Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8F8BE8A74A11EFA5B6CE7F762E951A.roa
File: FA8F8BE8A74A11EFA5B6CE7F762E951A.roa (raw, json)
Hash identifier: AsSjVoT0P7q0vyR0eNyrIffnV5cDaYJe5KZvyMedQQE=
Subject key identifier: A5:5A:ED:97:D1:6B:B3:EC:D1:26:35:EC:3F:42:66:88:A7:25:BF:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D6AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8F8BE8A74A11EFA5B6CE7F762E951A.roa
Signing time: Wed 20 Nov 2024 14:23:14 +0000
ROA not before: Wed 20 Nov 2024 14:23:11 +0000
ROA not after: Sat 30 Nov 2024 14:23:11 +0000
asID: 202656
IP address blocks: 45.199.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54954 (0xd6aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 20 14:23:11 2024 GMT
Not After : Nov 30 14:23:11 2024 GMT
Subject: CN=673df0d2-0362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:e8:61:d9:8d:90:0f:13:25:ec:73:52:5b:
79:e9:75:9c:4f:1f:7b:81:39:e8:e6:bb:8e:9e:e4:
89:95:d4:f2:80:68:f2:12:2d:f4:4b:63:8e:6e:5b:
a9:9b:3b:1f:41:43:69:c9:1f:ae:a5:f4:39:e0:c3:
54:56:e4:c8:23:5a:d2:98:3c:7b:27:19:6e:45:e8:
12:2c:6d:9a:4e:e7:d2:3c:34:b6:e3:b0:01:0e:b1:
1f:1d:c5:22:5d:56:99:ac:e1:0e:16:b3:45:42:8c:
58:6d:64:eb:92:59:26:05:24:67:14:9c:7f:5b:1a:
5d:94:23:90:c4:4f:40:0f:f1:83:ed:d2:cb:70:91:
93:81:7e:e8:e4:9a:fd:f7:73:bb:6c:9e:bf:d6:3d:
f3:f2:01:bb:59:b1:b9:22:00:bd:dd:24:8a:33:1c:
c9:f7:db:21:0c:26:61:7c:a0:e2:64:de:ee:08:5f:
0f:6e:c7:be:ca:7c:ed:fe:68:48:3e:63:db:9c:99:
ab:52:9e:7f:f5:d9:34:95:dc:f5:e3:6b:e1:3f:c2:
2b:e6:f6:65:b3:89:3f:dd:94:4c:0f:21:42:b6:0c:
7c:c4:5b:28:2c:2d:38:ca:8c:b2:03:d1:b4:4d:9d:
37:8e:92:48:f1:3b:1f:14:cc:19:69:0f:19:6d:f9:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5A:ED:97:D1:6B:B3:EC:D1:26:35:EC:3F:42:66:88:A7:25:BF:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA8F8BE8A74A11EFA5B6CE7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.199.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1f:50:8e:61:7b:7e:a3:9e:03:d2:62:32:cb:7d:6c:f0:c0:
d0:72:17:7b:27:c0:d5:af:c9:3e:07:b4:cf:87:a7:63:e6:66:
59:2d:37:94:48:8a:6e:94:a3:46:db:21:98:84:a2:0e:72:c0:
ae:5f:5d:5c:6e:b7:5e:dd:fd:44:70:4c:c4:07:06:7a:f6:97:
0e:a4:21:cd:da:0b:a5:b5:d3:31:99:54:13:8e:d6:db:9f:a3:
56:f9:53:89:ff:f3:09:1d:f8:90:0a:6f:03:6b:8d:69:31:b7:
46:eb:ba:70:e4:a9:bc:69:74:a6:3f:8c:da:fd:09:6f:53:84:
88:65:7c:59:dc:18:c0:6b:2c:05:e8:45:5a:6d:d5:e3:fc:00:
01:bf:a3:5c:7a:0a:e9:82:55:cf:e4:7b:1c:65:bd:ee:3a:b5:
02:20:71:95:11:f2:6e:ea:79:a7:fa:8d:a8:6c:7c:a4:05:e3:
88:79:63:7a:93:fc:74:21:9e:ad:32:68:9e:8e:e7:22:49:27:
f7:c3:2e:3b:16:60:f4:c6:51:a3:79:1f:51:fc:1c:17:16:cb:
c8:0b:5b:94:51:29:a2:29:64:6b:f9:42:7f:7a:5d:91:71:61:
e8:43:9a:db:be:92:b4:eb:6a:41:2f:3c:91:b7:ca:30:ca:57:
e4:95:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:58 2024 by rpki-client on console-ams.rpki-client.org