Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A21243673F711EF992C0988762E951A.roa
File: 5A21243673F711EF992C0988762E951A.roa (raw, json)
Hash identifier: aGAQtEjyN841cM2u0ExhoqrmjeFEt3He0WMohSk6Rg8=
Subject key identifier: 2A:A6:C8:DE:AB:6C:56:E5:2C:2A:77:6C:91:5B:E8:B9:6E:65:5E:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B72F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A21243673F711EF992C0988762E951A.roa
Signing time: Mon 16 Sep 2024 06:46:08 +0000
ROA not before: Mon 16 Sep 2024 06:46:04 +0000
ROA not after: Fri 08 Aug 2025 06:46:04 +0000
asID: 133199
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46895 (0xb72f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 06:46:04 2024 GMT
Not After : Aug 8 06:46:04 2025 GMT
Subject: CN=66e7d430-a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:10:ee:3b:7a:72:81:5c:d1:5b:7b:38:c8:
cd:d4:6d:dd:54:95:a9:88:f0:0e:74:f6:1f:c3:e9:
71:15:d1:59:16:3b:63:aa:03:df:4d:28:01:7c:e8:
01:ff:e8:57:99:77:b7:84:91:ec:c2:d4:48:b2:dc:
2f:be:bd:88:7a:37:16:ea:bd:e2:09:dc:8f:96:29:
cc:c1:7c:97:19:bb:87:57:73:0c:e3:ea:9a:d4:3c:
d1:1e:24:8e:99:8e:61:2f:17:d0:a6:fd:a6:19:a0:
cc:f3:80:2a:55:a7:fe:17:3b:16:4a:90:d6:ca:a7:
bf:d0:6f:bb:ec:40:66:45:48:18:ca:56:f6:43:e9:
1c:19:16:07:73:70:ec:70:d1:e1:5c:53:bb:93:ca:
a3:5c:c0:a6:cb:a5:eb:c0:92:a3:c3:e3:1b:5a:bb:
03:ce:25:36:7f:5b:d0:47:35:aa:14:86:62:31:8d:
1c:a9:35:f1:24:9a:4a:a8:d8:9a:57:bf:c1:f6:c7:
62:db:98:dd:52:0f:6f:5c:90:0b:0b:a3:80:67:2e:
dd:f4:ee:6b:90:d6:88:a3:db:35:5d:81:bd:68:39:
7b:1a:ac:6b:d9:93:1a:9d:5a:dd:75:7f:b7:ad:ec:
e1:18:2d:74:be:c2:89:c8:d3:2c:b6:5d:2a:eb:0a:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A6:C8:DE:AB:6C:56:E5:2C:2A:77:6C:91:5B:E8:B9:6E:65:5E:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A21243673F711EF992C0988762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:cf:23:8a:6f:de:52:5a:62:72:95:49:d9:39:0a:07:de:a5:
52:4c:cc:c4:7e:8d:a0:39:d1:44:55:b8:e6:37:10:79:8e:4f:
51:32:f4:04:4e:ac:b5:7f:8b:ad:a4:bb:26:11:03:be:a1:69:
c7:63:29:69:df:06:6a:11:2e:04:61:d7:0e:bb:18:41:3c:28:
a4:af:f7:f8:7d:ca:f7:76:fa:c7:39:8f:92:cc:61:9c:d9:f7:
fb:b3:dd:d1:9d:e2:8f:03:3a:b7:28:6f:e5:6d:9c:cc:b3:32:
af:80:36:42:07:10:28:62:a2:7e:a3:03:16:bd:6c:21:2a:b6:
aa:cf:0c:e7:25:f0:17:1e:80:93:92:b3:2c:d5:38:0e:5d:fe:
05:55:4c:56:40:9d:8d:4f:9b:f6:48:b6:84:08:41:85:a1:dc:
ed:29:45:2e:1f:02:2d:f6:02:27:ee:66:3d:8c:23:b2:10:13:
13:9c:c1:92:fa:ce:d3:b4:10:85:e4:92:2f:9b:69:77:28:87:
cb:de:7c:52:da:3b:39:c2:a1:36:cf:ce:da:a6:6c:c2:90:d9:
22:a2:c2:14:74:2d:52:f9:8c:41:5b:fe:ac:d0:9b:61:c2:16:
16:b9:75:92:cf:0c:15:d1:2a:3c:a1:25:ca:08:16:87:16:e6:
0e:20:2b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:31 2024 by rpki-client on console-ams.rpki-client.org