Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3428799673F711EF9DEBE287762E951A.roa
File: 3428799673F711EF9DEBE287762E951A.roa (raw, json)
Hash identifier: wyCUN09Njjz4dT6DUtGv3a9wLoz7BcT+asZ0NrmPtVo=
Subject key identifier: 1F:39:B2:61:20:89:DE:DB:EE:D1:C1:D3:AA:4D:F9:6C:0D:EA:5A:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B72D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3428799673F711EF9DEBE287762E951A.roa
Signing time: Mon 16 Sep 2024 06:45:04 +0000
ROA not before: Mon 16 Sep 2024 06:45:01 +0000
ROA not after: Fri 08 Aug 2025 06:45:01 +0000
asID: 133861
IP address blocks: 45.207.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46893 (0xb72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 06:45:01 2024 GMT
Not After : Aug 8 06:45:01 2025 GMT
Subject: CN=66e7d3f0-f2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:3f:2a:2c:9f:eb:5c:7a:76:62:f7:72:1b:
a1:21:56:c9:91:ea:9e:e5:00:d7:eb:f2:ea:bf:30:
11:20:05:70:a1:17:b2:21:17:8f:21:62:de:50:f5:
d2:da:d3:42:8d:45:6c:11:a9:29:95:1d:c3:cc:68:
d1:7f:5d:1f:b4:d3:06:ab:96:1f:e3:09:b4:e6:0e:
13:b4:9b:82:d0:a4:9d:19:7f:e4:98:a2:be:bd:02:
9e:35:7f:a1:ed:51:e2:fc:a4:6a:40:83:b4:49:14:
85:af:13:d3:82:96:77:e0:9a:3e:cc:89:4a:5b:6f:
1b:6c:90:2a:b0:b8:0b:cb:b5:07:a2:fc:d2:1f:f6:
f3:2b:10:02:bd:c5:83:69:93:af:14:f6:bc:b4:b4:
de:b4:3e:ca:5c:31:f0:30:41:f6:31:e3:70:dd:b3:
4f:fe:4c:82:29:1f:77:b4:75:23:a3:fd:e8:3e:a1:
c8:03:37:84:22:68:6a:cf:65:82:2d:17:dd:a7:d0:
4a:41:66:3e:78:94:7e:62:2b:ea:06:1d:58:e2:2a:
5b:ba:88:bd:f1:2d:80:17:08:0e:17:f0:f8:cb:56:
98:60:87:cf:69:65:e0:11:fe:1d:80:16:fa:59:27:
68:9e:ee:e9:0f:71:63:2c:34:f3:ba:f2:2e:8e:8d:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:39:B2:61:20:89:DE:DB:EE:D1:C1:D3:AA:4D:F9:6C:0D:EA:5A:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3428799673F711EF9DEBE287762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0f:bf:97:6a:af:24:ca:1c:23:42:f2:a4:a3:c2:be:e8:b9:
58:13:2e:7b:4f:02:bc:79:fe:b0:87:64:f4:20:4f:74:18:24:
2d:3c:e6:d2:a9:47:27:7a:c0:38:d3:04:c7:77:ca:17:b5:2b:
0c:06:38:fb:f4:6d:d2:a9:74:8c:a9:6c:eb:1b:a7:26:d9:be:
93:ca:ec:5a:52:81:f2:15:52:f3:44:8f:42:84:cb:5f:a1:d9:
0d:d0:3c:c3:0b:37:3c:d4:8c:cd:e1:8b:87:a9:03:f2:a9:7f:
b7:25:f7:5d:27:51:de:79:ba:d0:cd:9d:31:90:00:78:5d:8b:
f1:c9:9e:bb:c3:75:cc:d8:46:10:e9:7c:4b:2e:4d:a9:6e:90:
f1:20:23:6f:f9:91:ec:a5:89:8b:be:58:0e:51:f7:21:d1:a7:
8b:96:df:a6:5d:63:40:15:4a:44:cc:d5:20:9e:7a:3e:75:31:
83:11:57:53:e2:d2:43:45:74:d2:4b:08:93:78:97:98:7f:7d:
f7:ba:61:d0:0f:6d:fb:22:47:67:36:ac:ef:a3:d7:d6:cc:31:
dc:ac:57:8c:1e:ca:ae:8c:a6:bb:fe:22:4e:13:ef:ea:a3:10:
66:79:af:14:ab:97:10:aa:95:8e:36:21:ed:27:ea:b7:e2:2d:
29:b9:98:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:24 2024 by rpki-client on console-fra.rpki-client.org