Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FED6FFECA44811EF9E22E595762E951A.roa
File: FED6FFECA44811EF9E22E595762E951A.roa (raw, json)
Hash identifier: cYtndRgJdmAMm6TeumBfVmb7bnnYFjcnUwFSBZy9aYU=
Subject key identifier: 50:75:BE:68:81:1C:6B:8F:04:A9:C6:0F:E7:78:1E:63:D3:EA:16:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D392
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FED6FFECA44811EF9E22E595762E951A.roa
Signing time: Sat 16 Nov 2024 18:31:29 +0000
ROA not before: Sat 16 Nov 2024 18:31:25 +0000
ROA not after: Mon 25 Nov 2024 18:31:25 +0000
asID: 9009
IP address blocks: 45.192.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54162 (0xd392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 16 18:31:25 2024 GMT
Not After : Nov 25 18:31:25 2024 GMT
Subject: CN=6738e501-0e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:58:76:c4:62:15:d9:1f:8d:8a:68:c5:d5:
03:57:02:31:06:80:f1:70:12:d6:44:06:fe:33:a1:
7b:96:b9:a9:06:8b:ec:38:14:48:31:d4:c8:c3:f1:
37:72:44:7d:f5:81:ad:82:20:73:86:65:fa:f4:c1:
a5:20:5a:69:08:99:46:f8:c5:0e:53:df:5e:b9:fa:
9b:ad:d7:da:ef:51:6f:da:d0:78:d3:f9:63:18:4e:
45:17:61:fd:c2:a2:2f:f5:f2:08:94:a7:86:fa:dc:
b6:9b:bf:30:60:13:5e:11:3c:3e:3c:e8:97:88:0f:
79:d9:9b:e9:0a:5d:f5:4e:ac:ff:95:07:e5:ec:4a:
20:e6:d4:ad:04:6e:69:96:be:f0:73:b7:55:37:d4:
35:e3:e2:e2:1a:09:f4:d0:a4:a4:58:70:e3:85:d4:
99:29:6f:83:2d:07:57:a0:d8:c3:84:00:a2:71:43:
01:27:92:6d:97:76:b7:e3:f3:f0:65:39:28:7e:08:
94:c6:ee:36:0b:d4:53:01:01:3f:94:77:a0:a2:eb:
75:b8:c4:3a:b9:43:8b:35:27:ef:20:3d:7a:b3:3b:
e7:33:12:8d:b2:85:05:26:5f:73:b3:e0:34:da:4c:
7d:fa:31:e5:31:dc:06:6f:b0:8b:21:43:9c:dd:9e:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:BE:68:81:1C:6B:8F:04:A9:C6:0F:E7:78:1E:63:D3:EA:16:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FED6FFECA44811EF9E22E595762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.147.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b1:1e:3a:66:1d:3b:94:39:11:45:d4:6b:9b:d9:35:1f:92:
15:3f:c4:4a:4f:11:77:ff:a4:b6:6b:26:7b:f6:c6:f5:f9:40:
a6:b6:84:20:56:43:87:0a:98:11:ae:8b:dc:86:24:35:8b:8e:
a6:9f:26:a2:a0:a6:1b:73:3a:91:55:9a:38:2c:7d:de:6c:67:
c7:6d:f8:e5:f2:7c:5f:41:85:6e:cb:0d:56:f8:9c:78:c5:95:
48:8b:2d:9c:98:58:20:83:cd:11:72:b5:1c:d6:35:57:32:8e:
23:6f:9b:b9:a2:ce:21:19:a2:6a:42:79:db:48:f0:28:8b:e7:
63:97:82:db:56:45:59:cd:02:76:a5:9d:b3:54:bb:7c:dd:a3:
07:d6:b7:98:89:65:b8:56:8e:f6:20:9c:8d:16:33:d7:89:94:
b2:4e:16:62:78:0a:b5:15:35:06:aa:40:dd:39:73:56:39:c7:
10:e7:70:95:89:fb:52:5c:bf:c4:d9:24:95:c7:52:b1:cf:46:
1f:00:df:d1:27:7f:ca:a3:89:d5:9a:56:34:fd:67:50:be:5d:
4f:96:6e:9c:b1:af:06:a5:cc:39:fe:7d:b8:72:84:00:b3:60:
6f:4d:25:8b:9c:b1:4f:79:8a:bd:cc:19:e3:a0:bb:57:dd:63:
72:6f:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:58 2024 by rpki-client on console-ams.rpki-client.org