Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79FFE028726A11EF9D0BD85A762E951A.roa
File: 79FFE028726A11EF9D0BD85A762E951A.roa (raw, json)
Hash identifier: jlDazo2J8Ao5FCr3ZUkYj4sNL1mefD2B+nWH+TSAFcA=
Subject key identifier: 59:F9:2F:31:AB:28:36:F7:4F:41:B8:7F:C2:86:45:66:7A:80:A6:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B5A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79FFE028726A11EF9D0BD85A762E951A.roa
Signing time: Sat 14 Sep 2024 07:25:11 +0000
ROA not before: Sat 14 Sep 2024 07:25:08 +0000
ROA not after: Fri 08 Aug 2025 07:25:08 +0000
asID: 133199
IP address blocks: 45.207.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46503 (0xb5a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 14 07:25:08 2024 GMT
Not After : Aug 8 07:25:08 2025 GMT
Subject: CN=66e53a57-76df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:5c:6f:95:de:75:b7:d8:6a:88:8b:10:28:
42:e6:f0:61:a8:de:74:38:04:d5:3e:f5:7a:00:b3:
8e:02:55:57:d1:8c:d2:17:fd:bf:ce:9d:78:72:ec:
4a:d4:ca:cf:52:d8:7c:33:68:3a:94:7a:c1:81:0d:
52:de:54:7f:cc:5f:66:07:ff:5d:b1:54:00:a7:3c:
d4:21:d0:9f:29:7c:7b:49:ee:c9:ba:bc:04:c3:04:
1d:a4:3b:a0:7c:73:1c:17:c7:78:21:ea:44:88:32:
29:f3:3b:98:e0:81:c7:9c:74:45:b2:71:90:3a:37:
0c:22:7c:0f:12:f1:b8:9e:99:70:d7:03:c3:c5:f5:
54:8b:dd:d0:8b:6d:7d:80:22:b7:37:98:48:29:c5:
c8:f5:69:c1:1a:18:35:93:4d:7b:e4:a0:ab:04:10:
a2:53:4d:bd:18:3c:ac:38:40:fe:da:c9:cd:6b:2c:
52:3f:ac:27:4f:ad:58:75:92:61:99:35:84:3b:b1:
b5:53:ce:06:ca:5b:2a:1f:86:a1:99:c5:16:ab:f2:
37:87:c8:04:59:3f:82:83:2a:be:9c:2a:ca:c6:50:
d1:db:8d:37:45:87:04:15:35:1c:0a:c9:99:97:4f:
29:e2:16:28:f3:23:5c:d9:06:94:49:14:c0:4b:a8:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F9:2F:31:AB:28:36:F7:4F:41:B8:7F:C2:86:45:66:7A:80:A6:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79FFE028726A11EF9D0BD85A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:57:7b:79:9d:a9:d3:c1:b5:c2:aa:9d:56:58:e5:54:b2:8d:
c2:50:76:18:da:d5:50:d3:46:85:3a:2b:6d:6d:8f:a7:0d:5d:
41:55:b5:54:2f:fd:67:b5:62:c5:fd:06:0b:cd:06:b7:f9:62:
e1:0c:0a:3f:02:3a:be:0d:6f:89:77:b2:9d:83:37:4c:3e:99:
80:ed:8b:37:02:46:ee:9b:3f:ac:54:76:ab:33:07:34:12:82:
bd:e1:89:22:e0:7d:82:33:46:ed:83:db:64:ee:a9:ed:00:a6:
2c:d3:f1:d1:85:2b:5f:18:df:d0:a3:9c:6a:ec:38:d3:42:ec:
e5:0a:0f:f8:4d:aa:b4:a6:ca:68:4f:68:1e:1f:7c:8d:9d:00:
6e:6f:af:d3:b8:fd:a0:80:f8:ce:ae:73:34:63:c6:28:6d:08:
89:44:77:ef:c6:a7:95:05:91:7d:e7:3e:a8:38:21:64:e3:2c:
67:6c:f2:11:ec:5c:4a:9a:d3:1a:c3:d0:31:03:0f:65:2b:3e:
7c:56:ac:f7:f2:98:70:06:e5:84:17:77:ee:b6:f8:4f:df:0e:
16:29:29:3b:f2:a2:49:b2:1c:1a:cb:0c:d7:0c:91:70:fe:6c:
82:73:ad:9f:5d:75:d5:67:da:dd:0f:32:c3:3f:7c:ee:61:17:
2e:3a:c8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:35 2024 by rpki-client on console-fra.rpki-client.org