Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B562340726811EFA3D2D24B762E951A.roa
File: 1B562340726811EFA3D2D24B762E951A.roa (raw, json)
Hash identifier: 5oRu1vFYj4EW/TXoTA4WCNBayDQlZVcobvYTyQn3IYo=
Subject key identifier: 51:FE:47:DD:DA:BC:AF:47:B7:FC:79:2E:21:89:60:AD:E2:9B:59:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B583
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B562340726811EFA3D2D24B762E951A.roa
Signing time: Sat 14 Sep 2024 07:08:13 +0000
ROA not before: Sat 14 Sep 2024 07:08:10 +0000
ROA not after: Fri 08 Aug 2025 07:08:10 +0000
asID: 133199
IP address blocks: 45.207.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46467 (0xb583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 07:08:10 2024 GMT
Not After : Aug 8 07:08:10 2025 GMT
Subject: CN=66e5365d-24a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:5f:67:db:05:f4:a8:8f:cd:68:e3:49:1e:
ff:ae:98:1e:f6:d5:e6:67:3b:16:8c:66:d9:d4:42:
06:ff:f3:f1:d6:f3:54:46:c4:67:55:22:32:80:0a:
47:b2:32:d5:37:d4:b7:2f:d0:a2:46:55:14:84:9f:
e3:94:b3:05:8a:a4:2d:be:4c:10:27:71:dd:35:68:
36:33:62:d1:03:5a:b6:0d:44:ee:cd:99:c9:f0:a1:
20:fb:13:d3:dc:c1:e1:a3:ee:dc:7e:c4:2b:e3:d8:
71:01:16:5a:78:cd:74:5a:07:06:99:54:d1:c1:a6:
7f:0f:31:ca:28:99:9c:e7:06:69:90:8c:46:31:80:
e1:7c:d9:58:1a:5a:2a:d2:22:9a:47:67:13:9f:4e:
29:6e:45:ac:3f:11:d5:0b:2c:49:4b:f8:d3:df:94:
82:0f:a0:f0:12:37:ea:37:bd:cb:0c:02:ac:ee:07:
1f:13:c2:bd:42:0a:8d:f7:5e:fe:57:5e:9f:dd:bf:
63:2f:02:e2:2d:a3:ee:1e:c3:47:fc:2b:10:ee:f6:
bc:ba:d5:39:a0:78:83:e4:a5:76:68:f8:ad:9b:78:
d8:12:27:51:c2:ce:c8:3d:67:03:3a:8f:df:ca:48:
a3:18:6b:36:07:2f:5c:fb:6d:ed:9e:04:da:e9:c9:
8c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:47:DD:DA:BC:AF:47:B7:FC:79:2E:21:89:60:AD:E2:9B:59:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B562340726811EFA3D2D24B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
57:55:4c:33:d3:22:b4:a1:17:18:4e:29:aa:06:45:2a:8f:66:
46:77:73:52:ca:6c:5a:24:41:d5:8b:ec:28:0c:d9:af:e2:be:
19:2d:26:6e:27:b5:2b:e2:a3:d8:6d:28:5b:13:54:ef:6e:79:
15:d9:46:32:3d:46:90:32:9b:92:d4:27:aa:69:7b:95:c3:6d:
e2:94:4a:02:6f:86:bf:58:b0:1b:d5:0c:b4:b9:d4:5b:21:a9:
6a:5b:5c:2a:02:7d:02:4b:e7:cb:a5:8d:81:e3:a6:13:06:83:
1e:16:09:5c:23:9d:8a:53:31:58:c4:14:e9:11:45:94:dc:e1:
f5:b5:cb:73:ff:36:81:c3:82:0d:47:42:08:c3:00:ae:a7:df:
9a:29:c3:42:1c:92:7d:19:4d:32:6c:d1:49:89:56:65:eb:1b:
fd:4f:79:0e:aa:7a:77:d3:b4:b7:00:5c:a9:09:02:b4:44:e6:
c1:74:92:44:16:46:7f:b6:23:37:56:49:d6:91:5e:49:db:c5:
fd:69:ef:e2:7e:17:bb:ac:a7:9a:cb:3b:04:2b:8c:c4:a2:71:
42:6e:b6:f1:2e:e4:66:61:00:45:79:01:bd:bd:72:01:4a:24:
ce:17:b3:d4:88:98:30:d2:c7:ac:23:c1:0d:4e:15:be:ab:d6:
5e:23:61:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:21 2024 by rpki-client on console-ams.rpki-client.org