Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBE7CD529AB211EFB8C4C891762E951A.roa
File: EBE7CD529AB211EFB8C4C891762E951A.roa (raw, json)
Hash identifier: fCLsvoFusbltemJ9VzBtVBypTiYECRWYg7wyk9d9Cko=
Subject key identifier: E6:12:D8:B8:52:02:A0:78:50:9E:E0:D0:82:2A:9E:0A:27:62:7E:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CDD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBE7CD529AB211EFB8C4C891762E951A.roa
Signing time: Mon 04 Nov 2024 13:44:32 +0000
ROA not before: Mon 04 Nov 2024 13:44:29 +0000
ROA not after: Tue 03 Dec 2024 13:44:29 +0000
asID: 54801
IP address blocks: 45.200.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52696 (0xcdd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 4 13:44:29 2024 GMT
Not After : Dec 3 13:44:29 2024 GMT
Subject: CN=6728cfc0-4217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:50:fd:17:e8:7b:4c:14:58:a9:ca:69:bd:
26:f6:c4:25:87:ef:31:b6:9c:27:07:d7:c8:79:d4:
bd:53:8e:ad:ec:a9:4f:07:1d:58:bc:3e:38:c9:c3:
2e:43:01:5b:c9:ff:b4:d3:cf:ec:56:0c:d2:cd:21:
82:4d:c0:db:d5:ea:f9:83:0a:d9:d2:4a:a9:1f:3f:
e7:62:c4:d5:a8:57:ad:95:56:0c:d7:37:13:16:55:
f7:06:23:90:af:f8:29:3f:58:82:5b:61:40:3d:fe:
cb:61:11:b0:67:4d:ea:47:b3:9d:8f:6b:b8:01:75:
49:ce:23:1b:7b:58:7d:30:54:08:9a:5e:ad:53:ce:
37:ac:49:4e:63:5c:59:6a:3f:ff:ac:aa:52:7b:60:
9e:c4:26:75:75:79:75:99:44:2a:cd:5d:0c:41:81:
f8:d6:a6:6d:3b:ea:1c:47:95:d4:94:92:94:98:cc:
3a:34:43:e8:dd:3a:88:30:7a:3c:db:f4:d7:bd:64:
92:82:85:96:0a:62:d7:7b:ec:69:e6:47:7b:ae:ad:
69:4a:c3:75:b7:77:aa:a3:a1:3d:78:92:f6:c0:d4:
a3:79:6b:db:cd:e4:03:d8:4a:06:a5:1a:e6:de:5d:
ed:97:b7:a0:b4:06:9b:05:14:4a:bf:4e:83:bd:c4:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:12:D8:B8:52:02:A0:78:50:9E:E0:D0:82:2A:9E:0A:27:62:7E:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBE7CD529AB211EFB8C4C891762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c7:04:ab:b3:14:0e:f4:ab:15:29:5c:d9:27:1c:df:1d:bd:
3d:5e:64:de:cf:90:fc:5a:16:2c:0e:89:24:0b:9f:86:e6:1e:
8d:e6:04:2f:ed:25:96:c6:2e:91:39:a4:fe:b7:8c:9c:ed:e4:
2c:b1:b9:64:7a:3f:9f:b9:77:a1:70:47:e6:17:97:ca:ec:b3:
f7:09:26:c8:c9:90:58:6d:96:55:7b:3e:fb:a8:6f:9e:d0:ec:
5a:41:6c:6b:60:69:86:63:45:69:ee:61:2c:ca:11:9a:d8:7b:
78:ee:9d:0c:77:c8:c2:55:69:5f:14:46:bc:af:23:8c:72:4a:
5f:62:e1:c4:7a:67:10:08:29:6e:25:ff:65:b5:c7:ba:2d:f2:
7a:fa:6c:c8:15:a4:07:ab:a1:0b:49:f0:14:f8:6f:a0:50:05:
f7:23:c9:d0:6b:6c:ab:61:c0:65:27:3c:fb:60:f2:62:89:80:
6a:cd:e6:3e:68:f5:46:f9:ab:ea:1f:92:11:53:89:da:17:15:
62:bd:6f:33:f8:1e:57:04:64:75:76:84:08:68:dc:a5:85:f2:
cd:f8:53:e7:eb:e8:83:7e:51:46:78:30:f3:d8:b2:1e:e4:b4:
3b:83:fb:3a:16:a4:e8:19:dd:fd:88:4a:ae:1e:c4:dd:13:3e:
03:a7:d9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org