Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8283755C73F511EFBBE5047E762E951A.roa
File: 8283755C73F511EFBBE5047E762E951A.roa (raw, json)
Hash identifier: ErvbaqUSejGct3eF95JbnXzll/Z6HoYz4OPvB3+IXrg=
Subject key identifier: 00:3B:F3:4D:A9:19:07:31:47:08:18:48:C9:76:4E:68:25:69:BB:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B715
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8283755C73F511EFBBE5047E762E951A.roa
Signing time: Mon 16 Sep 2024 06:32:57 +0000
ROA not before: Mon 16 Sep 2024 06:32:53 +0000
ROA not after: Fri 08 Aug 2025 06:32:53 +0000
asID: 133199
IP address blocks: 45.207.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46869 (0xb715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 16 06:32:53 2024 GMT
Not After : Aug 8 06:32:53 2025 GMT
Subject: CN=66e7d118-0af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:a2:a6:d6:c6:ab:e3:6d:06:41:d8:4b:c3:
a6:83:b1:23:87:83:13:3f:10:cb:21:b5:84:19:88:
28:65:15:ef:f2:12:07:81:7e:be:af:dd:eb:07:17:
88:ae:ce:dd:b5:66:be:f7:20:24:93:26:fc:7f:51:
f0:d0:83:83:c1:a6:dd:f8:95:58:de:85:19:fb:11:
7e:2e:00:0c:6b:37:0a:51:3c:88:c0:8d:f8:bc:55:
4a:30:83:17:9b:0f:61:27:f7:42:fd:85:52:fd:ab:
3d:1c:3f:83:d7:c2:72:31:62:1e:79:2c:cc:e3:d0:
0b:cf:d4:b2:af:c7:70:75:28:f7:a2:89:35:b4:c2:
b2:11:00:1d:21:42:e1:cf:a0:d8:6d:d9:36:89:74:
11:e2:4c:28:6e:25:59:b0:6f:7f:5b:6b:9b:04:69:
c6:18:05:c5:b6:ca:f5:93:6c:95:62:2b:6e:35:73:
5d:e8:22:8f:90:3b:f3:24:48:96:5d:ba:d2:fc:89:
02:b2:fd:93:17:6a:1b:51:f4:09:1f:23:43:7e:99:
8d:f1:91:21:c2:a3:50:ee:ef:df:3e:dd:4c:e2:08:
28:14:83:13:23:19:44:1c:cf:a1:a3:99:d7:08:53:
b8:98:7b:9b:c3:95:cb:e1:57:f1:6c:69:cc:a3:56:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:F3:4D:A9:19:07:31:47:08:18:48:C9:76:4E:68:25:69:BB:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8283755C73F511EFBBE5047E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:c3:c4:e7:88:2f:16:23:56:f6:b1:60:21:bc:8a:38:b7:f8:
60:59:1b:b3:e3:a1:51:c4:07:0b:7a:25:a8:5f:ed:ec:8c:5f:
a3:39:89:e1:d0:07:cf:33:91:23:02:d4:8a:ea:25:c1:82:1e:
28:a1:9f:0f:9f:49:eb:95:56:30:62:b7:d2:65:a7:5b:77:92:
e6:7c:57:df:f4:96:27:ab:73:e3:15:32:40:eb:f4:a9:1e:21:
bf:cf:0d:79:3f:e3:9c:91:e8:00:d1:63:ee:0d:ec:d0:bb:ac:
01:7b:ad:a0:50:2f:b3:6b:be:11:a5:8b:60:16:4e:a5:d4:30:
c3:81:28:1d:f8:b3:bf:e8:f5:09:88:c4:87:cd:e0:fc:57:d9:
d4:ec:fc:09:3c:e8:86:a3:81:66:8e:af:f9:30:ba:e0:44:ce:
b9:43:9c:aa:45:72:9d:38:52:29:88:62:d9:cc:70:bf:eb:69:
87:e2:93:3f:04:2e:2c:85:ba:75:81:45:23:a0:cb:16:ed:bf:
16:b7:a9:d9:cf:58:55:20:8e:f4:6f:d1:b6:94:4d:b7:ad:ad:
c2:2e:69:99:8d:c7:1d:a2:29:8b:93:f6:5f:c8:8e:b2:1f:b6:
ed:2d:44:39:5f:90:88:bd:de:0c:ce:18:2d:63:5c:d3:3d:43:
88:a7:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:38 2024 by rpki-client on console-ams.rpki-client.org