Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C78BC2A0E211EF86AB2F8A762E951A.roa
File: E8C78BC2A0E211EF86AB2F8A762E951A.roa (raw, json)
Hash identifier: mQValsolvyvbSbblpDFBFhh9gdCE9MUSt11kxwKyx8A=
Subject key identifier: F1:56:43:05:B3:11:5A:58:DF:8C:E5:F2:CA:25:03:13:7E:17:AC:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D19D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C78BC2A0E211EF86AB2F8A762E951A.roa
Signing time: Tue 12 Nov 2024 10:43:10 +0000
ROA not before: Tue 12 Nov 2024 10:43:06 +0000
ROA not after: Fri 22 Nov 2024 10:43:06 +0000
asID: 39600
IP address blocks: 45.197.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 10:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53661 (0xd19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 10:43:06 2024 GMT
Not After : Nov 22 10:43:06 2024 GMT
Subject: CN=6733313e-564a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:9c:ec:c3:50:68:90:78:8d:c2:9f:71:5a:
5c:d6:9a:36:96:7d:68:66:54:02:e3:c3:0b:17:b2:
c0:70:65:d1:6f:b6:4f:f9:66:e4:37:ac:4c:05:d1:
0f:b1:2f:46:9d:49:2d:99:3e:e7:4f:db:af:dd:b4:
9e:e9:93:f2:81:dd:c8:a5:b3:77:e9:0e:fa:54:48:
c1:4f:a4:77:51:ed:b2:18:9c:22:8c:e0:f5:01:10:
e6:8c:14:db:ff:2a:66:28:d3:b2:62:c5:a7:74:02:
34:a0:b1:61:27:31:93:1b:21:d8:46:8f:3a:19:6f:
4b:2b:9d:0f:b1:ca:d6:48:63:d4:ca:71:59:66:24:
0b:2a:66:bd:59:68:9d:72:28:76:6e:61:87:98:78:
f7:3f:3d:6d:3f:53:49:c5:78:41:fc:65:2b:05:04:
50:53:4b:f9:2f:2b:a4:13:5d:a1:90:af:ef:f9:d7:
f7:a1:5e:e6:dc:ce:d0:d7:90:c7:db:7a:73:07:73:
5d:e6:64:f9:8a:0e:2d:f9:f2:d0:97:73:98:b6:e3:
68:39:6f:a3:e9:a2:c5:e5:55:58:86:11:7d:94:5a:
01:1a:c0:db:2d:12:4d:b1:69:ef:65:b2:f1:33:7c:
18:a4:66:f3:66:75:e0:c8:e4:c4:7d:6e:00:4e:cf:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:43:05:B3:11:5A:58:DF:8C:E5:F2:CA:25:03:13:7E:17:AC:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8C78BC2A0E211EF86AB2F8A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.28.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:77:f7:37:90:06:b8:e9:da:a9:14:22:46:68:c9:2d:fb:ae:
10:73:8e:5b:69:57:a8:3d:c8:02:8d:d5:67:42:05:a4:f0:f3:
8b:7f:2a:20:d3:fb:05:24:5d:46:7c:0b:3a:d4:b8:0f:07:ec:
d4:f5:53:9e:73:18:2f:6e:28:52:c4:c8:f6:ba:7f:9a:af:80:
89:4f:88:b8:12:3e:fd:14:7e:c3:58:b1:18:8d:e6:3f:84:a6:
51:73:e7:4f:39:a0:f6:7e:d0:ef:94:45:3c:e1:64:c8:4f:bc:
85:14:ae:ea:1e:c9:e2:fb:d9:d6:72:95:22:a5:ea:d9:13:43:
07:9a:08:98:61:1f:cd:9f:4c:9d:44:59:23:70:d5:a1:1c:00:
c2:49:6b:64:eb:c4:2c:fd:8e:9d:a5:78:2c:17:dd:3b:1e:50:
6a:d2:58:db:99:27:f0:de:c5:d1:c4:3c:b2:bc:7d:ed:0d:de:
f2:0f:01:93:d4:5c:6a:12:55:9c:fa:65:2e:df:4e:94:4d:d0:
a8:da:38:8c:4d:69:8b:fd:f0:bf:38:86:e8:d1:8c:4c:8f:6c:
e9:e2:5f:c6:bc:b3:39:7b:4a:6c:93:9b:4e:5c:f3:f7:6f:64:
c6:82:fe:49:21:25:e1:46:21:58:b4:4f:9d:90:5f:a7:eb:a5:
27:0f:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:54 2024 by rpki-client on console-ams.rpki-client.org