:4b:e4:21:e8:4f:93:67:6c:6f:33:
1d:09:23:a8:b1:71:1b:52:ff:c8:08:14:b3:a5:7d:65:fa:b7:
44:23:07:32:d2:2c:dc:1d:39:96:1f:01:0b:99:70:ac:a1:d5:
e8:2e:ff:ba:d6:51:e6:93:a4:67:e3:85:a3:fb:80:d6:96:21:
36:3a:20:2d:20:e2:c3:e5:fb:df:b6:db:ae:65:f0:e2:50:e4:
17:1d:9e:50:b6:6e:be:e8:0e:1d:95:3e:8c:f6:62:fa:4b:9d:
98:87:51:e4:d5:e1:46:99:a8:8d:80:4a:a2:71:14:75:90:4a:
cc:e1:f5:67:12:9f:b5:36:5e:f3:d8:da:49:d0:40:75:13:f5:
5d:5b:04:6f:47:a6:87:c1:af:7c:ed:2a:fe:4d:56:79:5c:9d:
04:6e:0f:84:85:0e:8a:79:fe:44:6d:77:59:1c:96:42:72:8e:
bf:ce:71:b4:b8:11:68:08:38:b5:34:f4:a3:8b:21:e5:b7:4c:
d2:cd:bf:87:c2:3a:de:36:9a:e1:70:da:7f:8a:ba:6e:21:43:
a2:e0:ae:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:50 2024 by rpki-client on console-fra.rpki-client.org