Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB41714CE04411EEA65451AB775412E6.roa
File: EB41714CE04411EEA65451AB775412E6.roa (raw, json)
Hash identifier: VdBcJDPUYWMk2YO1ky5YBORLzXtKHMlB+TVvv7PQ8xg=
Subject key identifier: 36:3D:FF:CB:00:C0:1A:66:E6:A4:99:0B:9B:DC:88:A1:58:2B:98:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 7E14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB41714CE04411EEA65451AB775412E6.roa
Signing time: Tue 12 Mar 2024 07:48:30 +0000
ROA not before: Tue 12 Mar 2024 07:48:26 +0000
ROA not after: Sun 12 May 2024 07:48:26 +0000
asID: 328608
IP address blocks: 45.195.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32276 (0x7e14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 07:48:26 2024 GMT
Not After : May 12 07:48:26 2024 GMT
Subject: CN=65f008ce-c005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:99:0f:fd:0f:38:e8:a7:ca:b5:5e:53:51:69:
f2:7d:1f:16:f2:61:f1:c2:e4:ef:33:be:50:79:3f:
4b:eb:fe:8d:64:4a:c7:10:ba:fe:1d:95:32:e0:d7:
5a:d4:0e:d8:6d:f1:bd:0f:fe:71:69:72:64:cd:d9:
e9:24:13:c2:0b:3a:d2:63:7a:82:69:b0:09:f5:20:
77:0a:10:ba:0c:a8:09:92:e7:22:cf:cf:81:cd:7b:
8f:22:39:e2:98:45:66:17:af:f9:a8:66:c3:dd:7e:
24:65:aa:60:eb:ec:ca:8f:48:96:e4:95:01:bd:9e:
e8:06:2d:08:af:23:67:ea:d4:fb:12:ce:43:56:b3:
3e:40:25:16:c1:9a:7a:e5:23:48:7b:2d:09:40:14:
b5:a2:86:74:c8:9b:56:54:ab:f3:93:57:ea:4c:64:
d0:ba:c8:29:25:cc:f2:3a:30:03:db:d6:07:ce:a0:
4e:76:8c:a1:5b:27:b5:72:dd:22:58:be:43:c3:74:
49:a5:5e:1d:5e:72:b9:1c:f0:b0:f1:65:76:ba:86:
36:c5:3b:4d:7d:ca:eb:9c:22:8c:9e:1d:a1:fe:46:
39:e0:78:57:bb:83:84:82:36:73:b9:5b:b6:6b:0d:
80:e8:cf:16:a8:c1:d4:ea:37:5f:52:fb:78:60:2c:
10:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:FF:CB:00:C0:1A:66:E6:A4:99:0B:9B:DC:88:A1:58:2B:98:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB41714CE04411EEA65451AB775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.209.0/24
Signature Algorithm: sha256WithRSAEncryption
46:7e:c5:28:23:5b:af:1c:db:12:6a:2b:0f:c6:ef:cd:ce:4b:
e6:54:35:db:d9:87:c7:26:de:55:72:bc:46:18:e1:47:4f:a3:
d9:22:b9:f0:aa:ac:9b:32:61:48:a6:a4:47:af:db:0f:e4:28:
a5:a3:ef:06:64:0c:44:ac:c8:4a:0b:0c:2b:ce:c3:b6:ae:5f:
f8:d1:4f:7b:ee:95:d8:9d:e0:bd:4c:ce:40:a4:be:cb:2c:90:
d5:94:1b:b7:82:cd:0e:d2:89:9f:55:8b:cf:3e:0c:94:ef:aa:
78:1c:33:f2:05:f6:1d:06:4c:34:fd:30:63:55:2f:42:34:8b:
5a:d5:8b:06:73:fb:62:dd:20:90:28:be:16:03:23:b9:ff:83:
09:14:59:7f:74:a7:64:11:34:71:4f:2d:9c:2b:03:c5:1a:c4:
9f:58:33:ab:70:d5:87:8a:e9:02:6b:dc:4d:18:e8:20:d8:2a:
c9:0d:0e:2d:e0:0a:ff:79:0f:5a:1b:5e:92:b1:36:5a:4d:56:
13:93:d5:98:df:3d:8a:75:73:f1:76:bb:15:aa:6e:e4:38:d4:
44:99:2f:c1:08:8f:29:68:2a:b0:0e:13:42:f9:90:95:c9:10:
63:59:27:07:8d:a9:0b:e2:d8:6a:3b:bf:a0:cc:26:8b:59:b3:
57:93:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 13:30:11 2024 by rpki-client on console-fra.rpki-client.org