Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F975E566A74C11EFA6C6DC8B762E951A.roa
File: F975E566A74C11EFA6C6DC8B762E951A.roa (raw, json)
Hash identifier: H7nca4/Jo0FoOgoIXX1PfewHFORcyFGL183VwYuCBNY=
Subject key identifier: 33:9C:4A:67:D4:81:B2:09:32:F5:69:A5:13:25:EB:23:75:B2:76:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F975E566A74C11EFA6C6DC8B762E951A.roa
Signing time: Wed 20 Nov 2024 14:37:32 +0000
ROA not before: Wed 20 Nov 2024 14:37:28 +0000
ROA not after: Sat 30 Nov 2024 14:37:28 +0000
asID: 202656
IP address blocks: 45.199.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54976 (0xd6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:37:28 2024 GMT
Not After : Nov 30 14:37:28 2024 GMT
Subject: CN=673df42c-e973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:d8:22:bf:ab:5b:59:78:eb:4d:1b:b3:11:
37:79:9c:c1:c6:0f:81:30:d5:eb:82:33:95:14:dd:
e3:48:0b:39:47:b5:05:37:cf:a8:bb:db:09:ea:a7:
8d:8a:8a:6c:67:42:85:81:d7:ef:b4:0b:73:3a:17:
d1:16:d7:30:ea:77:29:6f:a8:e5:df:22:67:7b:8b:
3a:3f:f1:d0:1e:6b:68:92:ff:f3:a6:20:f7:95:7b:
3f:07:30:5f:29:1b:4b:6b:a9:fd:44:3d:f0:e1:c1:
8c:0d:ea:36:df:bb:dd:a8:03:70:85:09:5a:b0:0e:
b3:35:ca:09:7b:d1:55:da:53:41:6d:88:2e:17:90:
2d:1a:53:dc:dd:8d:e5:83:a7:05:14:f1:5a:40:2f:
74:86:0e:2a:4b:f8:c3:f5:78:e6:eb:71:5e:8d:57:
2b:37:9f:3c:b2:a9:0b:3e:8d:53:96:f8:c1:58:c9:
f9:7e:d4:14:0b:87:55:e3:de:5b:fd:b0:bf:85:73:
9a:8c:00:4b:0f:7a:a9:d0:a5:c9:3c:22:f8:3f:7c:
94:e8:3d:47:28:c3:c3:b2:c6:12:2e:a8:af:dd:8f:
83:a9:34:45:14:d5:31:85:b6:d7:ec:a3:1e:e2:b1:
47:8a:eb:58:78:b6:6d:ec:9f:64:9a:d4:c7:41:9d:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:4A:67:D4:81:B2:09:32:F5:69:A5:13:25:EB:23:75:B2:76:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F975E566A74C11EFA6C6DC8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:40:e8:cf:a4:39:3a:d9:f8:9b:82:dc:64:1b:19:67:db:02:
6d:7c:3c:e1:8e:d2:63:76:91:15:77:00:de:ce:fa:6a:06:69:
52:b4:52:e1:67:5a:1a:98:89:c2:74:3a:e5:5c:d5:2b:88:c7:
b7:a2:50:2f:55:3f:a2:ea:4e:49:03:cb:c9:b2:71:13:1b:ce:
bb:3f:9e:96:d2:1c:69:0d:40:87:6c:0e:d7:93:dd:61:d4:b7:
32:44:93:e1:ef:ce:f6:01:7a:75:0c:c8:2d:20:e9:b3:cd:29:
a8:84:91:e6:6c:a1:74:97:d1:40:dc:bb:09:9d:cf:e0:fd:fa:
c2:46:b5:7e:df:a9:07:d5:f3:fe:18:5b:13:71:bd:ff:41:4b:
b5:ec:0f:62:74:88:2a:76:b9:74:fa:eb:f8:40:ec:db:58:cc:
3a:d7:d2:82:93:41:69:56:28:90:b4:b8:38:f6:16:98:0e:2f:
56:06:30:31:78:3c:6a:f2:17:96:a1:cd:9a:8a:a7:cd:c5:bf:
4f:cb:4e:c9:a7:1b:31:2a:b7:09:5e:24:75:0e:1e:99:4f:27:
6f:d0:82:24:58:71:3d:4a:55:95:99:54:06:d5:ef:f9:33:cf:
aa:42:43:ed:3d:fb:98:cf:23:41:60:25:af:37:67:5c:1a:fb:
76:a7:63:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:57 2024 by rpki-client on console-ams.rpki-client.org