Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38EC3438726A11EF9DD6BD58762E951A.roa
File: 38EC3438726A11EF9DD6BD58762E951A.roa (raw, json)
Hash identifier: mwKpoduxBnaCDzOItuOseTY+xmhf3M/d5ILKSCrhjI8=
Subject key identifier: 06:46:E1:01:AB:C1:A7:70:6D:3A:AD:AE:96:81:EC:B8:33:A4:95:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B5A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38EC3438726A11EF9DD6BD58762E951A.roa
Signing time: Sat 14 Sep 2024 07:23:22 +0000
ROA not before: Sat 14 Sep 2024 07:23:19 +0000
ROA not after: Fri 08 Aug 2025 07:23:19 +0000
asID: 133861
IP address blocks: 45.207.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46499 (0xb5a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 07:23:19 2024 GMT
Not After : Aug 8 07:23:19 2025 GMT
Subject: CN=66e539ea-0a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:cf:13:be:e1:ef:2b:3c:35:c0:85:b2:f4:
94:85:31:ea:4d:2f:b5:ab:c0:36:43:97:8b:d3:e1:
e3:6f:da:50:39:55:f9:bc:75:02:b6:f5:84:7c:f0:
00:c8:77:c6:71:39:e6:49:32:f8:b3:e5:df:09:80:
11:2d:14:7b:31:b9:87:fe:b3:20:71:63:3a:d9:21:
e9:b0:ff:c8:5f:64:15:9e:8e:e5:8b:2e:89:f7:30:
37:0e:a8:58:24:16:6b:21:df:d8:6c:de:53:a3:02:
fd:76:75:6b:60:fa:eb:81:b6:99:19:a2:26:3b:26:
fd:6c:8e:b1:8a:29:19:9f:27:d2:94:9c:04:eb:e5:
20:fe:ab:04:5f:3b:8c:9e:ee:9e:80:b9:bc:e8:8d:
14:09:78:2e:07:5d:9b:98:4e:dd:2a:69:c8:80:86:
f3:0a:5a:09:1e:e5:aa:dd:0b:10:d3:b2:61:7e:d3:
f7:2b:07:80:f2:ad:d4:58:17:f0:34:6a:67:89:79:
7e:9b:8d:b4:54:58:41:cf:f0:ea:ef:ab:c2:6e:75:
77:e4:b3:d2:92:4c:96:be:68:09:26:f0:b2:2d:b4:
d8:35:47:0d:e5:04:ba:0b:67:a8:83:90:d4:27:72:
99:f4:44:5b:9b:d3:0e:fc:84:d2:da:2e:7c:9e:50:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:46:E1:01:AB:C1:A7:70:6D:3A:AD:AE:96:81:EC:B8:33:A4:95:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38EC3438726A11EF9DD6BD58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.48.0/21
Signature Algorithm: sha256WithRSAEncryption
20:ea:90:84:fe:c2:3f:8b:fa:6a:e6:c6:4d:47:17:d5:1d:9a:
05:3b:91:62:12:da:90:f5:a5:d5:75:7c:2c:47:76:6a:b9:03:
50:b7:1d:74:0f:6b:cf:4a:06:d1:0d:c3:53:b1:0a:33:d4:3f:
8e:f1:65:11:00:8b:3d:53:a6:a0:08:a5:95:d2:57:e6:b6:1f:
e4:bc:37:30:8b:da:55:80:92:50:79:c0:e9:2e:e3:6d:6f:7a:
64:ca:ce:7d:a7:57:34:ea:2c:bc:ec:ad:ae:6b:44:7e:ab:b9:
5b:63:9a:7f:d3:a5:c4:28:98:3c:e6:38:92:03:a6:9d:da:19:
c1:fd:a1:04:94:ab:1a:b1:71:72:df:bd:78:79:a3:27:19:2e:
37:42:49:86:a9:e2:bf:66:b7:a1:d2:48:20:1f:e9:ff:05:f8:
6d:df:3f:78:69:de:51:e3:36:ec:dd:2d:ce:a2:d5:49:79:6d:
57:e7:07:a4:86:d0:4e:25:9d:86:e6:91:9c:88:27:85:33:5f:
da:a4:56:76:eb:02:c6:54:69:dd:68:78:28:b1:66:db:4b:eb:
37:82:04:09:af:8f:9c:4a:a0:2b:f5:ed:e8:9b:3b:37:a0:4f:
4e:cf:87:8c:a4:14:36:e7:35:bf:1e:a4:96:78:2c:df:9a:fa:
80:99:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:25 2024 by rpki-client on console-fra.rpki-client.org