Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CC9173632BC11EFAA20A0B6762E951A.roa
File: 7CC9173632BC11EFAA20A0B6762E951A.roa (raw, json)
Hash identifier: 194/B0HQhKcxPa5QhHFH1LNSjnPpasmHon/3vMePt38=
Subject key identifier: CE:75:2B:64:91:96:19:AE:F2:21:71:CA:7D:B6:7D:8F:D4:82:02:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9494
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CC9173632BC11EFAA20A0B6762E951A.roa
Signing time: Tue 25 Jun 2024 06:31:00 +0000
ROA not before: Tue 25 Jun 2024 06:30:57 +0000
ROA not after: Fri 03 Jan 2025 06:30:57 +0000
asID: 40065
IP address blocks: 45.199.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38036 (0x9494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:30:57 2024 GMT
Not After : Jan 3 06:30:57 2025 GMT
Subject: CN=667a6424-b7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a3:e0:ac:28:0d:b1:56:40:ca:a3:4c:ad:7e:
c5:74:54:18:fc:7a:c6:22:90:e6:ac:eb:40:2a:ac:
10:b0:77:68:15:a5:bd:bb:4d:a1:ec:b3:dc:9e:12:
b0:24:68:50:12:09:03:9b:7e:92:77:bc:99:d1:e5:
02:d6:1a:01:e0:e4:e0:cd:c3:d2:30:1d:29:fe:cc:
f1:06:82:24:a9:1e:14:2a:fd:73:23:0e:86:71:f2:
3d:8f:f9:87:64:17:c6:5a:d6:ae:0f:61:06:85:16:
45:ea:d0:6d:a5:12:9b:56:50:35:d2:0c:c7:0b:c5:
d1:d7:48:b7:60:5d:44:bc:89:fe:10:27:5e:c4:b1:
0c:83:26:bf:f8:f3:fa:17:06:66:7e:9e:c4:fc:c5:
17:db:c8:ff:06:cd:9e:bf:b2:41:59:14:7f:de:c3:
19:ba:dc:47:13:63:69:78:26:ab:16:af:17:a1:b3:
bf:44:6a:09:61:e5:82:74:a1:a2:32:ad:89:98:c3:
a5:75:45:74:93:95:18:2c:d2:ce:9e:4b:24:ba:53:
5c:08:17:be:22:d1:67:5e:53:68:a8:c6:3f:5c:96:
66:d0:7b:89:5d:a5:3a:fe:f2:46:b5:73:2a:ff:ef:
2d:50:fa:d5:ef:4a:a9:2e:e0:c0:09:d7:de:95:4d:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:2B:64:91:96:19:AE:F2:21:71:CA:7D:B6:7D:8F:D4:82:02:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CC9173632BC11EFAA20A0B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.154.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e4:ea:13:c5:bf:62:6c:8c:c6:41:7e:13:82:24:18:dd:24:
96:37:89:07:bb:6d:bd:a7:59:6d:06:8e:96:89:52:9d:b2:fe:
71:18:c3:78:36:6f:4a:c7:06:b6:b7:25:f3:cb:32:23:79:69:
d9:11:2b:e4:33:10:2f:1b:0e:1e:33:61:38:5e:72:41:74:bd:
1e:a8:9f:9c:94:6a:32:22:2c:ea:58:2c:bf:46:11:20:8d:0b:
9e:4f:65:03:34:36:0d:8b:26:2d:19:94:4a:d1:34:d7:fe:6f:
49:d3:d1:1d:ff:31:d9:aa:e8:91:b6:36:bd:37:2a:fa:96:dd:
45:b5:59:92:73:84:fb:46:9c:6e:fc:71:fe:72:21:76:d5:64:
4f:3b:c7:78:a9:4b:b6:e1:54:b2:4e:e9:32:ec:e9:b5:fa:f3:
63:72:a3:1a:a1:cf:24:33:bd:f6:cf:e8:65:79:8b:fb:be:8b:
a5:60:75:0b:2e:36:97:da:14:44:69:81:56:0a:e9:18:e7:a2:
91:f2:ca:a6:3d:04:9d:e4:83:b4:4c:4e:a4:73:20:c2:d8:ed:
4d:53:59:f4:97:7e:87:a0:e3:f5:1b:0f:4c:87:59:84:de:cf:
75:2b:48:72:ab:af:97:7e:31:83:92:f3:03:ec:9b:21:02:78:
79:d1:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:07 2024 by rpki-client on console-ams.rpki-client.org