Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F07AA14EA43C11EF9C864F4D762E951A.roa
File: F07AA14EA43C11EF9C864F4D762E951A.roa (raw, json)
Hash identifier: QBFFkb8wy5vUbK7I3NsPB9J/uE16LRY/obIVaEkmKeY=
Subject key identifier: 29:B4:C6:20:9C:44:32:F6:F3:75:E4:09:77:8C:BB:32:D0:7A:64:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D342
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F07AA14EA43C11EF9C864F4D762E951A.roa
Signing time: Sat 16 Nov 2024 17:05:11 +0000
ROA not before: Sat 16 Nov 2024 17:05:07 +0000
ROA not after: Tue 10 Dec 2024 17:05:07 +0000
asID: 142062
IP address blocks: 45.192.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54082 (0xd342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 17:05:07 2024 GMT
Not After : Dec 10 17:05:07 2024 GMT
Subject: CN=6738d0c7-c56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:9c:5e:ef:de:62:1e:5d:32:6a:bb:59:98:
9e:87:85:cb:fc:12:b1:f1:74:a6:7b:bb:9c:b6:d8:
cf:9e:f1:2d:89:72:56:ff:c8:58:7e:f7:d0:44:e3:
7d:4b:07:68:e2:c6:61:43:53:29:bf:74:4a:20:7f:
80:52:d4:9f:cb:fc:0a:c2:13:27:f4:48:f5:d3:0e:
3b:e4:4e:e2:9a:e3:ec:ef:ec:f8:57:29:30:08:16:
0a:ac:d4:4b:4d:fc:78:51:54:61:5d:59:92:03:49:
8c:99:0f:01:f2:d0:8a:5e:3d:6a:a8:35:ea:70:5d:
76:22:d9:fa:4b:c3:f8:3b:71:ad:9d:76:13:f9:01:
3e:cd:36:d5:5a:e4:82:15:c3:8d:6a:73:2f:e4:24:
05:47:ed:22:0e:10:a9:16:b7:f2:4d:79:11:41:c6:
d1:d3:30:6c:53:a0:aa:1b:65:09:1a:63:93:50:7e:
1e:8f:5d:fd:f0:6c:3e:a5:c5:aa:0d:9a:97:5d:88:
cd:ed:7f:bd:86:bc:f1:65:0b:3a:4d:c1:e4:93:ed:
49:ee:9e:a6:16:68:0e:46:8e:91:a3:5f:5f:9f:bb:
4e:9b:ab:5f:65:0d:85:9f:03:b0:c8:27:31:35:78:
0c:cc:0e:65:20:c8:a3:a9:80:9c:d6:4b:8c:0d:b1:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B4:C6:20:9C:44:32:F6:F3:75:E4:09:77:8C:BB:32:D0:7A:64:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F07AA14EA43C11EF9C864F4D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.0.0/19
Signature Algorithm: sha256WithRSAEncryption
87:2f:3f:bb:0e:a3:2b:48:ad:3a:42:88:0d:f6:56:b0:71:66:
62:e4:ed:fb:ad:69:7d:24:79:03:68:c4:2f:98:9c:c5:dd:df:
f2:c3:aa:4f:c6:3f:af:8d:58:6c:56:3e:2a:ab:fb:c6:2a:10:
26:d9:1a:2f:96:db:1f:9c:a1:aa:f9:7b:9b:4c:56:e6:f2:8c:
aa:0a:0c:3d:c2:c0:76:92:90:9d:88:98:ba:6c:c8:44:4b:52:
13:df:eb:52:7d:b1:0f:a1:ea:bb:fe:5c:f5:17:e4:a4:94:12:
8d:e1:fe:3a:94:61:f5:be:49:ab:7b:ea:36:f3:b3:8b:70:b8:
24:8c:0e:84:03:d7:cf:c2:23:f1:1e:84:1c:2c:4d:69:42:7b:
72:b2:61:d3:92:49:cd:88:d6:9c:f2:75:a2:fc:e4:12:b4:b1:
fc:c9:4d:17:28:40:5d:10:8f:40:c3:25:a5:a8:69:db:cd:ff:
3f:58:7b:d0:33:23:73:03:f7:58:9f:20:7d:e2:4b:dc:cc:4f:
c8:b8:37:84:db:01:91:6e:bf:a6:7f:1e:87:3f:a2:b7:6f:77:
02:81:c1:ca:de:85:94:e9:34:8f:d1:00:0f:c7:34:fd:cc:92:
10:da:3b:72:22:6a:80:aa:29:bf:94:ad:69:6a:60:75:c4:36:
72:11:34:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:56 2024 by rpki-client on console-ams.rpki-client.org