Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFCA47088F8811EF9C7DDDB5762E951A.roa
File: FFCA47088F8811EF9C7DDDB5762E951A.roa (raw, json)
Hash identifier: FUpYkKO/ujnUC1QX7GMGK2wQphsCRssRqpvkU6X6tc8=
Subject key identifier: 67:0C:DD:2C:6C:17:94:A3:75:83:B8:8C:A6:C3:B3:72:1E:AF:B9:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: C743
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFCA47088F8811EF9C7DDDB5762E951A.roa
Signing time: Mon 21 Oct 2024 08:46:44 +0000
ROA not before: Mon 21 Oct 2024 08:46:40 +0000
ROA not after: Sun 24 Nov 2024 08:46:40 +0000
asID: 147176
IP address blocks: 45.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51011 (0xc743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 21 08:46:40 2024 GMT
Not After : Nov 24 08:46:40 2024 GMT
Subject: CN=671614f4-42a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:4c:05:28:0b:44:a4:e1:25:67:ff:25:54:
8d:1f:6d:74:5b:cd:ba:61:8b:a8:fe:3d:54:46:bc:
5f:7f:e7:6d:4d:cd:bc:3e:52:a1:44:8a:a8:ec:36:
26:2c:e6:75:1a:53:de:2c:8a:72:40:71:73:c0:e4:
9c:d9:6d:d1:83:b2:67:21:d5:bd:85:49:fc:c1:fe:
a1:97:7f:36:e3:5d:00:ad:b0:a1:95:31:5d:05:3e:
61:49:19:59:aa:48:ce:f8:a5:46:06:51:34:e6:ec:
aa:64:6e:61:ba:94:6c:66:c0:5f:eb:1d:65:9f:5c:
8a:2d:4c:00:65:da:16:d3:a2:34:fe:23:e0:db:e6:
bd:08:74:00:cb:4a:a3:76:fd:84:32:b6:11:ed:5b:
1a:37:61:45:30:eb:25:b6:01:c3:34:cf:e2:c6:86:
e4:7f:1f:6a:71:b5:8b:3c:d5:4e:3a:98:80:bd:21:
a0:e3:60:4f:47:f0:a4:67:cd:50:b1:70:da:1d:e0:
bf:c0:07:00:bc:4a:10:77:9f:d1:61:58:b4:e6:9d:
38:f3:1c:b9:d2:c3:fa:50:56:0d:bd:39:1f:b9:0b:
66:62:09:b0:3b:de:ca:e9:66:4e:43:1e:18:61:d7:
93:36:6e:b0:25:0f:4d:b7:0c:9d:88:4b:b7:68:db:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:DD:2C:6C:17:94:A3:75:83:B8:8C:A6:C3:B3:72:1E:AF:B9:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFCA47088F8811EF9C7DDDB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0a:3b:f9:38:ff:22:60:7b:c4:c4:02:03:fb:78:2c:e5:9e:
64:19:80:0d:27:85:7b:a4:b6:9f:f4:bf:6b:ea:ca:e4:a1:e5:
ef:66:93:c9:cb:00:b3:e2:6e:28:dd:71:30:75:05:24:b3:16:
1e:9c:bb:fb:5d:58:aa:80:15:51:b5:76:24:e4:c7:b0:59:56:
b3:5f:6f:ce:3a:94:01:12:6e:8e:ee:6b:d7:2b:b9:66:7f:4e:
d6:f4:cb:0b:50:6f:f3:12:63:9e:59:c3:99:30:53:5b:2a:cd:
e9:49:c5:24:67:1f:bf:4a:f5:13:6c:04:09:73:65:fd:81:c2:
0f:44:63:4f:9d:2d:f7:16:9b:f4:26:cb:6e:ea:a7:b7:d5:fd:
a3:b6:9d:80:f5:33:66:b3:32:9e:19:88:10:27:9c:18:98:40:
70:d9:90:dd:53:e9:29:be:a3:03:86:53:ff:a9:1f:14:e0:21:
43:90:f3:54:69:60:10:44:9b:5f:fd:80:ac:ff:66:eb:92:04:
4e:1e:e3:05:95:51:28:0f:93:77:a6:43:77:91:7d:3a:97:85:
94:ef:63:cf:fd:d8:a0:b5:3d:e8:90:f1:3f:88:92:d1:47:1f:
06:5c:1b:b7:2f:4e:94:30:44:d9:ce:55:58:eb:3d:2c:f4:a0:
2e:23:be:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:56 2024 by rpki-client on console-fra.rpki-client.org