Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6717C09C1911EF92A6BA6D762E951A.roa
File: 7E6717C09C1911EF92A6BA6D762E951A.roa (raw, json)
Hash identifier: P2/xq8U4PF1U2YXYiM6O2OYvXavaLPl+aAMbYKZgTNY=
Subject key identifier: 01:78:9C:20:B6:5F:55:BF:62:29:ED:DD:4D:83:B4:42:F0:AB:80:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: CF18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6717C09C1911EF92A6BA6D762E951A.roa
Signing time: Wed 06 Nov 2024 08:31:18 +0000
ROA not before: Wed 06 Nov 2024 08:31:14 +0000
ROA not after: Sun 08 Dec 2024 08:31:14 +0000
asID: 48266
IP address blocks: 45.207.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53016 (0xcf18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 6 08:31:14 2024 GMT
Not After : Dec 8 08:31:14 2024 GMT
Subject: CN=672b2956-7f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:10:f2:5c:39:ca:53:6e:b5:1a:f8:bd:41:ff:
75:dc:71:d2:4a:99:c4:79:90:46:33:16:48:3c:87:
29:18:66:7a:87:c4:05:21:48:7d:c4:eb:89:4e:ee:
a0:40:08:80:e5:dc:8d:6e:a1:e2:26:7a:14:25:41:
bc:e1:7a:1b:b2:1d:95:38:a0:d5:2e:06:f7:ad:dc:
13:30:a5:39:94:20:9c:a7:05:1a:ff:b0:b0:29:ab:
11:8f:a1:57:e8:8f:86:4f:68:f0:b3:61:f3:35:5c:
c8:6f:e7:04:8e:bd:df:84:9a:61:2d:8c:2b:fa:78:
3f:fc:c5:cd:7f:09:be:30:b3:86:9c:f2:8c:38:9a:
60:22:b1:6d:3e:8a:47:85:8d:80:ea:d6:59:64:de:
17:2d:b5:71:ca:d6:d7:2a:1e:6c:65:a7:d0:c1:ea:
3e:b3:c6:18:5c:61:52:f4:d5:8e:ae:86:f3:1a:db:
e9:0f:a9:54:b3:ef:75:dc:97:24:10:75:d6:09:2d:
8d:f8:94:58:2d:52:a3:50:25:8e:94:c5:81:e9:90:
ce:97:8c:ea:39:f6:e9:2b:67:31:6d:b5:7b:98:7d:
ae:a5:4d:a7:d8:9c:d0:84:8e:39:b3:c0:8c:c6:30:
bc:1b:bc:fc:17:2b:c6:77:89:52:e4:0a:17:93:85:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:78:9C:20:B6:5F:55:BF:62:29:ED:DD:4D:83:B4:42:F0:AB:80:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6717C09C1911EF92A6BA6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:b0:76:5a:fb:05:a0:5e:63:d4:29:d7:78:57:bc:41:64:c5:
54:b5:d3:fb:27:bc:90:52:cc:73:f0:23:b6:1d:1d:66:5b:eb:
89:dd:e9:c1:b9:f8:94:b5:03:38:1d:df:07:0a:8f:ba:e6:73:
5a:cf:4f:4e:7f:2a:20:df:b6:aa:50:e1:c7:4b:94:71:68:f3:
80:c4:f0:63:fa:55:09:ae:e4:cd:68:c9:39:31:98:9e:e4:86:
2e:e5:b0:3f:2c:a5:43:6f:3d:9f:77:6b:e7:89:89:48:59:04:
e5:f1:aa:16:76:68:0c:42:7f:f3:81:2f:2c:ba:51:52:9b:83:
10:f3:9a:f5:66:a4:9e:a6:76:92:bd:0d:88:b2:3e:27:51:76:
2d:c9:64:33:a5:fb:0e:4d:4c:96:13:62:81:46:79:29:f9:d2:
c5:bb:0e:66:72:fd:5b:74:aa:8e:25:66:a6:e6:49:75:13:70:
0f:a0:49:fd:bf:ce:4f:66:9d:68:a2:4f:eb:35:cd:02:04:b3:
c2:cc:7b:e7:cb:40:df:78:b5:c8:d4:eb:95:ce:a4:07:6d:63:
3f:70:13:a9:86:c6:1c:59:e6:8e:6c:ad:e3:2d:3c:0c:ae:b4:
d5:6b:80:2d:14:7f:12:21:99:80:e8:6d:25:ed:1e:3a:37:5e:
17:c6:e0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:37 2024 by rpki-client on console-ams.rpki-client.org