Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDE59D24A74B11EFBEA24E85762E951A.roa
File: DDE59D24A74B11EFBEA24E85762E951A.roa (raw, json)
Hash identifier: htc1jYX6hdj2cU7q8oZtkS54q8GkE0b1fCv4vOEYoZM=
Subject key identifier: 83:5C:9A:0C:7A:A7:5E:0E:E3:29:C8:84:69:24:9D:F1:54:CF:32:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDE59D24A74B11EFBEA24E85762E951A.roa
Signing time: Wed 20 Nov 2024 14:29:36 +0000
ROA not before: Wed 20 Nov 2024 14:29:33 +0000
ROA not after: Sat 30 Nov 2024 14:29:33 +0000
asID: 202656
IP address blocks: 45.199.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54964 (0xd6b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:29:33 2024 GMT
Not After : Nov 30 14:29:33 2024 GMT
Subject: CN=673df250-be26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c5:15:ae:78:14:b4:a7:ed:96:02:e8:2e:10:
e1:e6:b9:1b:dc:fb:03:26:8a:4f:b0:01:93:60:bb:
f0:1e:ad:0a:2f:f6:a8:8b:43:30:53:ab:5d:9d:74:
7a:ff:0e:0f:8a:be:72:6c:45:31:3d:14:b5:2c:79:
9c:fc:d5:6c:d1:b6:3b:63:c7:d4:42:d2:71:38:a0:
55:4e:46:2a:4e:1a:91:f5:a9:3e:fd:bc:a2:62:d4:
1b:4c:59:fe:16:fe:f5:f6:af:ef:b8:e1:a6:b2:68:
cd:c5:c9:07:96:8a:15:db:84:09:3e:f3:93:51:85:
d4:b6:dc:12:02:73:f4:02:f9:ee:8c:2f:da:cf:18:
27:65:73:10:7b:ed:87:5b:44:1b:1e:c0:25:2a:98:
c6:81:1b:b1:ec:ca:01:9d:48:12:0f:4a:4b:ed:4d:
ce:ca:53:ee:15:33:4f:ec:32:f7:6d:42:ce:22:38:
68:bd:20:4a:d4:dc:59:a8:46:33:d9:50:0a:d3:ba:
6b:95:e9:f7:22:23:7b:dc:9e:3c:60:d7:56:37:48:
08:61:4a:d9:d9:5c:b1:3e:de:05:44:0d:fd:73:63:
27:fa:f9:45:a2:72:29:e8:bb:fc:c7:1d:f9:3f:c2:
93:88:8b:c6:7e:c7:d2:81:9b:f5:bb:19:b7:cf:2a:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5C:9A:0C:7A:A7:5E:0E:E3:29:C8:84:69:24:9D:F1:54:CF:32:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDE59D24A74B11EFBEA24E85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.204.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:d0:f2:86:38:44:81:ad:c6:67:e1:49:2e:ee:fe:ca:78:d0:
82:17:de:0f:01:f9:ee:e4:64:83:2f:db:01:ff:cd:02:65:bf:
3f:37:35:46:49:85:e8:71:bb:6d:a2:9a:f0:ec:c6:92:08:7c:
18:31:6b:db:5f:f5:52:82:e4:7e:c5:37:3e:e2:b9:fa:36:a0:
b1:19:76:99:f0:8e:26:1b:0b:af:9c:74:cf:37:d0:c3:a7:46:
69:b2:cc:b7:c4:6b:b6:67:47:67:75:e4:68:9c:6e:b9:2a:a7:
6a:64:60:10:3a:38:6c:35:2f:41:43:8e:f9:81:9f:38:08:10:
68:00:a9:52:c8:4c:be:68:cb:a3:9f:0b:e0:a0:3e:6c:0c:34:
4e:01:93:06:37:fe:73:95:3d:59:0a:61:78:59:4b:af:93:b7:
b0:e6:27:1f:b5:c6:29:20:4a:65:63:1e:09:60:35:f5:c5:3e:
ab:10:79:ce:4b:f3:db:f6:5b:cf:9d:65:b2:5c:ca:e1:64:5d:
13:4b:3c:44:eb:25:a6:40:02:05:90:74:3e:6b:9a:aa:e5:4a:
06:42:2f:44:f9:a0:c0:e7:6e:7b:6f:7d:27:aa:41:84:36:b9:
be:59:d4:16:8c:61:80:38:cc:12:ea:a7:67:e5:c8:b4:1f:f0:
4f:e4:03:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:50 2024 by rpki-client on console-fra.rpki-client.org