Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDD3F12CA4C711EFBD03A3BC762E951A.roa
File: DDD3F12CA4C711EFBD03A3BC762E951A.roa (raw, json)
Hash identifier: 5oI6WB3jTS1pAGeGy8x+D87iXzUcAiW4daLkosGUXDA=
Subject key identifier: 78:FF:8B:AE:C7:EC:A2:7D:F3:62:A3:86:19:50:7B:49:1A:7E:D1:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D49B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDD3F12CA4C711EFBD03A3BC762E951A.roa
Signing time: Sun 17 Nov 2024 09:39:40 +0000
ROA not before: Sun 17 Nov 2024 09:39:36 +0000
ROA not after: Mon 25 Nov 2024 09:39:36 +0000
asID: 7029
IP address blocks: 45.196.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54427 (0xd49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 09:39:36 2024 GMT
Not After : Nov 25 09:39:36 2024 GMT
Subject: CN=6739b9dc-ef01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b4:ba:af:5d:cd:69:1c:d7:34:67:5d:f2:4e:
88:66:fe:aa:50:bf:64:03:72:46:7e:f5:de:c6:7d:
6f:32:6d:7f:cf:87:23:2b:bd:ed:f4:af:5d:c9:83:
70:15:ce:33:0c:56:fc:d4:44:21:a3:7f:ea:f7:55:
bb:ca:15:ba:18:a7:45:0d:d5:ec:21:59:7a:6b:c6:
a6:87:6c:a1:29:6d:03:60:b9:28:dd:37:f2:68:91:
d5:cd:66:b2:ef:2d:d7:6b:2e:3d:27:a9:9b:ac:03:
74:d5:4d:f6:f2:51:1c:21:f5:00:79:02:82:c6:60:
e2:d6:ab:fc:f1:e4:90:be:e3:1d:27:4d:36:ca:0a:
a1:09:29:23:a0:de:e7:77:45:13:21:80:ca:05:2e:
e8:d0:7e:4c:34:65:4c:d9:2a:1a:b1:a0:b0:a9:ea:
ff:2d:04:9b:19:c1:60:af:09:46:4f:1e:db:dd:e0:
06:25:fd:49:8d:8c:d5:92:b8:c4:6b:1d:8f:94:5f:
57:3e:a5:49:a5:f5:16:a2:23:2b:89:ba:a6:5e:81:
7d:09:66:a8:5b:b2:34:ef:02:8f:55:6e:3b:ba:d3:
b2:47:e2:ad:16:a3:0e:53:09:3a:9c:99:bb:e6:c3:
8b:07:ef:d3:84:3b:75:e3:06:b0:d5:c1:77:09:55:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:8B:AE:C7:EC:A2:7D:F3:62:A3:86:19:50:7B:49:1A:7E:D1:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDD3F12CA4C711EFBD03A3BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.40.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:b9:ad:31:a2:b8:1f:bb:48:68:e4:b4:82:ef:dc:10:05:3d:
a4:5f:27:95:71:56:f1:3e:3a:63:ed:ad:d5:3e:03:0e:27:36:
a9:8e:b1:93:34:ab:b7:a7:e9:4b:37:27:ae:f1:5d:88:39:0c:
36:01:02:4c:3b:1d:98:5d:43:84:62:9e:84:28:57:e3:72:72:
18:21:c3:ba:42:3a:fa:60:3d:14:91:f3:95:5c:95:e8:47:2d:
5a:1a:2f:13:e2:66:ed:b0:84:1f:7e:92:76:5c:a3:67:c1:38:
7b:3e:a7:4b:26:0d:58:bd:72:83:2d:f8:99:6b:4c:80:5c:aa:
fc:58:3e:d0:c2:dd:a9:36:b3:9c:9f:8b:55:b7:ba:92:aa:08:
4c:a0:cf:d7:64:7e:66:9f:71:60:d2:1c:78:1b:ac:44:a7:42:
48:9e:cc:6c:cd:28:fb:1d:2b:de:81:4e:be:95:5f:6d:d2:50:
59:4e:aa:da:7d:77:c6:07:2d:ec:06:6d:88:08:31:90:20:08:
ca:af:db:df:37:e3:e5:dd:f6:d6:8d:6a:78:fd:a6:f8:40:d5:
37:2b:11:d5:2e:b8:0d:5f:fb:f2:c8:64:3e:86:f5:3d:f6:35:
00:b1:0b:6f:2b:8d:f8:6d:34:51:88:7a:84:d9:af:7c:d5:57:
32:bb:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org