Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/496408FA726911EF81CB5552762E951A.roa
File: 496408FA726911EF81CB5552762E951A.roa (raw, json)
Hash identifier: 3wCAhE7z5gzclKs//e5KIzuOjkmb4oaUSXL5CNyNFfc=
Subject key identifier: 12:C3:2C:22:25:37:CE:88:9D:31:1A:04:AA:AE:A5:26:0E:17:1F:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B595
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/496408FA726911EF81CB5552762E951A.roa
Signing time: Sat 14 Sep 2024 07:16:40 +0000
ROA not before: Sat 14 Sep 2024 07:16:37 +0000
ROA not after: Fri 08 Aug 2025 07:16:37 +0000
asID: 133861
IP address blocks: 45.207.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46485 (0xb595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 07:16:37 2024 GMT
Not After : Aug 8 07:16:37 2025 GMT
Subject: CN=66e53858-35b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:d6:7d:4f:0d:32:ca:dd:aa:9b:a4:94:87:
44:90:ac:a8:a5:24:85:8e:07:3a:a6:19:cf:08:47:
b0:12:44:bc:8d:c6:47:d4:e1:62:d8:cc:9d:9f:2b:
10:75:5a:25:00:df:32:83:9a:47:89:99:e7:93:eb:
aa:8d:f3:7e:29:b6:9b:a8:71:45:c3:5c:84:9e:ac:
3b:6b:b1:09:39:60:38:a3:0d:eb:c6:6a:c0:98:ae:
22:a3:98:01:c3:a0:ba:a8:fe:97:e4:eb:13:00:d1:
a3:a3:ff:6f:ca:a9:f9:5d:3e:9a:b4:a5:47:38:2a:
a9:11:82:c2:5d:d6:47:39:00:21:ca:b8:cc:df:9b:
ee:b4:e8:8e:c5:89:69:f0:84:19:87:17:08:6c:43:
49:d1:0c:28:50:45:f5:d2:08:92:c9:3b:a0:5a:08:
74:e6:f8:03:52:5a:9c:b5:76:7e:d3:90:01:6a:a9:
4f:86:5b:dd:c3:00:29:03:68:bd:c5:e7:23:82:89:
d8:4c:d9:15:b4:97:da:0e:db:ed:48:5c:9a:c4:38:
34:e4:ac:b9:60:65:ae:91:9b:1f:6e:c8:dc:97:25:
2a:f0:b6:80:d7:3d:71:10:e0:1e:08:a3:1d:ca:7e:
06:81:c4:16:2d:96:bd:9d:04:d9:90:43:d1:dd:bc:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C3:2C:22:25:37:CE:88:9D:31:1A:04:AA:AE:A5:26:0E:17:1F:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/496408FA726911EF81CB5552762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.56.0/24
Signature Algorithm: sha256WithRSAEncryption
17:00:bb:f3:cb:fa:c6:20:0f:c8:3f:29:a6:85:d0:8c:cd:cf:
e3:21:8e:4a:40:9e:db:a0:a3:a3:13:2c:7c:46:41:09:7f:81:
38:7f:d4:d4:12:68:d3:b9:86:fa:53:ad:c8:f2:5c:c8:54:09:
ba:55:7d:f1:fe:12:11:48:41:9c:c1:65:4a:76:a8:37:0d:1f:
9b:51:f6:36:c2:4d:dd:84:a5:28:9e:97:ea:9a:4f:b5:fc:85:
96:0c:35:2a:db:95:f8:53:3d:58:04:7f:b0:36:91:b8:fd:2f:
dc:fb:89:85:35:20:1a:03:8c:30:fa:ba:31:ea:c6:44:e6:6d:
1d:06:75:f5:79:5c:58:3a:ca:21:f8:c1:60:3b:3d:d4:38:ad:
c6:a9:15:5f:1d:52:bf:b6:89:ee:76:ac:99:79:c8:de:32:86:
99:01:ec:73:cd:75:c4:ed:b7:16:bb:ab:7d:01:27:37:5f:9a:
16:fc:0b:b3:6b:5b:fc:fb:9a:ab:e6:d7:39:77:fa:27:bd:37:
2d:22:58:1e:0c:96:6e:03:1c:25:56:db:82:ef:ce:d6:c8:20:
c5:71:3f:bd:6f:d0:95:9e:96:f3:d1:de:f4:70:23:ba:94:31:
2e:1f:d9:bc:7f:82:d5:ce:4a:f4:8e:4e:36:60:12:fe:c9:08:
53:f4:ac:21
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALWVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE0MDcxNjM3WhcNMjUwODA4MDcxNjM3WjAYMRYw
FAYDVQQDEw02NmU1Mzg1OC0zNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv0bWfU8NMsrdqpuklIdEkKyopSSFjgc6phnPCEewEkS8jcZH1OFi2Myd
nysQdVolAN8yg5pHiZnnk+uqjfN+KbabqHFFw1yEnqw7a7EJOWA4ow3rxmrAmK4i
o5gBw6C6qP6X5OsTANGjo/9vyqn5XT6atKVHOCqpEYLCXdZHOQAhyrjM35vutOiO
xYlp8IQZhxcIbENJ0QwoUEX10giSyTugWgh05vgDUlqctXZ+05ABaqlPhlvdwwAp
A2i9xecjgonYTNkVtJfaDtvtSFyaxDg05Ky5YGWukZsfbsjclyUq8LaA1z1xEOAe
CKMdyn4GgcQWLZa9nQTZkEPR3bw+FQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBLD
LCIlN86InTEaBKqupSYOFx87MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80OTY0MDhGQTcyNjkxMUVGODFDQjU1NTI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc84MA0GCSqGSIb3DQEBCwUA
A4IBAQAXALvzy/rGIA/IPymmhdCMzc/jIY5KQJ7boKOjEyx8RkEJf4E4f9TUEmjT
uYb6U63I8lzIVAm6VX3x/hIRSEGcwWVKdqg3DR+bUfY2wk3dhKUonpfqmk+1/IWW
DDUq25X4Uz1YBH+wNpG4/S/c+4mFNSAaA4ww+rox6sZE5m0dBnX1eVxYOsoh+MFg
Oz3UOK3GqRVfHVK/tonudqyZecjeMoaZAexzzXXE7bcWu6t9ASc3X5oW/Auza1v8
+5qr5tc5d/onvTctIlgeDJZuAxwlVtuC787WyCDFcT+9b9CVnpbz0d70cCO6lDEu
H9m8f4LVzkr0jk42YBL+yQhT9Kwh
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org