Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A33E2AAC16911EEBA4992C1775412E6.roa
File: 1A33E2AAC16911EEBA4992C1775412E6.roa (raw, json)
Hash identifier: dEN6kw0bpJ1sUiZ6WuK8gtF9pvjpjmHjSy8XFKpw2N8=
Subject key identifier: 06:6E:62:6B:8C:8A:A2:47:B3:A8:2A:BC:FE:25:44:54:F4:B5:E5:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 6C61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A33E2AAC16911EEBA4992C1775412E6.roa
Signing time: Fri 02 Feb 2024 01:19:25 +0000
ROA not before: Fri 02 Feb 2024 01:19:22 +0000
ROA not after: Thu 08 Aug 2024 01:19:22 +0000
asID: 133199
IP address blocks: 45.207.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27745 (0x6c61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 2 01:19:22 2024 GMT
Not After : Aug 8 01:19:22 2024 GMT
Subject: CN=65bc431d-37d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:bf:b5:52:e9:ba:86:6d:f0:b3:46:81:08:
c8:22:70:6b:4b:e7:7c:68:59:93:eb:ad:40:08:fc:
aa:cb:8e:26:cc:9c:8c:85:ed:ca:95:26:5e:20:5e:
66:16:f6:2d:4a:ff:47:51:0b:b2:6b:c5:bc:b1:77:
96:d6:e6:ea:64:d8:19:31:09:51:e3:f1:5c:fa:6d:
ae:e5:71:dc:a1:b0:26:fa:a7:67:e7:80:36:69:f7:
0c:2b:ad:f5:95:69:0b:12:92:bc:60:91:4e:1d:95:
65:aa:43:92:3b:6c:bd:31:b8:6f:aa:d0:b2:c1:4e:
8e:b7:b1:a9:04:bb:1a:4e:e1:36:2b:a1:83:33:e8:
a5:5c:a4:e1:f2:a0:8b:7c:eb:1c:ae:d6:06:d5:1b:
8d:94:d5:b5:5f:48:7c:92:62:ca:37:19:d9:46:59:
33:11:64:61:1a:31:95:fe:a9:dd:fd:19:77:f7:5c:
0c:ea:2e:65:b6:92:93:5a:60:c1:da:28:da:82:c6:
e1:ca:fc:36:e4:49:64:51:53:5b:82:c8:ee:e7:ec:
7d:7f:5d:bd:37:01:88:74:4c:c1:ab:31:df:12:89:
2f:d6:af:4d:a7:b5:d1:b2:98:6f:71:f6:51:8c:f5:
55:07:9a:87:35:7a:cb:8b:09:b0:3a:ed:42:45:c5:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6E:62:6B:8C:8A:A2:47:B3:A8:2A:BC:FE:25:44:54:F4:B5:E5:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A33E2AAC16911EEBA4992C1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.51.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1b:20:d6:27:83:e4:b9:5a:cf:4b:63:f3:5f:60:6f:31:55:
f8:f5:93:93:12:f6:5f:ca:9f:cf:5e:72:51:7e:93:e9:bf:95:
68:07:6e:11:6f:b0:51:d7:4e:b2:6d:2b:ea:b8:aa:8e:a3:ba:
b8:d5:e1:2d:c1:fb:06:8b:5c:96:15:ee:dd:c3:98:95:b2:7f:
52:43:86:8c:fc:e5:29:af:e6:84:5c:5f:89:b7:b2:b2:59:fd:
12:55:a8:c3:f0:e5:ba:ce:58:72:5f:dd:7e:c5:54:ce:ed:c7:
24:28:ea:f9:55:a6:a1:bf:43:94:be:f1:2f:df:40:e5:ec:75:
c8:12:36:37:43:41:ec:c8:15:12:81:7d:8d:f7:ba:9e:a6:f1:
9e:50:07:93:6c:db:cd:b8:cc:3a:c5:14:be:98:03:14:b4:16:
ae:02:9d:c7:bf:b5:80:b2:ea:85:27:10:c5:e3:58:85:6e:33:
b3:a0:29:a7:f7:59:13:fe:8f:c0:e6:93:65:9d:fa:7c:b3:bb:
02:d7:8c:b1:de:12:38:16:97:68:37:ec:67:c0:c2:20:57:c4:
ce:84:14:ee:6a:e0:12:22:df:ce:9f:53:94:fd:97:e1:d6:ae:
c3:0c:73:6d:e3:fa:f6:b4:51:60:63:da:96:7a:59:ce:94:57:
65:d2:6a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org