Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2F38614A44911EF88C80F9C762E951A.roa
File: E2F38614A44911EF88C80F9C762E951A.roa (raw, json)
Hash identifier: zs/EmaYQlAzK8jU5xe8z3OQ/h44ldJVhqBtlfhdZTI4=
Subject key identifier: 99:AB:4F:E9:FC:90:71:9A:67:67:FE:45:F0:86:E8:7C:CE:ED:41:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D39E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2F38614A44911EF88C80F9C762E951A.roa
Signing time: Sat 16 Nov 2024 18:37:52 +0000
ROA not before: Sat 16 Nov 2024 18:37:48 +0000
ROA not after: Mon 25 Nov 2024 18:37:48 +0000
asID: 9009
IP address blocks: 45.192.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54174 (0xd39e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:37:48 2024 GMT
Not After : Nov 25 18:37:48 2024 GMT
Subject: CN=6738e680-51bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:6c:2e:f0:e3:61:43:5a:03:81:d8:7d:1c:
58:dd:a6:91:2f:a6:16:1e:da:af:16:22:ef:83:48:
0a:4a:e9:70:ce:af:25:12:16:0e:93:05:8e:55:3e:
ea:c5:01:79:fb:41:6d:50:4f:60:cb:84:8f:f8:10:
70:31:8d:a1:48:af:19:01:85:3e:1d:07:e7:7c:9d:
af:48:3a:51:39:0a:df:17:be:81:90:f3:eb:59:d7:
33:db:9c:0b:62:b5:3f:c4:a4:4a:a3:7f:4f:c7:4b:
58:9a:ba:f0:16:86:e5:aa:52:53:d4:2b:36:2e:eb:
66:4c:2a:72:86:21:a8:2f:28:27:d3:67:c9:df:e6:
81:57:4b:86:1e:a6:64:d9:f0:45:e1:85:d8:f2:53:
1d:2f:6f:53:80:d6:5a:57:69:02:96:fd:16:5b:59:
bd:fa:b5:d9:1b:0b:17:40:6c:e6:32:08:4e:ea:d7:
6e:31:3e:31:de:0e:ae:58:ac:fa:e4:ec:77:32:48:
d9:a9:9a:1b:c0:c9:c3:b4:2f:f8:3c:01:b9:43:c7:
8c:00:89:77:36:7b:bf:87:fe:bc:cf:bb:d8:af:bc:
5b:af:c5:42:13:ef:ae:53:aa:e3:01:cf:e0:42:38:
ce:f2:3a:a3:54:31:de:88:96:35:2d:4a:7c:5a:31:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:4F:E9:FC:90:71:9A:67:67:FE:45:F0:86:E8:7C:CE:ED:41:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2F38614A44911EF88C80F9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:9b:25:70:c7:1f:9e:fa:cd:5a:79:20:68:47:0c:3b:d7:32:
11:75:a0:a3:e7:92:fc:c2:4f:66:60:f4:2d:cf:1b:c7:99:09:
a8:fe:02:e8:4c:7a:52:56:05:de:33:a4:8c:85:61:58:c0:9f:
67:5a:06:d2:01:74:80:1c:f8:69:b8:24:3b:e8:ea:13:d4:cf:
2f:ba:33:e5:cd:3d:f6:d0:55:c4:e1:e9:0f:85:1e:00:ee:bf:
2a:81:ad:1a:24:5e:c7:29:40:de:7d:7d:68:5f:8a:ee:c2:42:
5f:2c:54:04:4c:0a:e2:10:de:a6:f4:a0:23:b3:45:91:85:8d:
ea:7f:0c:7e:2a:74:63:c6:90:b8:12:a8:e6:c9:79:d5:7f:18:
0a:de:07:c7:34:1a:57:34:ed:97:a6:9e:c8:ea:81:b5:ea:f3:
ef:b8:d0:75:88:d7:58:d4:7b:e4:3f:b0:52:be:c0:7a:cc:ea:
ce:e0:ac:a1:e3:76:59:c5:90:5b:ee:41:c0:5f:83:4b:4d:e3:
53:b2:06:d2:0b:79:9e:fe:57:12:cb:f1:d0:be:42:84:88:92:
00:9f:b7:77:03:1d:0e:6e:51:f3:6b:0c:a8:de:8e:9d:ae:cc:
da:d9:31:dc:5d:f8:df:ff:1e:b4:f7:6c:86:75:6c:da:8e:07:
d3:b1:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:51 2024 by rpki-client on console-fra.rpki-client.org