Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25F9D552734F11EFAC4503B9762E951A.roa
File: 25F9D552734F11EFAC4503B9762E951A.roa (raw, json)
Hash identifier: psJq19BqerQaZnowbb1LbP++gcniz3szGcjEfTXBYog=
Subject key identifier: 33:81:ED:D1:D0:57:AA:A6:49:0F:D0:C6:22:72:10:FF:50:6F:AB:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B656
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25F9D552734F11EFAC4503B9762E951A.roa
Signing time: Sun 15 Sep 2024 10:42:05 +0000
ROA not before: Sun 15 Sep 2024 10:42:02 +0000
ROA not after: Fri 08 Aug 2025 10:42:02 +0000
asID: 133199
IP address blocks: 45.207.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46678 (0xb656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 10:42:02 2024 GMT
Not After : Aug 8 10:42:02 2025 GMT
Subject: CN=66e6b9fd-bf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:2c:6f:de:9e:1a:d2:23:5d:40:9e:bf:8d:
9d:5c:3d:89:f0:ea:bb:ee:c8:f4:ad:1e:68:0a:18:
2e:f2:5b:01:72:b5:6c:16:f4:fe:fa:89:77:ce:7f:
b5:9f:1b:d8:9f:7e:73:80:5c:68:83:47:67:c6:6d:
c0:d2:2d:0f:71:a3:2e:9e:dd:04:62:b2:33:d2:6f:
6f:20:fd:5d:c0:05:d5:f3:ce:9d:56:d0:8d:bc:68:
7e:53:46:0f:f6:89:78:b9:4f:67:06:e2:ff:24:56:
db:10:ff:a5:ff:9b:64:22:75:c8:85:5b:e2:10:52:
a1:4a:98:c5:15:29:f1:c6:87:10:17:c9:01:f0:c1:
98:8f:0d:f9:d3:e9:4f:07:8b:35:35:8f:78:a7:1c:
47:6c:cf:d7:e2:d9:28:6b:69:2e:31:79:a0:33:83:
e0:05:e0:be:79:5f:44:b7:7d:52:59:93:f6:b0:76:
8a:11:d6:85:bd:aa:7d:2b:91:1f:4c:3c:24:02:18:
5d:62:07:dc:54:df:bb:82:5a:cc:d2:4e:21:cb:a8:
80:a5:05:c1:2b:77:2f:10:bd:1a:28:2f:9c:df:b4:
ba:a4:dc:f6:d0:f3:cd:7e:e5:c9:21:8a:e9:a3:5b:
c6:f3:02:4d:f6:9e:38:b3:53:49:32:a4:65:93:b8:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:ED:D1:D0:57:AA:A6:49:0F:D0:C6:22:72:10:FF:50:6F:AB:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25F9D552734F11EFAC4503B9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1a:0c:81:80:4b:9c:4d:78:b1:81:57:48:7c:d5:cf:6b:2a:
e1:e4:3e:e2:a7:32:c2:3b:b0:75:c0:40:a5:3d:6c:36:0f:86:
0a:be:00:53:6d:0e:63:72:32:4f:be:b1:a4:5a:d0:91:8b:64:
b2:dd:b1:c1:38:fb:49:18:e4:53:68:f9:11:fd:00:d3:43:6f:
ed:18:f7:5f:4e:92:b5:28:98:50:cc:f4:1f:73:c5:61:a6:8c:
44:05:07:fa:1c:bc:62:56:84:29:44:52:45:61:3b:78:0c:3c:
6d:ff:e4:4b:09:99:f1:68:f1:24:df:35:a3:99:74:e5:b3:cc:
97:df:d8:e1:cf:4b:e7:9e:1a:12:16:57:eb:94:78:55:71:b7:
6a:54:47:9d:e4:89:ca:bd:16:d4:5c:34:90:b5:56:2b:dd:66:
77:8e:b7:c0:1b:07:81:bb:d2:39:aa:d0:6b:65:31:51:2b:15:
a0:52:53:b1:3e:19:20:a9:8f:3f:d3:e1:bd:37:c7:b4:96:fd:
3f:5c:cb:9e:84:87:15:ff:e2:0f:20:71:b7:b6:c0:aa:f4:96:
3e:be:a3:88:76:f4:1b:84:11:31:0c:42:e6:8f:a5:7a:74:ed:
66:f5:76:80:2b:7e:5c:37:b0:b6:31:e8:70:ec:0b:1a:d1:c0:
08:71:93:95
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALZWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE1MTA0MjAyWhcNMjUwODA4MTA0MjAyWjAYMRYw
FAYDVQQDEw02NmU2YjlmZC1iZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnv0sb96eGtIjXUCev42dXD2J8Oq77sj0rR5oChgu8lsBcrVsFvT++ol3
zn+1nxvYn35zgFxog0dnxm3A0i0PcaMunt0EYrIz0m9vIP1dwAXV886dVtCNvGh+
U0YP9ol4uU9nBuL/JFbbEP+l/5tkInXIhVviEFKhSpjFFSnxxocQF8kB8MGYjw35
0+lPB4s1NY94pxxHbM/X4tkoa2kuMXmgM4PgBeC+eV9Et31SWZP2sHaKEdaFvap9
K5EfTDwkAhhdYgfcVN+7glrM0k4hy6iApQXBK3cvEL0aKC+c37S6pNz20PPNfuXJ
IYrpo1vG8wJN9p44s1NJMqRlk7h1aQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDOB
7dHQV6qmSQ/QxiJyEP9Qb6sxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNUY5RDU1MjczNEYxMUVGQUM0NTAzQjk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8tMA0GCSqGSIb3DQEBCwUA
A4IBAQAbGgyBgEucTXixgVdIfNXPayrh5D7ipzLCO7B1wEClPWw2D4YKvgBTbQ5j
cjJPvrGkWtCRi2Sy3bHBOPtJGORTaPkR/QDTQ2/tGPdfTpK1KJhQzPQfc8VhpoxE
BQf6HLxiVoQpRFJFYTt4DDxt/+RLCZnxaPEk3zWjmXTls8yX39jhz0vnnhoSFlfr
lHhVcbdqVEed5InKvRbUXDSQtVYr3WZ3jrfAGweBu9I5qtBrZTFRKxWgUlOxPhkg
qY8/0+G9N8e0lv0/XMuehIcV/+IPIHG3tsCq9JY+vqOIdvQbhBExDELmj6V6dO1m
9XaAK35cN7C2Mehw7Asa0cAIcZOV
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:23 2024 by rpki-client on console-ams.rpki-client.org