Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FDFB5C674C511EF9CEF2593762E951A.roa
File: 5FDFB5C674C511EF9CEF2593762E951A.roa (raw, json)
Hash identifier: SBhsReK6xKYtTDNt9eEFFYQF+v197Mes7nEaz3w/+ks=
Subject key identifier: 7E:90:59:99:30:FD:DC:AF:22:A7:66:2B:8A:7B:E1:E3:6D:62:07:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B796
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FDFB5C674C511EF9CEF2593762E951A.roa
Signing time: Tue 17 Sep 2024 07:20:54 +0000
ROA not before: Tue 17 Sep 2024 07:20:50 +0000
ROA not after: Fri 08 Aug 2025 07:20:50 +0000
asID: 133861
IP address blocks: 45.207.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46998 (0xb796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 07:20:50 2024 GMT
Not After : Aug 8 07:20:50 2025 GMT
Subject: CN=66e92dd6-771e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:01:35:79:1b:e5:86:ff:0b:00:a3:23:27:
fa:74:f2:99:fc:1d:75:5e:19:d0:79:c9:4d:d4:7f:
8c:bb:8a:37:9e:ff:b5:f2:a3:b1:fe:ad:b7:45:ba:
1c:2b:df:92:95:a5:c8:43:de:59:d9:d5:49:23:be:
5e:fb:e5:a1:80:83:36:29:79:5f:fc:69:a4:6a:9c:
d7:8e:6b:ad:74:71:71:18:2c:40:3e:bf:a9:c4:e4:
f4:8d:a9:0e:59:e7:44:3b:e0:c0:e7:91:4b:ad:ae:
69:ea:d2:c1:5e:6d:2c:39:81:db:b2:65:1b:5a:e7:
44:ea:6d:43:ed:80:c7:98:df:19:44:ee:56:60:74:
dc:10:ad:35:3c:6b:0f:66:32:c6:93:35:b5:9d:05:
49:68:9a:7a:00:7f:01:6c:7c:4a:79:9c:8f:29:53:
33:61:ba:e1:3f:01:ed:19:2e:18:9d:72:60:91:8a:
b7:9d:5c:c2:c3:1e:af:ef:2f:e7:27:aa:ae:05:76:
9f:3f:b0:19:ac:7a:99:0f:75:60:58:97:2a:ca:4e:
56:91:47:02:4f:00:64:6f:c1:64:33:d0:1f:f5:f1:
f3:b2:d3:77:de:7b:77:2c:d1:a1:cc:42:e8:1c:ef:
f0:77:d6:f0:8d:2b:7e:9d:e0:c3:da:fd:30:2a:3c:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:90:59:99:30:FD:DC:AF:22:A7:66:2B:8A:7B:E1:E3:6D:62:07:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FDFB5C674C511EF9CEF2593762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.48.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:5a:c9:eb:d7:27:4d:9d:9e:65:34:a8:84:c2:55:1a:94:2c:
17:29:5f:5b:ed:4e:01:cf:30:da:86:7d:88:63:a1:e9:4f:5b:
c0:62:e9:c0:30:ca:4c:bb:3b:ed:0b:ea:21:c4:cf:10:89:5b:
25:79:44:cb:27:b2:e2:7f:19:11:53:35:24:f1:42:32:44:1d:
1e:fe:dc:44:d1:df:d2:60:3b:57:e3:15:de:1e:38:13:67:ec:
c4:92:a7:90:d6:52:47:d1:68:bd:34:e5:b4:10:12:f3:4f:b0:
7d:95:e8:b9:e6:0a:08:66:e7:80:c7:72:01:08:d4:4f:39:2e:
f0:49:1e:f6:ab:51:6e:e6:b8:10:83:7b:80:18:ce:1e:fc:96:
d9:6f:13:2c:1a:e9:40:a2:e0:d1:74:c5:a9:ab:1e:a1:95:06:
44:d8:06:5c:50:30:6a:68:c4:cb:87:3c:0e:6b:78:19:4a:c9:
8c:ff:8e:d7:b8:d2:18:ac:cf:3e:f1:e4:ee:7d:26:2b:2e:08:
3b:ef:96:6c:6d:8e:0f:cf:89:d2:57:2b:80:e2:74:10:25:6c:
96:c5:e3:28:f9:a1:49:b4:c9:aa:52:ae:eb:2e:8a:45:59:87:
53:7e:f8:29:b7:a2:50:df:c6:b5:6f:29:0d:4a:13:3e:24:09:
f4:2c:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:32 2024 by rpki-client on console-ams.rpki-client.org