Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE037D54A26311EFA0E3B0A7762E951A.roa
File: DE037D54A26311EFA0E3B0A7762E951A.roa (raw, json)
Hash identifier: ZNF6qBR1nUkg8EALVvWAK1+yLsLaAhSBYKbMHVKT54k=
Subject key identifier: 1B:20:52:B7:B3:CE:BA:66:72:96:F8:5A:04:05:89:32:7B:6B:70:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D2A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE037D54A26311EFA0E3B0A7762E951A.roa
Signing time: Thu 14 Nov 2024 08:38:48 +0000
ROA not before: Thu 14 Nov 2024 08:38:45 +0000
ROA not after: Sat 21 Dec 2024 08:38:45 +0000
asID: 138456
IP address blocks: 45.202.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53929 (0xd2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 14 08:38:45 2024 GMT
Not After : Dec 21 08:38:45 2024 GMT
Subject: CN=6735b718-062c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:a9:e6:d2:de:0a:b4:2f:4b:6a:8a:04:6b:
cd:26:8a:7c:fb:2f:31:11:5c:53:99:3e:3c:7f:15:
ea:31:fd:16:e7:f5:23:8d:d0:e2:0e:31:79:fa:32:
02:67:1e:ad:78:ec:b5:a1:7a:23:c0:0d:55:08:dd:
fa:ce:f1:5b:50:1e:9b:45:8a:41:6d:75:c0:25:d8:
63:5d:9f:4e:a2:84:20:7f:c4:bf:07:13:d3:32:64:
83:f0:57:1e:6e:78:84:c4:48:1a:ac:3c:79:25:e5:
8a:d2:bd:cd:e1:57:94:11:67:77:c3:a2:8e:6f:03:
7d:f2:69:69:92:a2:bb:a5:b1:ac:98:84:7d:76:9e:
d5:66:b8:45:90:2e:68:d4:cf:90:17:5d:14:ab:07:
b5:cf:bc:43:c5:d5:b8:04:18:e8:b5:ff:2a:fa:fe:
81:60:bc:08:d4:9c:fe:18:8a:c5:e5:33:7c:1e:a9:
40:b0:74:f4:b3:5e:42:98:7f:24:ff:eb:3b:5a:fe:
e1:8e:0b:1f:bc:b2:74:ea:2a:f0:56:e8:ba:d5:33:
27:f3:1a:36:c7:e2:8b:6e:6a:73:da:f4:5c:a7:79:
f4:76:3e:20:f4:24:c5:98:6c:04:b4:26:7e:91:14:
c3:ab:8d:97:69:34:0c:a5:c4:31:a7:8b:a5:c5:34:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:20:52:B7:B3:CE:BA:66:72:96:F8:5A:04:05:89:32:7B:6B:70:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE037D54A26311EFA0E3B0A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.194.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:fd:d3:72:72:03:83:dc:34:58:1f:cd:1a:d8:83:6e:82:91:
80:08:68:b6:cb:15:23:11:68:09:53:30:2f:82:f2:e8:ab:6a:
98:a9:5f:4e:3b:0e:57:02:b8:47:96:b3:85:a9:2f:24:aa:c5:
c3:ae:9d:a6:ed:30:a7:64:07:8a:95:9d:73:17:d3:cd:c4:b6:
8a:fd:69:cf:c3:a7:73:92:e5:1e:ff:27:7e:d5:f8:7c:0e:84:
c3:28:7f:07:90:e3:75:b6:8a:95:b6:83:e7:4e:2d:e6:2f:b9:
55:0d:63:c9:c9:eb:a0:26:9e:53:b7:d1:de:56:40:4f:d3:95:
fe:b4:2c:d4:7f:e2:9b:29:c6:b6:2c:da:a9:0b:39:1f:b2:b2:
59:53:e3:8a:10:3e:9a:a5:44:fb:7e:42:77:75:0e:86:d1:87:
de:ff:ab:83:67:c6:b8:69:7b:0f:0e:d4:3a:5e:30:6e:43:59:
03:c8:b6:fd:1d:10:ca:de:16:2b:db:0d:a5:f7:c2:ec:44:4b:
ad:10:53:63:2f:c0:5f:6b:b6:14:50:e9:ca:5c:e2:07:61:62:
7e:0a:5e:4a:8c:f8:57:ea:6b:1a:f0:39:93:90:4e:e4:2a:1f:
56:42:19:a2:ac:61:4f:89:14:37:a2:f8:fe:0e:15:6b:11:1a:
e8:b5:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org