Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDBD71DEA43D11EF8738A051762E951A.roa
File: DDBD71DEA43D11EF8738A051762E951A.roa (raw, json)
Hash identifier: 3C3EujOQuvX3vHrer3+2ehz3S70wf58CUrs9HY0cT+M=
Subject key identifier: F1:CB:D7:73:70:6B:52:B5:77:D5:6E:41:28:EA:C6:39:3E:0F:97:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D34A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDBD71DEA43D11EF8738A051762E951A.roa
Signing time: Sat 16 Nov 2024 17:11:49 +0000
ROA not before: Sat 16 Nov 2024 17:11:46 +0000
ROA not after: Tue 10 Dec 2024 17:11:46 +0000
asID: 54252
IP address blocks: 45.199.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54090 (0xd34a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 17:11:46 2024 GMT
Not After : Dec 10 17:11:46 2024 GMT
Subject: CN=6738d255-9c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:6e:df:81:66:9d:78:0c:ad:47:57:f2:33:
5a:dd:cb:12:63:44:4a:b4:7d:40:5b:36:cb:e2:6e:
f8:b1:db:3a:d2:62:67:80:dc:62:ee:19:db:d1:53:
de:4f:2b:75:79:b8:25:44:2c:40:8a:ca:c8:92:d0:
d3:af:df:94:6d:72:e1:f5:fe:2b:e0:db:d3:8e:e3:
3a:0b:2f:9e:a1:1b:cb:27:3b:ae:3b:28:a5:73:3c:
2b:ed:c8:e2:78:e8:9e:53:6b:f8:2e:6f:8f:dc:f9:
c4:44:36:47:ed:b2:dd:4d:2b:e2:e6:cc:84:a7:4c:
eb:5b:7f:8e:dc:e4:07:55:6e:29:2f:64:47:da:80:
47:17:02:9c:37:b2:d1:28:91:8b:40:44:56:87:69:
47:9f:f1:e1:aa:e4:ce:71:f6:c9:0a:ac:ee:e3:63:
28:4a:4a:79:89:98:5e:d3:08:5e:54:7c:be:b1:b3:
df:18:23:fb:4b:38:e3:0d:24:88:0b:2f:b4:2a:c7:
d9:b0:e8:0b:cc:0d:90:23:cf:6f:2d:b8:c5:06:0d:
55:29:59:d1:17:f2:b3:0b:5b:2a:d0:7a:95:a6:27:
d8:4b:92:55:4e:22:e0:cc:96:59:43:c7:ca:ac:b3:
f0:57:3d:27:79:1f:93:1a:4f:f9:0d:c3:54:8f:91:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CB:D7:73:70:6B:52:B5:77:D5:6E:41:28:EA:C6:39:3E:0F:97:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDBD71DEA43D11EF8738A051762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:68:44:22:0a:5a:79:36:9a:4d:95:e7:6e:a2:cc:8d:24:68:
48:4d:c1:33:ce:6a:20:7c:4b:94:5f:e3:af:f4:36:b9:ed:f1:
62:6e:54:db:85:a3:58:99:7b:fc:bb:52:86:91:64:17:e1:f5:
44:ee:66:d0:bd:35:70:04:d6:79:f7:87:11:1f:93:32:a2:d6:
c8:d0:32:11:29:94:ac:6b:ce:ec:fe:ad:76:0d:d1:7d:ae:d9:
57:a6:34:03:1f:53:17:fa:ff:85:a2:33:3c:64:a4:92:4b:0c:
6d:ab:aa:90:de:62:c0:2c:ac:e5:34:26:c3:bd:e9:d4:44:fe:
c7:a9:68:9f:39:99:0e:78:d6:d7:e4:f0:30:8c:1e:ce:c9:bd:
4b:c7:11:2a:cb:f2:1a:7d:91:37:10:8f:af:83:a0:89:77:45:
f8:7e:72:8f:4d:b4:e8:c3:28:04:56:95:37:be:76:2e:75:a3:
02:c2:c1:0c:96:a2:8e:b3:c2:0e:5e:ec:4c:52:70:7d:01:be:
9c:f9:e8:b5:95:e7:b3:d6:8b:38:7f:23:47:00:99:1e:c2:3a:
65:58:0d:fa:dc:8b:86:b9:ac:77:b3:ac:1f:9e:44:3f:6c:d9:
a2:da:dd:57:6b:d5:46:be:c1:f5:80:52:9b:b4:9e:e1:59:3d:
ac:83:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org