Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17B92EC4726A11EFBB09AF58762E951A.roa
File: 17B92EC4726A11EFBB09AF58762E951A.roa (raw, json)
Hash identifier: +0QNmMwQJoqC6NrR79m7sSlp66Vw5N7GByR9ccZxZCg=
Subject key identifier: 5A:E0:DD:BD:2C:6E:96:08:0E:7B:95:0C:F1:E8:D5:23:AE:E9:10:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B5A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17B92EC4726A11EFBB09AF58762E951A.roa
Signing time: Sat 14 Sep 2024 07:22:26 +0000
ROA not before: Sat 14 Sep 2024 07:22:23 +0000
ROA not after: Fri 08 Aug 2025 07:22:23 +0000
asID: 133199
IP address blocks: 45.207.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46497 (0xb5a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 07:22:23 2024 GMT
Not After : Aug 8 07:22:23 2025 GMT
Subject: CN=66e539b2-0b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:f6:d4:0a:5f:59:91:ee:0b:9c:a8:9d:d4:
da:0d:1e:b7:88:3d:c0:59:2d:05:18:7f:6c:5f:a0:
8f:18:5f:86:8c:b5:f5:2f:84:de:6c:0b:35:16:b4:
e9:59:ba:27:64:8b:27:63:73:4a:74:68:75:97:f4:
1e:83:c2:7c:b5:9e:ec:6f:e3:2c:e1:e4:54:cf:58:
11:9c:e2:a4:71:d7:7c:34:3c:90:fc:c1:88:1e:4b:
56:83:13:60:01:bc:74:14:e4:47:52:bc:00:d9:9d:
41:52:ce:cb:0e:f8:06:4e:1f:a9:bd:e3:a0:ef:6a:
86:83:62:db:d4:2c:ed:cb:87:70:21:b5:07:f5:67:
91:d4:50:f7:6a:94:43:27:e1:45:6b:49:ea:93:26:
1c:92:05:d6:8b:9e:30:19:6a:a7:56:ff:fd:14:c1:
3a:e3:4d:dc:b9:c5:01:35:d5:ad:e6:1d:ee:94:70:
30:d0:23:4a:8e:f1:ef:42:e0:6d:7a:42:82:e4:8d:
c6:16:89:8a:56:58:87:4b:2a:37:58:2b:a3:5a:d8:
6f:5d:60:49:30:59:a0:b4:8a:0b:56:0a:1b:b6:34:
33:18:e2:33:5f:c2:2f:05:7c:94:43:39:4d:b5:73:
2c:3c:bc:fa:93:f6:72:2d:4d:c3:78:f8:57:8a:de:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:DD:BD:2C:6E:96:08:0E:7B:95:0C:F1:E8:D5:23:AE:E9:10:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17B92EC4726A11EFBB09AF58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.48.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:02:76:eb:32:86:47:32:c2:19:3a:bc:99:0c:21:e7:2e:ab:
e8:61:1c:d4:e1:5c:1e:53:2d:e2:91:03:71:bc:cd:cb:16:21:
41:42:ee:85:f1:a1:7f:35:d7:3d:f1:a1:d6:69:dd:9c:fc:2d:
86:e8:e2:cd:1f:e0:f7:1c:0f:d9:a7:2b:e6:98:c7:e3:56:12:
c8:30:e4:8e:6a:e4:6b:d9:56:d0:5b:b5:ba:84:b4:c8:73:e8:
18:83:d4:1e:1c:1a:e5:50:83:f6:cd:b5:44:33:36:96:5a:1e:
6a:33:15:4f:df:25:bd:dd:11:c4:a2:ac:65:bd:af:ef:7c:59:
fc:ac:4a:be:d2:92:bf:e0:b1:8a:05:75:11:bd:fa:86:ab:1d:
a9:e6:c1:73:d0:4a:9c:27:4d:53:71:60:69:5b:8d:7e:a8:3c:
e1:c2:2f:5d:19:e5:0b:99:a4:98:a2:19:51:7d:8e:4b:54:b2:
c7:eb:fd:18:81:e3:2d:10:58:11:fb:9b:56:7e:3f:05:a3:cd:
cb:b5:02:01:24:13:f1:6e:c8:0e:72:9b:14:f5:08:47:9f:bf:
b1:a5:09:b1:f6:6b:2f:37:5a:1b:d7:a6:8a:2f:d6:4d:41:5a:
fb:f8:20:1b:d8:0e:31:ff:04:1a:95:e9:9e:3b:98:c6:86:42:
17:28:19:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:19 2024 by rpki-client on console-fra.rpki-client.org