Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F523CCF8A0E911EF851922B6762E951A.roa
File: F523CCF8A0E911EF851922B6762E951A.roa (raw, json)
Hash identifier: IUKj6gn4bYVoENVcJZfu+VUfrwfXQFZl+N4lv+uAlyw=
Subject key identifier: B4:81:20:3A:F0:71:D7:CD:03:E2:22:E3:FC:20:1E:11:A0:1F:2A:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D1D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F523CCF8A0E911EF851922B6762E951A.roa
Signing time: Tue 12 Nov 2024 11:33:37 +0000
ROA not before: Tue 12 Nov 2024 11:33:34 +0000
ROA not after: Fri 22 Nov 2024 11:33:34 +0000
asID: 5065
IP address blocks: 45.203.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 Nov 2024 11:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53715 (0xd1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 12 11:33:34 2024 GMT
Not After : Nov 22 11:33:34 2024 GMT
Subject: CN=67333d11-a0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4f:dd:13:0d:d7:1d:d2:b9:fd:6c:27:65:ac:
8a:9c:d5:8b:cd:ff:46:fc:27:3d:5d:bc:25:42:06:
25:0e:d8:e9:bf:4e:ac:1d:e6:2b:a9:14:aa:85:45:
2e:b6:ac:ec:9d:4f:c5:ba:e9:21:1e:de:ac:a3:7d:
0e:d8:0f:2c:c8:53:c6:32:86:9d:49:43:7f:81:f9:
85:e7:b6:4e:97:cb:83:39:aa:fb:8a:78:1f:32:44:
d4:b5:a5:71:95:a9:9d:da:cc:31:38:bb:d7:01:53:
a3:2a:39:b4:15:26:34:73:f3:70:ef:7b:25:5e:c5:
f0:d9:c1:30:8f:95:4e:77:a7:4a:7b:36:1d:17:ea:
d4:15:54:94:df:3e:ce:f5:92:d1:38:90:c8:1d:39:
8f:71:25:c9:59:72:aa:18:7f:d7:00:4b:ec:bb:e8:
30:ec:7a:de:3e:17:d5:b6:9f:ea:a7:b9:46:7e:80:
55:c0:80:a0:49:01:39:4f:2c:27:2c:c2:8b:18:79:
23:18:18:e9:50:29:e7:80:98:40:55:ed:4e:94:01:
13:6a:33:f5:8f:7e:83:44:06:c6:1e:04:22:50:b9:
e2:94:03:29:d5:4e:c3:ac:8b:4d:fa:7e:40:69:c8:
ce:ae:07:d3:23:05:94:7b:6c:97:90:97:f2:8b:0f:
d4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:81:20:3A:F0:71:D7:CD:03:E2:22:E3:FC:20:1E:11:A0:1F:2A:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F523CCF8A0E911EF851922B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.61.0/24
Signature Algorithm: sha256WithRSAEncryption
69:06:de:a6:32:3d:1f:99:1b:5c:8c:5d:87:bf:b9:dd:53:55:
61:30:52:49:3c:4f:63:06:f1:91:4f:c9:53:14:86:46:c1:ae:
b2:ca:10:d4:72:99:e4:4e:77:05:5f:da:f9:f7:ba:78:d5:74:
01:f7:ab:73:fd:0b:26:c5:11:d2:83:c0:60:f7:1f:9b:76:c7:
65:ac:18:d2:2a:4e:ae:12:ba:20:5d:7a:80:d5:32:54:8f:21:
37:44:6f:01:42:0d:78:c3:33:e0:12:38:13:42:aa:65:73:8e:
e6:a7:d9:88:8f:9a:c5:18:f4:8e:9f:bf:39:db:7c:5c:82:09:
16:dc:8a:ff:62:90:65:0d:58:ce:d2:38:64:dd:08:67:d6:0d:
ec:41:ea:be:0b:fc:a5:1a:2c:65:c0:35:73:4e:8e:81:89:a9:
83:5d:5a:96:30:2f:c1:c1:e3:5b:49:e6:37:49:4f:b0:50:21:
f3:2f:cd:06:6a:db:78:48:2c:a2:ce:9d:21:30:ec:56:e7:fc:
cf:56:1a:c2:54:16:b9:fe:da:e5:86:0a:14:9e:ba:a5:e4:22:
26:d4:b8:b5:41:21:16:65:a8:78:7c:02:3f:cb:c6:9c:43:89:
e3:22:8b:28:4c:38:0c:77:d2:a4:97:ea:3c:7d:d0:b6:9a:31:
93:1c:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:56 2024 by rpki-client on console-ams.rpki-client.org