Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F032D5540CE711EFB06C990F017001B1.roa
File: F032D5540CE711EFB06C990F017001B1.roa (raw, json)
Hash identifier: V45lRqXJFtJjQsN7O9/6uco2sOR4D+uCNLNuwvLat+w=
Subject key identifier: 8D:35:78:CC:CE:46:7E:C4:9F:7D:4F:B4:4A:92:37:E3:6A:8E:4E:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 886E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F032D5540CE711EFB06C990F017001B1.roa
Signing time: Wed 08 May 2024 03:06:18 +0000
ROA not before: Wed 08 May 2024 03:06:14 +0000
ROA not after: Thu 29 May 2025 03:06:14 +0000
asID: 140224
IP address blocks: 45.207.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 28 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34926 (0x886e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 03:06:14 2024 GMT
Not After : May 29 03:06:14 2025 GMT
Subject: CN=663aec2a-1135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:14:67:22:61:da:52:6f:c6:a2:74:01:a0:
4c:b7:2f:24:03:75:96:6f:6f:52:11:ac:01:8c:a1:
ac:76:5e:39:aa:28:11:09:7b:1c:c8:fe:4f:0a:ff:
ff:25:38:ba:3e:cb:52:6b:64:11:61:47:84:c4:91:
56:dd:8e:af:48:9d:8f:90:9a:e5:dc:34:54:1d:c4:
3d:46:7a:17:5b:81:6b:0c:55:c2:67:37:45:25:d4:
f2:71:bc:40:0a:cb:5d:c4:0d:fc:93:5a:02:2d:7b:
5a:04:cc:80:6c:2c:b3:4f:4e:8b:d4:ab:6d:2a:46:
54:05:f6:ab:7b:54:7e:50:bf:6b:9e:bd:fc:4a:b5:
40:81:a1:8f:4d:8c:e9:2a:6f:e2:df:f1:43:a5:17:
36:3f:26:60:18:2c:f5:84:a8:a6:50:30:7a:b1:b5:
e0:b6:b7:2d:c2:a3:53:bf:86:84:26:a2:1d:98:5d:
87:d2:54:fe:7c:a7:8e:0c:fc:9a:e0:88:f2:08:55:
42:ac:65:71:da:f3:c4:a0:3b:57:ba:a1:83:5a:5c:
3b:f3:10:fd:3a:b7:7e:7c:fe:7a:c8:d8:3e:32:da:
3a:ef:de:ec:e6:ec:1f:6b:f4:f5:fc:43:97:2d:dc:
7d:bb:48:f7:78:e2:c7:da:36:7d:45:a3:19:40:4c:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:35:78:CC:CE:46:7E:C4:9F:7D:4F:B4:4A:92:37:E3:6A:8E:4E:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F032D5540CE711EFB06C990F017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.8.0/21
Signature Algorithm: sha256WithRSAEncryption
78:44:48:4c:7a:9f:d2:fc:e6:e8:23:4a:01:ad:3c:c0:94:51:
9b:55:8a:78:27:91:f5:f0:99:b1:05:40:16:5f:b0:25:44:22:
b0:6e:b8:40:b4:38:ce:49:1e:d3:84:9b:27:93:e9:e9:71:b4:
50:49:5a:3e:a9:b8:f1:f9:df:54:2f:ea:2b:8f:63:45:1a:1f:
18:95:f8:90:3b:7a:75:ea:44:01:78:39:59:64:a4:c4:ff:27:
19:d8:ec:b3:71:7a:b0:3a:87:c4:7f:7d:bb:57:48:a7:2c:96:
7d:06:f9:f1:0d:a2:73:c6:d8:7e:49:fe:71:8e:c8:3f:b3:81:
e9:52:dc:f9:78:e3:2f:7f:2d:0a:a4:17:cb:03:fc:69:fc:4a:
ef:49:39:44:48:4f:4f:8f:27:69:36:90:5f:5e:be:81:7c:91:
60:d7:bc:67:27:9b:2f:9c:c0:b8:39:1c:a8:77:8e:b3:b0:37:
e1:a3:92:17:4b:bd:4e:79:16:fa:6d:af:e0:30:92:00:94:81:
ee:ba:70:68:3b:51:24:64:4d:ae:a3:89:c5:8e:18:43:cf:30:
04:2c:ed:a0:49:09:62:85:ec:06:51:37:81:9b:f2:d2:22:96:
e5:5e:05:44:54:bd:c1:1d:36:84:c0:54:da:a9:2c:e6:a0:e1:
49:d9:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 02:45:27 2024 by rpki-client on console-fra.rpki-client.org