Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E109889EA43F11EFA0AF6B5E762E951A.roa
File: E109889EA43F11EFA0AF6B5E762E951A.roa (raw, json)
Hash identifier: RGMRrKr8M8tcLvp4UBypi6ZJUghx24Ckp9z3bmd5/7Y=
Subject key identifier: ED:B8:DF:9C:6D:99:5D:E7:D1:AA:3D:3F:4C:08:D9:F6:78:F9:A4:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D35C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E109889EA43F11EFA0AF6B5E762E951A.roa
Signing time: Sat 16 Nov 2024 17:26:14 +0000
ROA not before: Sat 16 Nov 2024 17:26:10 +0000
ROA not after: Sat 21 Dec 2024 17:26:10 +0000
asID: 140869
IP address blocks: 45.203.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54108 (0xd35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 17:26:10 2024 GMT
Not After : Dec 21 17:26:10 2024 GMT
Subject: CN=6738d5b6-d3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:0e:22:61:16:e8:e8:5c:c2:f9:ad:db:6e:
30:b9:15:c3:16:18:09:58:15:52:8d:1b:49:ca:dc:
fd:de:58:6f:c0:c1:31:a0:6e:82:f3:b8:a3:1d:c3:
ed:ed:e2:8e:c3:cd:66:67:98:e7:57:72:1a:af:63:
9b:73:77:9f:c7:a9:5f:96:b3:e4:f4:06:65:0d:5a:
41:73:8b:d0:4c:c2:2e:1a:ec:0b:a5:d2:91:1a:95:
d9:6d:17:23:f4:a7:d2:b7:95:df:ff:05:20:ff:ba:
d2:27:81:91:67:7a:bc:45:09:40:e5:32:06:a6:3f:
5f:36:73:70:41:16:2b:e6:84:65:22:b7:fd:8c:99:
80:81:d9:0f:77:d2:55:fb:66:f6:c1:3f:eb:ef:52:
bd:35:64:57:f5:33:de:5f:7d:1d:da:ed:f9:2d:ae:
12:be:83:80:28:68:0d:5a:d1:47:ad:68:49:b1:63:
04:88:e4:18:75:30:f6:b8:d1:81:9c:a9:f7:17:d5:
76:87:7b:74:e8:52:cd:98:aa:3b:44:94:c2:dc:1a:
be:3d:c7:4c:a3:b2:c5:22:1b:f4:17:34:85:23:08:
56:a0:85:48:94:2d:96:68:37:71:e4:a8:44:b9:33:
8f:e8:96:5d:1c:4d:62:ac:1b:78:4d:fe:9b:23:96:
fd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B8:DF:9C:6D:99:5D:E7:D1:AA:3D:3F:4C:08:D9:F6:78:F9:A4:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E109889EA43F11EFA0AF6B5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:7d:93:6a:df:e8:ea:15:be:0b:45:8d:0c:38:04:2c:73:b8:
e2:73:38:81:8a:a3:4a:3a:a8:78:4b:b4:b7:2d:a7:4d:8f:f4:
73:13:ce:e3:2f:fa:87:55:e8:c2:43:96:b7:17:19:7a:72:3e:
01:b1:bb:0e:86:e5:c6:7c:f0:75:ee:6a:6e:69:b9:60:57:25:
24:52:c6:6c:a3:d8:a9:d5:c3:35:ac:f5:26:55:85:3c:66:09:
9a:ad:d3:3a:4d:3a:92:2e:61:fb:18:bb:98:df:7c:8f:0f:7c:
84:63:56:91:d7:be:70:f2:12:08:9c:57:40:a4:1e:50:59:d2:
f8:6d:49:78:d5:07:13:3b:8e:92:55:21:99:b6:98:2f:25:dd:
14:e6:8c:a0:3a:15:fd:5e:de:b6:3c:ee:e9:8d:10:99:bb:41:
21:2d:2e:68:da:81:ac:1f:bd:50:8e:47:23:c2:36:98:44:83:
de:21:82:64:e4:45:71:87:55:3b:5d:8e:6a:d3:c2:c1:f7:cc:
f6:55:f4:62:3a:91:4c:9b:ce:66:a7:ec:4e:32:dc:71:c2:b8:
3c:20:4e:ad:ce:8a:94:15:11:69:e4:1a:51:4b:a1:74:e4:17:
c5:51:e7:d6:52:99:36:76:8f:62:6b:de:c7:72:8a:c5:4e:fe:
4e:01:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:53 2024 by rpki-client on console-ams.rpki-client.org