Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50C94A72321F11EFBBAAE087762E951A.roa
File: 50C94A72321F11EFBBAAE087762E951A.roa (raw, json)
Hash identifier: NM20n7c6kOZbVuDtHYjEGkxFRcADtAxh2uGKBoQs5Yc=
Subject key identifier: 74:20:2D:91:F9:F8:6C:66:DB:01:70:94:0F:99:0A:29:50:1A:25:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9465
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50C94A72321F11EFBBAAE087762E951A.roa
Signing time: Mon 24 Jun 2024 11:45:56 +0000
ROA not before: Mon 24 Jun 2024 11:45:51 +0000
ROA not after: Mon 23 Jun 2025 11:45:51 +0000
asID: 137184
IP address blocks: 45.207.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37989 (0x9465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 11:45:51 2024 GMT
Not After : Jun 23 11:45:51 2025 GMT
Subject: CN=66795c74-addb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7b:7b:73:f9:af:c2:52:6a:95:cf:e3:09:f1:
7a:e0:e5:c7:73:ef:16:bd:39:21:15:8d:94:ff:2a:
79:d0:7c:cb:b7:7e:92:1a:c9:7e:c9:ff:2a:da:bb:
be:7a:f3:72:1a:ef:b0:df:4a:28:65:8d:c3:7d:cb:
f4:27:89:60:b1:fd:07:de:e6:59:fc:60:a2:bb:af:
4c:6d:ad:bc:70:40:e0:5f:67:6b:3c:55:a6:de:26:
5f:fa:29:3f:53:75:e8:54:9c:33:73:37:97:bb:3b:
00:60:38:6e:d7:56:9c:39:3a:b8:4b:e3:be:3e:ba:
62:1a:b8:64:51:fc:62:79:c5:eb:36:da:22:18:e3:
61:b4:7c:50:50:3a:9e:4c:e8:a5:aa:fa:d7:91:5c:
dd:70:3c:3f:61:78:21:36:c0:0d:2f:a0:94:45:1a:
55:4e:eb:db:12:e5:25:08:df:8c:ee:6f:fa:f3:09:
71:23:9a:0f:fe:0a:55:fb:db:af:ed:0f:c8:49:c0:
30:f7:83:a5:fb:59:b9:81:0e:6b:ae:da:5d:30:0b:
f3:eb:a5:ae:8b:52:27:4c:f3:51:d5:b3:48:d8:0b:
47:cf:86:28:12:2d:96:73:20:75:d4:59:b4:24:21:
79:66:1f:32:86:d9:06:bc:de:f0:86:14:23:76:e4:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:20:2D:91:F9:F8:6C:66:DB:01:70:94:0F:99:0A:29:50:1A:25:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50C94A72321F11EFBBAAE087762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.169.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b1:fc:cc:c4:78:bf:94:3e:b7:c4:9f:47:ee:5c:de:10:c8:
cf:9f:b2:c9:83:7f:42:03:33:e6:20:03:bd:dc:c1:e5:2c:2a:
4c:ed:c4:4b:39:cd:d7:d7:c2:23:b4:ab:62:b5:4f:01:f7:f3:
85:e6:28:47:f3:51:e7:a2:a2:96:4d:67:e2:0e:dd:98:19:06:
25:84:82:bf:ed:e0:cc:42:8e:1f:29:c0:6a:f7:96:86:d4:57:
cb:01:f5:32:82:b6:02:33:74:4b:7c:94:49:4c:e9:65:41:fe:
f1:63:53:c7:cb:6e:c9:15:99:d1:41:1a:55:5f:04:78:c3:34:
b8:1a:44:a5:cc:74:d6:9e:5c:d0:72:19:16:1d:c2:59:35:dc:
17:58:53:2f:6d:4b:4a:c2:34:8a:d0:0d:e7:7e:56:5b:de:10:
f7:7f:93:4e:46:e6:76:1d:a3:de:3f:52:21:ed:a5:d2:30:4e:
c2:a3:27:ac:c0:e1:04:e3:a8:4e:e4:d4:b8:21:43:db:24:a6:
34:c6:f1:f1:b9:3d:7c:44:10:bd:94:8d:fa:81:f2:cc:b2:29:
bf:8d:7e:3d:6d:b4:fb:7f:8f:4b:7e:d6:9b:cf:98:e1:ce:fa:
af:22:8f:b4:be:44:f2:ac:fe:c3:19:64:7d:db:76:89:f2:c6:
50:11:95:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:32 2024 by rpki-client on console-fra.rpki-client.org