Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8957516674C511EF855C5094762E951A.roa
File: 8957516674C511EF855C5094762E951A.roa (raw, json)
Hash identifier: 1bVBSR2DOdBQJkNSX2qp3pE2FJ9QsqY2qW8idlcD0BM=
Subject key identifier: EB:BB:0F:41:38:DB:E6:EB:83:31:4E:9A:BC:BD:D0:58:15:CA:52:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B798
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8957516674C511EF855C5094762E951A.roa
Signing time: Tue 17 Sep 2024 07:22:03 +0000
ROA not before: Tue 17 Sep 2024 07:22:00 +0000
ROA not after: Fri 08 Aug 2025 07:22:00 +0000
asID: 133861
IP address blocks: 45.207.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47000 (0xb798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 07:22:00 2024 GMT
Not After : Aug 8 07:22:00 2025 GMT
Subject: CN=66e92e1b-89bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:58:e2:70:e4:5c:d8:ec:08:33:fc:74:14:
54:fb:d5:1f:94:45:9b:74:19:fd:b3:e7:b3:53:fc:
57:73:cd:d7:b6:10:28:9e:6c:cf:b9:64:b1:a9:37:
5f:e6:a6:ea:af:9e:52:41:ba:d7:60:a8:9a:d8:33:
26:92:8b:bb:22:ea:b9:da:15:74:39:1d:e4:ef:3b:
7a:d5:ca:8d:ea:d3:32:58:0e:4e:7d:bc:53:e3:46:
a0:70:af:f5:a2:0d:d9:0c:95:1f:f9:06:27:a6:04:
ff:c6:d2:75:51:49:9c:c4:a5:88:31:ab:cc:90:17:
8b:41:ce:32:1d:99:42:6d:2b:bb:94:92:92:a2:34:
3e:aa:cc:85:dc:62:98:54:ba:39:cd:0c:e9:9b:15:
46:d6:0a:c9:52:4f:19:85:68:c1:7d:c6:51:cb:77:
cc:de:2d:79:12:f6:fb:b7:a8:61:58:d0:73:ec:db:
d5:e1:e6:7c:88:a6:7e:98:5f:78:b5:03:2e:7a:9e:
f3:1a:68:85:6c:df:d9:2b:b7:2a:b9:29:08:94:85:
eb:8e:28:97:1b:83:50:94:d9:af:6d:cc:90:36:78:
04:9d:45:a4:67:5e:c6:03:6d:20:27:34:01:d9:2f:
8c:61:2b:10:3f:f6:4d:7e:0a:b2:6f:47:d1:a0:cc:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:0F:41:38:DB:E6:EB:83:31:4E:9A:BC:BD:D0:58:15:CA:52:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8957516674C511EF855C5094762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.36.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:6b:b2:7a:8c:98:2c:13:ec:34:a9:50:43:2e:5f:a1:74:3b:
d6:37:55:c9:3d:ad:07:ba:e2:e6:86:a1:0e:df:df:47:b1:99:
90:d3:87:67:fa:85:5e:52:99:d9:6b:63:70:d0:42:13:a9:3d:
38:5f:24:60:a6:76:a2:05:dd:6d:5b:c3:75:0f:d8:91:c4:e6:
15:d8:34:e8:d2:06:56:3b:d1:86:3a:40:ae:dc:fd:aa:b8:6f:
33:6f:c2:ab:3d:60:c1:42:32:16:35:d3:53:67:31:9b:af:10:
89:61:64:59:38:04:88:71:4b:ff:2e:33:4d:65:12:b8:7b:eb:
50:8e:16:12:31:cc:6d:60:d8:7d:eb:00:25:b3:e6:16:2c:94:
24:e8:1d:c6:fb:1c:06:9b:9d:f3:41:33:cf:c4:be:ac:c2:97:
bb:52:a4:e8:24:e8:0f:23:b2:71:fb:2a:94:78:ce:25:cb:d7:
cc:a8:d2:cd:97:ca:e0:2d:27:29:b1:68:fa:59:5c:99:aa:3e:
5e:18:53:a8:6b:b7:45:0f:97:a2:e2:ff:11:45:59:8c:c0:1e:
02:de:36:15:fc:1b:87:d4:94:b1:6f:9e:22:7e:63:a5:de:e8:
ea:17:aa:04:e4:dc:29:27:1b:28:13:aa:8c:10:34:84:10:90:
07:5d:1c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:38 2024 by rpki-client on console-fra.rpki-client.org