Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A1E38E2734F11EFA0E12DBA762E951A.roa
File: 4A1E38E2734F11EFA0E12DBA762E951A.roa (raw, json)
Hash identifier: WlBS1m0MYUNI2ZePGPii2OQhlXr7ulwjAvrQNj3mQa4=
Subject key identifier: 63:29:46:94:44:2B:E7:81:3D:A8:AA:18:88:A4:82:1D:A7:53:AF:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B658
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A1E38E2734F11EFA0E12DBA762E951A.roa
Signing time: Sun 15 Sep 2024 10:43:05 +0000
ROA not before: Sun 15 Sep 2024 10:43:02 +0000
ROA not after: Fri 08 Aug 2025 10:43:02 +0000
asID: 133199
IP address blocks: 45.207.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46680 (0xb658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 10:43:02 2024 GMT
Not After : Aug 8 10:43:02 2025 GMT
Subject: CN=66e6ba39-d948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:98:38:37:e9:f1:3d:d8:e5:3d:94:b1:d0:
9f:d8:63:ef:95:86:bd:53:e6:98:1e:aa:70:e0:11:
32:7a:ab:16:e3:eb:b1:8f:d7:58:d7:69:5b:a4:87:
91:1e:f1:11:a2:10:65:d9:0b:fd:ea:fa:a2:21:05:
89:d6:f6:1f:4c:82:df:3b:f0:b2:f2:a5:f9:05:f1:
d2:44:22:37:f5:96:5f:be:bd:e3:ef:fe:56:0e:92:
3d:d0:dc:8f:62:ac:7e:57:75:ef:e7:f5:da:24:c2:
b9:fc:a6:f3:dc:48:02:21:90:c1:84:b7:e2:9c:2c:
6e:10:41:b7:ef:43:05:94:5e:89:7a:7e:f2:c8:b8:
0e:87:a7:ca:ae:b9:b9:a2:b0:48:4c:36:dd:fb:4e:
8b:58:88:83:55:58:50:e6:44:87:85:0f:2d:80:e4:
ef:db:fb:1c:ea:04:cf:37:93:43:c1:44:09:a1:5c:
46:90:49:87:11:5c:60:4d:8c:8c:5f:1f:58:fb:e3:
95:6a:e3:2c:c3:41:af:75:f9:7c:98:3a:a0:59:46:
99:a0:07:ac:12:96:a9:4d:f8:cc:9b:f5:d2:4d:b8:
6c:08:36:fc:72:5b:45:40:a0:b6:cf:4b:71:2d:d0:
9e:79:1c:6a:82:4c:8c:43:cd:70:5f:10:e9:de:e2:
5c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:46:94:44:2B:E7:81:3D:A8:AA:18:88:A4:82:1D:A7:53:AF:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A1E38E2734F11EFA0E12DBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.44.0/24
Signature Algorithm: sha256WithRSAEncryption
73:47:cb:42:be:0c:04:ac:02:d5:89:3f:c3:57:72:a4:b6:16:
1c:16:37:88:d1:f2:06:26:e2:2b:92:df:85:ef:eb:21:53:a6:
f9:ae:46:df:b4:5c:71:d4:b6:e0:8b:bf:41:e9:ed:6e:f9:79:
4d:70:2f:26:30:23:46:4f:82:9e:07:c6:da:0e:f1:96:45:aa:
62:3b:ee:1e:a8:ab:c1:59:bb:12:36:1e:0d:7f:80:c8:4b:7c:
25:bd:9c:06:24:e2:1f:1d:01:f2:89:ce:f0:0f:f7:fd:b2:6b:
7a:db:e6:b3:72:c0:8b:6c:cd:1f:ea:c0:75:61:56:93:7f:7d:
e4:e0:7d:ce:2b:95:6c:35:ef:4f:b8:fb:7b:98:dd:76:66:11:
18:92:92:22:9c:df:fc:94:e8:a4:fa:ce:ae:87:d5:d2:a7:06:
0b:0c:2f:3f:16:a7:32:d4:38:3d:cf:64:5a:db:42:ce:e8:f7:
de:72:50:16:f0:33:dd:aa:a8:77:2b:0b:ef:fd:af:f8:09:4a:
1e:b7:96:01:30:ca:60:70:32:91:5f:0e:5d:04:fb:4e:16:2b:
27:40:d9:0b:6c:56:70:9c:9d:2f:51:4f:e5:05:5e:cb:46:02:
f3:c5:f3:86:31:2d:85:f9:73:d6:6f:bc:7c:46:88:b5:45:26:
92:4b:19:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:29 2024 by rpki-client on console-ams.rpki-client.org