Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BCA3CD673F611EFA9C8CF83762E951A.roa
File: 7BCA3CD673F611EFA9C8CF83762E951A.roa (raw, json)
Hash identifier: Efays1USSWfRAfVyiOFeQnuawn03ltSxzKDtx9SJwRM=
Subject key identifier: E0:BA:9F:16:36:DB:79:F7:94:37:85:B7:8C:74:78:66:1F:74:84:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B723
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BCA3CD673F611EFA9C8CF83762E951A.roa
Signing time: Mon 16 Sep 2024 06:39:55 +0000
ROA not before: Mon 16 Sep 2024 06:39:50 +0000
ROA not after: Fri 08 Aug 2025 06:39:50 +0000
asID: 133199
IP address blocks: 45.207.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46883 (0xb723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 06:39:50 2024 GMT
Not After : Aug 8 06:39:50 2025 GMT
Subject: CN=66e7d2bb-4b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:63:44:17:b8:2d:7f:8c:c0:03:b8:48:08:a6:
5a:13:c6:53:e1:82:79:5d:a0:b4:10:61:7b:c3:ae:
38:bc:94:df:fe:43:c1:84:48:7a:46:5f:8b:0e:4d:
8a:56:2e:5a:59:4f:2c:5f:bc:d9:5a:b3:39:a2:6e:
53:30:68:67:58:bd:f7:c3:9b:a4:9f:60:e2:e9:13:
02:ee:43:9a:f8:21:2f:b6:fa:df:f2:09:99:45:2e:
7a:08:45:21:8e:4d:93:f8:a9:15:4d:bd:f2:a6:aa:
b9:bb:b1:66:6b:33:a7:7a:99:e5:01:84:82:54:39:
dc:18:2f:e5:e9:92:3d:a9:e7:df:2e:a8:c6:62:a4:
6e:94:52:09:9c:5e:99:0f:63:41:89:72:7e:95:68:
3c:66:90:8b:99:76:70:67:2b:55:6c:b4:a2:97:af:
28:dc:e4:40:13:2e:cd:d8:77:d8:f3:45:d0:ce:33:
7c:af:9e:3c:98:ad:ad:20:d9:9a:d6:09:30:0c:5a:
f8:77:40:02:9a:ee:c5:78:55:2c:c7:18:28:2d:47:
ec:d8:27:8e:bd:af:9c:0f:c6:18:46:72:9a:d4:35:
97:e6:a6:53:3d:d2:1d:50:91:d6:3d:96:d9:25:42:
c2:97:89:a1:34:f2:e6:46:c4:27:23:92:51:1a:9a:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BA:9F:16:36:DB:79:F7:94:37:85:B7:8C:74:78:66:1F:74:84:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BCA3CD673F611EFA9C8CF83762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:db:da:d1:e0:63:3e:82:bc:4c:1f:90:70:e7:47:5f:42:32:
90:bc:46:51:75:65:df:86:b7:2f:66:ee:a5:8e:f6:b4:0c:9b:
ab:e8:a7:71:de:e2:08:81:ae:a8:ae:62:07:56:77:7f:c2:5a:
50:66:7a:85:ed:70:4b:78:e1:90:11:2c:6d:c3:2b:69:05:b0:
1a:dd:ae:7b:a9:61:93:bb:92:1d:5c:3c:ed:a8:fb:a4:ce:14:
6c:dd:66:97:a5:73:cb:80:64:85:98:1d:10:2a:7b:1f:2a:91:
63:9a:d0:72:a7:35:c5:27:e4:b9:0c:22:c8:c3:7c:e8:4d:53:
e4:4c:77:af:42:7a:85:47:ac:e4:f9:8d:80:ff:6f:eb:8a:61:
bc:53:6a:4c:a8:98:2f:70:77:69:6a:6a:67:8c:f1:e5:c3:74:
b1:c7:14:a8:73:36:92:df:70:ec:8d:23:8f:57:40:e3:15:cc:
59:22:97:39:55:97:6a:16:de:9e:e7:26:62:3f:5c:54:c5:4c:
4c:ff:9f:7c:28:63:ef:b8:15:77:4d:4e:23:ae:07:5e:9f:6d:
37:24:a6:4a:73:cf:49:9c:81:65:e1:4f:99:89:37:ac:cc:6e:
3c:8e:a9:3e:15:80:c4:c0:f7:50:1e:8b:fb:f1:0b:0e:19:c5:
65:75:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:37 2024 by rpki-client on console-ams.rpki-client.org