Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DBF964873F711EF97AACE89762E951A.roa
File: 7DBF964873F711EF97AACE89762E951A.roa (raw, json)
Hash identifier: TTtJByiGKVVJXAuhsWdo9d12gLOlh7f93ivOtuTt3sE=
Subject key identifier: A6:F0:1A:1B:31:E6:B5:26:A9:04:A6:73:56:F8:C8:32:8C:F8:D9:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B731
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DBF964873F711EF97AACE89762E951A.roa
Signing time: Mon 16 Sep 2024 06:47:08 +0000
ROA not before: Mon 16 Sep 2024 06:47:04 +0000
ROA not after: Fri 08 Aug 2025 06:47:04 +0000
asID: 133861
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46897 (0xb731)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 06:47:04 2024 GMT
Not After : Aug 8 06:47:04 2025 GMT
Subject: CN=66e7d46b-6a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:ee:e1:11:21:4c:c4:36:21:a3:74:78:38:
d2:0d:0f:65:c4:fe:32:72:9c:20:3f:81:7c:1f:02:
e4:55:0f:e3:b9:12:8c:89:27:3b:35:7f:4e:45:ac:
04:84:ef:a8:30:97:a1:4b:58:e8:93:ca:08:ab:77:
e3:ef:fa:6c:c3:50:c3:8e:df:51:8c:14:69:51:04:
f0:18:16:8b:a1:58:b7:60:66:2c:6b:82:40:a5:48:
06:37:80:91:3f:2e:9a:ab:ff:0b:29:1e:73:36:b5:
cb:83:ec:af:4f:9c:cc:16:f1:ea:61:50:34:23:a6:
32:de:d5:b1:56:b4:c7:d4:b5:d1:b6:32:2f:79:6f:
f6:25:95:01:a5:1f:a2:cf:a5:02:49:ea:f0:c7:e6:
18:ee:a8:fd:6b:c0:c5:97:f1:34:57:cf:8a:8d:fc:
0c:1a:ae:a3:f7:f2:c2:da:da:41:b6:9a:af:ce:dc:
b8:0c:6b:27:1e:ba:32:fb:d2:17:28:37:bd:43:b1:
e7:f0:de:1c:2a:40:de:58:b9:fa:00:e5:8f:9f:27:
83:c4:f9:58:9b:cc:83:40:16:a4:cb:4a:54:3d:a3:
d9:ef:ee:d0:b6:1d:49:74:20:60:70:86:a5:c6:93:
de:18:6c:f8:4d:9c:ff:6f:9b:fc:37:6a:74:82:8c:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F0:1A:1B:31:E6:B5:26:A9:04:A6:73:56:F8:C8:32:8C:F8:D9:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DBF964873F711EF97AACE89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:50:75:89:4a:5d:f7:68:79:96:7f:28:37:ae:61:83:9d:d7:
ae:1c:da:d4:cb:e8:e3:3b:58:75:67:d4:35:e7:5c:1a:c1:f6:
c9:15:d8:2b:dc:de:6f:ad:3d:35:e4:51:1d:69:df:9c:0e:d3:
39:78:7d:60:fb:3b:0c:04:fa:a3:dd:b3:fb:97:f4:02:06:ff:
94:ad:34:fa:b8:c4:d6:44:2e:10:bc:7f:2b:cf:5d:05:7a:47:
21:7c:10:09:be:09:36:ee:8d:6b:80:61:c4:0c:ad:6c:b0:2c:
25:5e:34:4c:7f:11:b9:63:5b:9a:b3:76:83:54:dc:d8:75:e5:
bc:e6:3d:96:7b:29:cd:df:26:99:3a:e0:5e:db:0c:16:f4:09:
ba:9f:ed:d6:7f:b8:e5:56:24:c7:aa:e1:d8:13:29:15:86:e6:
b8:35:81:04:9b:6c:93:73:62:52:03:73:1d:f8:ac:88:3f:b6:
9b:2d:fa:02:07:a2:2e:df:68:ce:0a:57:1d:5c:19:f2:a6:9e:
df:77:ea:80:04:aa:2e:fb:5d:4f:b2:03:75:54:04:21:44:2d:
b2:a9:5c:ae:a4:34:70:6a:71:81:6f:d4:f3:15:28:fb:b9:4b:
45:8b:b0:e2:db:d3:95:30:ed:66:cf:ad:3d:e1:80:fc:00:82:
e4:07:49:28
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALcxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE2MDY0NzA0WhcNMjUwODA4MDY0NzA0WjAYMRYw
FAYDVQQDEw02NmU3ZDQ2Yi02YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt+Du4REhTMQ2IaN0eDjSDQ9lxP4ycpwgP4F8HwLkVQ/juRKMiSc7NX9O
RawEhO+oMJehS1jok8oIq3fj7/psw1DDjt9RjBRpUQTwGBaLoVi3YGYsa4JApUgG
N4CRPy6aq/8LKR5zNrXLg+yvT5zMFvHqYVA0I6Yy3tWxVrTH1LXRtjIveW/2JZUB
pR+iz6UCSerwx+YY7qj9a8DFl/E0V8+KjfwMGq6j9/LC2tpBtpqvzty4DGsnHroy
+9IXKDe9Q7Hn8N4cKkDeWLn6AOWPnyeDxPlYm8yDQBaky0pUPaPZ7+7Qth1JdCBg
cIalxpPeGGz4TZz/b5v8N2p0goxZ0wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKbw
Ghsx5rUmqQSmc1b4yDKM+NkjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83REJGOTY0ODczRjcxMUVGOTdBQUNFODk3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8oMA0GCSqGSIb3DQEBCwUA
A4IBAQA7UHWJSl33aHmWfyg3rmGDndeuHNrUy+jjO1h1Z9Q151wawfbJFdgr3N5v
rT015FEdad+cDtM5eH1g+zsMBPqj3bP7l/QCBv+UrTT6uMTWRC4QvH8rz10Fekch
fBAJvgk27o1rgGHEDK1ssCwlXjRMfxG5Y1uas3aDVNzYdeW85j2WeynN3yaZOuBe
2wwW9Am6n+3Wf7jlViTHquHYEykVhua4NYEEm2yTc2JSA3Md+KyIP7abLfoCB6Iu
32jOClcdXBnypp7fd+qABKou+11PsgN1VAQhRC2yqVyupDRwanGBb9TzFSj7uUtF
i7Di29OVMO1mz6094YD8AILkB0ko
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:36 2024 by rpki-client on console-fra.rpki-client.org