Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/942809C8734E11EFADB13AB6762E951A.roa
File: 942809C8734E11EFADB13AB6762E951A.roa (raw, json)
Hash identifier: De25cVYAIRtVi8a97MA9H9p4PvHxeVxnXDQHiQGz4pM=
Subject key identifier: 12:AC:8C:BB:23:C8:F8:59:73:A6:C9:89:78:F0:54:80:32:EA:00:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B64E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/942809C8734E11EFADB13AB6762E951A.roa
Signing time: Sun 15 Sep 2024 10:38:00 +0000
ROA not before: Sun 15 Sep 2024 10:37:57 +0000
ROA not after: Fri 08 Aug 2025 10:37:57 +0000
asID: 133199
IP address blocks: 45.207.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46670 (0xb64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 10:37:57 2024 GMT
Not After : Aug 8 10:37:57 2025 GMT
Subject: CN=66e6b908-44a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:87:05:03:7c:bd:86:60:7d:5b:aa:79:9a:
6a:8d:30:76:a5:dc:bf:a5:54:3c:cd:39:ce:80:8e:
0a:14:0c:b9:6e:9d:0e:0f:b1:5b:6d:85:36:43:b9:
96:f9:93:68:44:70:f0:ba:24:91:ee:e2:42:59:83:
9c:ea:9e:67:4a:1b:37:d7:f4:ae:c8:e4:68:d5:f3:
e8:20:8e:23:e1:de:a6:34:f6:c7:fe:ac:38:48:38:
b3:03:cc:e7:f5:31:8d:ac:2c:62:94:a8:28:15:e4:
1e:e2:b3:fa:d1:2d:1e:d6:be:cd:91:86:0a:56:c2:
6a:f9:43:45:ae:e9:5c:a5:e7:09:1b:99:09:54:33:
92:ee:6e:c0:d2:60:0d:9f:55:7d:49:5b:f5:c5:34:
f3:b4:7a:ad:72:18:b4:da:d8:5d:81:6e:50:c8:47:
4c:0b:8f:b7:2c:5c:ed:de:17:c5:a1:20:d8:5e:15:
f8:b1:a1:2c:dd:11:5c:bc:82:02:29:24:a1:10:57:
98:b3:f0:cb:2e:87:2a:a5:0c:29:e4:69:8e:a2:c9:
a5:5c:f4:97:e6:9d:ee:8d:e7:d9:5f:fe:5b:4f:13:
eb:e2:ca:38:94:19:bd:0a:25:4d:d2:52:27:26:da:
d4:6f:41:92:db:bd:8f:e9:e5:e8:7c:b5:0d:2f:3e:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:8C:BB:23:C8:F8:59:73:A6:C9:89:78:F0:54:80:32:EA:00:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/942809C8734E11EFADB13AB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:85:96:8a:6e:d8:56:05:3f:42:ce:cb:44:a2:ee:f6:88:5c:
f3:ba:d4:d0:5d:8d:4b:7b:07:f7:e3:ce:92:ae:fd:1e:63:48:
6c:ec:c6:f5:53:d2:b6:c2:4c:3e:18:1a:5c:a1:6d:29:20:eb:
61:f7:5b:f1:0b:ae:6c:36:ac:41:43:e5:08:2c:fc:c8:87:0e:
60:0d:cc:3c:1a:2e:ed:67:11:f6:d6:3c:f1:c1:63:83:0b:54:
49:1f:9f:23:98:50:83:8f:45:95:c1:e0:ad:cd:b9:45:ef:1d:
da:3d:05:65:41:83:a5:45:ed:4b:0e:a3:0b:e3:d0:df:09:1a:
7c:c0:4d:08:16:51:27:ae:10:b7:32:9e:f2:af:80:d0:e6:8f:
90:78:de:d9:4d:2c:fa:69:a2:57:46:89:1f:23:eb:21:eb:56:
52:01:7d:7c:b5:d5:af:59:11:9e:cd:49:4a:38:2b:24:8a:49:
06:59:df:ea:c6:32:40:76:7e:43:8b:2e:5b:0e:3b:41:72:a2:
f8:ef:fb:6d:b5:ba:51:4c:5a:bf:76:2f:e3:70:eb:68:63:83:
f2:7f:03:23:2d:11:1d:f1:d0:0e:cd:c9:5d:67:46:02:16:93:
0a:04:a7:21:f9:83:6c:90:f4:60:53:1a:da:97:ba:94:83:17:
aa:1e:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:41 2024 by rpki-client on console-ams.rpki-client.org