Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/822079B0735111EFBC7B8449762E951A.roa
File: 822079B0735111EFBC7B8449762E951A.roa (raw, json)
Hash identifier: iHDFYZ5+UndUZIQjY4tkbdM4Pv+bOQEGS6zfW1NaKto=
Subject key identifier: 43:27:A2:D4:ED:57:69:7A:67:72:0D:49:BF:73:22:BE:1C:9C:5D:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B668
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/822079B0735111EFBC7B8449762E951A.roa
Signing time: Sun 15 Sep 2024 10:58:59 +0000
ROA not before: Sun 15 Sep 2024 10:58:55 +0000
ROA not after: Fri 08 Aug 2025 10:58:55 +0000
asID: 133199
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46696 (0xb668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 10:58:55 2024 GMT
Not After : Aug 8 10:58:55 2025 GMT
Subject: CN=66e6bdf2-811a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:96:b5:3d:f2:2b:f6:78:aa:0c:44:b3:26:
f7:67:02:3b:58:e5:22:7f:3f:24:9f:4c:8b:d4:24:
b2:9a:1f:e7:c6:b2:ae:ba:bd:f3:ca:47:46:28:3b:
4a:26:98:75:95:4d:8b:95:a7:44:5d:6a:df:86:20:
1a:90:84:c2:fe:86:bf:6d:38:a6:65:68:1a:7b:81:
75:c6:8a:88:18:77:2c:85:12:bd:6b:c3:d2:58:cd:
b9:f1:d3:4e:68:31:61:3d:25:e3:32:2e:c5:a4:09:
71:cd:06:0d:4c:d0:71:6a:26:6d:08:9d:67:55:f5:
0c:1c:a9:29:b2:c8:ae:58:0e:6c:c2:f4:53:38:fd:
2e:b4:61:63:f1:4b:7c:49:b5:94:cd:9a:52:98:61:
a6:0d:a8:c9:9c:9f:a2:2c:31:38:64:49:3b:b6:17:
0d:63:df:c5:77:2c:cf:c6:6b:11:ab:44:ec:35:d3:
7d:0f:d7:c7:a1:fc:06:db:5b:54:31:ee:f4:74:dd:
76:61:24:60:db:82:1b:9f:9f:fd:23:fc:d0:7b:f8:
41:b5:e9:08:9f:5e:f2:32:57:3e:cb:05:e8:1c:d3:
ad:90:d2:5f:7b:c6:27:b4:c0:22:7c:8c:47:41:46:
4e:12:2d:1a:c2:d0:0c:e8:67:59:bf:31:5e:14:f3:
33:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:27:A2:D4:ED:57:69:7A:67:72:0D:49:BF:73:22:BE:1C:9C:5D:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/822079B0735111EFBC7B8449762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:de:89:db:52:e1:44:df:b1:79:53:e2:6e:62:17:b5:bf:9f:
c1:1c:8f:cf:3d:6a:cc:dc:3c:ba:a1:12:2d:2b:81:21:bc:eb:
57:46:c9:ed:14:f5:cc:36:c6:2f:ad:a0:79:01:cd:3a:4e:8c:
7d:ec:d4:a5:52:72:14:31:f6:c5:0d:d8:d3:d1:7a:c1:d1:85:
25:64:47:8b:84:9d:41:38:2d:48:fd:91:cc:bf:4f:ff:55:c8:
e7:86:08:a6:5f:0f:91:44:0b:87:51:81:8b:e1:13:c0:43:89:
79:54:27:f6:20:f7:dd:5d:02:5d:7f:36:1d:d6:f4:97:68:cf:
97:1b:c2:2a:ab:c4:0d:4a:82:f9:91:9e:58:d3:02:c2:ac:7b:
ab:56:b1:e9:89:85:8c:32:7e:45:85:d0:20:d4:d6:04:70:50:
6f:02:b5:16:9d:0d:20:d8:66:af:8c:91:1b:ce:47:5b:0e:12:
84:f1:9d:28:57:fd:8d:7e:db:72:cb:d1:93:9f:36:98:a6:03:
96:a6:de:16:1a:47:61:5c:a2:b1:17:30:40:d6:a0:97:60:dc:
22:b6:bf:66:27:68:05:30:69:de:ad:e1:2e:d5:03:17:57:04:
76:4a:4a:ac:ba:85:7a:c5:28:16:9e:90:a4:fb:f6:34:89:8a:
23:f5:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:37 2024 by rpki-client on console-fra.rpki-client.org