Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FFDC2DC735011EF8DEF6941762E951A.roa
File: 3FFDC2DC735011EF8DEF6941762E951A.roa (raw, json)
Hash identifier: 36PXioJl1bdtGvEj29MuIWfMpFMhdfgtnjqJ18OlTto=
Subject key identifier: 1F:38:CC:35:34:38:EC:B2:72:7E:7E:92:4B:64:1F:53:8D:46:7B:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B666
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FFDC2DC735011EF8DEF6941762E951A.roa
Signing time: Sun 15 Sep 2024 10:49:58 +0000
ROA not before: Sun 15 Sep 2024 10:49:55 +0000
ROA not after: Fri 08 Aug 2025 10:49:55 +0000
asID: 133861
IP address blocks: 45.207.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46694 (0xb666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 10:49:55 2024 GMT
Not After : Aug 8 10:49:55 2025 GMT
Subject: CN=66e6bbd6-869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:94:96:02:89:8a:b4:3e:f1:fc:4b:8c:39:
66:6d:03:c7:d8:d6:88:84:f5:96:60:b3:fb:3e:37:
0e:bd:ab:92:d0:ee:43:34:8f:c0:82:59:c7:de:18:
75:fd:dc:cd:75:5d:d2:3d:ab:f1:06:c5:e8:43:55:
82:e1:48:0d:c1:92:ab:f8:10:9b:7c:7e:5c:ae:5c:
3a:aa:e2:a6:83:5b:bb:58:9d:57:68:03:fd:28:c6:
e4:ba:46:4c:31:15:7f:c1:bb:10:e7:20:27:a1:57:
22:1d:da:25:67:9c:f1:26:7d:08:24:b7:fa:1c:6d:
e6:bc:46:47:cb:eb:ac:ee:71:65:65:46:af:6a:8d:
4c:7d:84:6c:10:ec:4b:d1:41:f0:79:aa:3e:9f:62:
a6:c5:24:51:ea:c5:52:4c:f9:c0:25:cf:a8:15:32:
66:26:61:98:a8:b0:e8:6b:0a:bd:63:8b:0e:47:e6:
fb:42:6a:e4:8f:9e:9c:54:59:af:29:29:78:91:d0:
e0:04:a3:bd:b9:a6:46:e3:8c:5f:b1:78:b5:4c:5e:
18:bc:82:78:57:f9:f5:d8:9e:3e:de:b1:74:66:c4:
0c:c4:75:2f:0b:a7:ea:a2:23:36:88:96:11:92:24:
a0:49:55:fb:d4:ac:cf:9c:02:e9:24:fa:d9:e4:dd:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:CC:35:34:38:EC:B2:72:7E:7E:92:4B:64:1F:53:8D:46:7B:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FFDC2DC735011EF8DEF6941762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.41.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c0:1c:bf:3f:4a:80:da:c4:47:21:17:3e:4a:39:c1:16:1a:
98:41:28:1c:98:b0:e5:59:c4:c7:1c:97:a5:42:cf:33:22:94:
0b:63:83:7b:c8:43:c5:aa:54:43:a3:b5:6b:35:66:74:9c:48:
ac:15:e5:cd:16:a4:c9:e2:c1:65:01:bb:89:48:93:a0:b6:c7:
f8:dc:45:a0:43:db:24:69:c3:78:4f:b0:74:e2:e8:72:b9:71:
94:57:7a:d2:3e:87:07:39:80:e2:56:67:72:86:f1:0d:9d:fb:
11:14:be:d6:6c:82:28:f6:c1:ca:48:a4:05:b5:3d:62:99:a3:
d1:65:81:30:24:67:11:3d:82:76:2a:42:2d:a3:22:29:2b:f4:
88:fd:18:d6:c4:06:98:52:bb:42:d6:ec:9a:f5:fa:a7:f7:a5:
f7:05:9f:d1:93:36:29:a8:fa:65:ba:0f:9c:1d:55:20:84:c2:
7e:20:43:cf:bb:33:52:e4:67:37:1a:11:35:3b:d8:40:19:c3:
6c:79:0d:c3:e1:9b:ed:29:13:4e:7f:03:05:41:56:ed:96:b2:
85:f2:22:70:e8:6b:f2:4a:50:bb:8f:b5:cc:26:41:b3:92:8e:
b3:06:ef:f4:f2:09:cf:cf:96:b1:81:8f:8d:c6:ab:28:ba:9b:
52:49:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:27 2024 by rpki-client on console-ams.rpki-client.org