Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F28F818768C11EFB6219FB4762E951A.roa
File: 0F28F818768C11EFB6219FB4762E951A.roa (raw, json)
Hash identifier: Ncyf5d1BZpJVF8XuAUR/DsHLfOUqm7doc21w9ooyT9M=
Subject key identifier: 10:BD:A3:4E:F7:F8:BF:72:A5:2A:FE:AA:A1:AF:6F:B7:C0:A2:A3:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B841
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F28F818768C11EFB6219FB4762E951A.roa
Signing time: Thu 19 Sep 2024 13:35:39 +0000
ROA not before: Thu 19 Sep 2024 13:35:36 +0000
ROA not after: Fri 08 Aug 2025 13:35:36 +0000
asID: 133199
IP address blocks: 45.207.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47169 (0xb841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 19 13:35:36 2024 GMT
Not After : Aug 8 13:35:36 2025 GMT
Subject: CN=66ec28ab-31e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:9c:e8:4c:e8:71:c1:79:a6:a3:6d:9c:9f:
9c:01:53:84:ad:51:79:75:de:86:b0:fb:64:58:64:
64:d6:38:cd:e3:b3:04:ce:33:c1:74:f3:ed:78:9d:
1f:67:da:1c:b7:59:85:31:ab:74:91:7c:f9:35:cc:
38:77:61:e7:97:34:9b:b1:a3:50:48:1d:f4:54:dc:
bb:6d:ae:2a:6c:5a:ec:7b:32:97:6a:e4:71:71:c2:
45:e7:89:9f:35:15:46:61:68:4b:cc:5c:38:65:6e:
84:20:80:3d:5d:10:5e:02:3c:4a:0e:6e:b2:dd:1d:
e3:36:89:78:00:ad:18:64:d4:e0:f0:af:95:55:f5:
d8:84:b5:5f:9f:2f:37:b7:34:f8:6c:ab:ea:8d:39:
a9:7d:a0:15:67:4d:70:68:f1:8a:df:16:89:01:57:
e8:c0:89:58:7e:5c:86:b2:c0:6c:f4:28:de:fd:f5:
e6:3d:05:ef:cc:54:68:3f:85:1a:b5:db:8b:72:10:
a2:29:08:a7:45:e5:d2:59:f2:c8:8b:9e:ce:f3:7a:
be:6b:27:55:2f:a0:39:7e:d2:ac:d9:56:8f:ed:7b:
a4:8f:28:d9:ef:af:ea:0b:22:1d:48:cb:a9:22:aa:
ac:f7:9c:ab:56:ba:d7:e0:29:d6:30:61:35:1f:90:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:A3:4E:F7:F8:BF:72:A5:2A:FE:AA:A1:AF:6F:B7:C0:A2:A3:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F28F818768C11EFB6219FB4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2f:49:cd:14:b5:f9:8b:29:49:e1:1e:45:26:b3:ce:62:c2:
cb:0c:dd:73:f4:1a:2f:1a:b8:16:11:da:dc:60:c9:8a:7f:04:
7e:39:ba:a5:9a:36:ed:90:e6:99:a7:e5:9d:a3:e9:f8:4f:a5:
52:db:14:1a:a1:47:a2:c8:e8:10:cd:1f:f6:81:f3:d2:0a:7b:
f6:8f:35:92:e5:23:c4:b9:0d:5e:9a:37:c0:25:b0:94:b9:bb:
b3:77:1b:c5:3f:4a:d7:c1:49:64:6d:b3:87:f9:f5:32:8d:11:
4b:91:30:6f:0d:a7:2b:03:a4:c6:5b:fe:fd:61:64:a8:5e:52:
eb:1e:e3:f9:04:c6:74:3f:b3:a1:de:44:0a:d2:f6:80:3a:2b:
9e:3a:bd:d4:01:c1:d5:5f:d0:10:d8:64:af:e5:83:30:fc:8a:
5a:5f:31:7c:81:4c:f4:9f:02:53:e0:cd:2a:3e:28:01:3a:1e:
8d:fe:55:21:b2:b4:d3:c6:e5:62:43:60:41:8d:b8:6b:38:af:
8e:89:d0:e6:d4:30:e2:e1:fd:73:dc:ee:16:9d:43:d4:77:92:
55:7d:4c:3d:c6:eb:17:5d:57:d1:5b:b5:58:eb:a4:df:35:6b:
7c:03:3a:2f:fb:f9:50:c4:54:30:b4:73:46:7c:a0:df:7c:a5:
91:53:78:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:19 2024 by rpki-client on console-ams.rpki-client.org