Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2208B2E74C311EFB0D26F88762E951A.roa
File: A2208B2E74C311EFB0D26F88762E951A.roa (raw, json)
Hash identifier: 227D0AuEw+qpvWMEePr31H4EUj5ZLkruWIwwQ8S31q0=
Subject key identifier: 0C:D4:67:0D:27:21:7B:14:CD:F9:2F:D7:05:AF:F2:F8:8E:39:36:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B77E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2208B2E74C311EFB0D26F88762E951A.roa
Signing time: Tue 17 Sep 2024 07:08:26 +0000
ROA not before: Tue 17 Sep 2024 07:08:23 +0000
ROA not after: Fri 08 Aug 2025 07:08:23 +0000
asID: 133861
IP address blocks: 45.207.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46974 (0xb77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 07:08:23 2024 GMT
Not After : Aug 8 07:08:23 2025 GMT
Subject: CN=66e92aea-e1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:f2:49:87:25:f2:c6:47:29:53:d6:82:65:
37:e5:68:b7:ab:7b:f7:67:d6:12:14:e3:e4:d0:0f:
db:66:e3:cb:a4:11:8e:cc:75:8d:ec:6b:f1:0d:97:
a5:23:b4:06:fb:39:4d:14:9e:58:10:60:8f:f8:a1:
c9:4c:0e:6b:19:88:e8:3d:fd:e2:bd:b2:69:67:dd:
80:e5:b6:a3:25:c1:4d:59:34:70:bb:7d:8e:ef:06:
b9:da:fc:50:42:87:4f:ba:2f:a4:e0:04:c6:e0:45:
1a:a0:8b:9e:83:70:78:57:ea:1e:79:61:51:ec:93:
69:1b:73:b1:09:af:54:25:62:99:3f:53:24:f4:4d:
cc:10:66:d1:bb:e3:9e:50:42:25:df:c8:73:de:90:
20:4b:af:9c:68:3a:ca:47:36:e3:07:94:0f:73:cf:
ae:96:71:81:3d:a8:e1:05:3f:9f:f9:1d:d3:89:67:
ca:77:26:39:6b:9a:5d:aa:2e:fb:eb:b9:c1:75:a0:
41:89:87:b6:e3:78:ec:d1:dd:43:0d:ab:97:34:b4:
cc:6f:e3:ca:5b:d8:b2:ea:6d:7f:53:a5:3d:20:0c:
4c:af:3b:31:f4:64:68:85:47:6d:9c:31:7b:20:58:
0b:ae:e7:92:a8:78:52:8d:1b:7f:c3:8b:b3:bb:8f:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D4:67:0D:27:21:7B:14:CD:F9:2F:D7:05:AF:F2:F8:8E:39:36:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2208B2E74C311EFB0D26F88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:7b:c2:fe:74:f7:54:21:ca:f7:4c:f1:9d:25:5f:32:06:7a:
3a:a7:54:6c:ab:37:b1:87:ac:b4:7b:5d:fd:42:ee:50:46:e2:
6f:ec:4f:ac:8f:bb:60:a4:63:26:9c:33:67:96:ce:2b:fa:37:
8c:8e:85:91:ae:e6:7f:04:69:0c:f3:36:fc:5e:51:e7:3c:d7:
26:0a:29:09:bb:7e:0d:01:01:c7:f9:18:bd:f3:41:64:d8:e7:
92:2f:77:ea:56:60:ff:8e:aa:8f:d9:1c:88:4c:d4:4e:a4:e6:
13:fd:03:23:b3:ff:f2:03:1a:7a:24:c3:59:db:e4:01:90:ff:
fe:0a:72:27:6a:4d:0e:0d:e2:cf:fc:e6:78:62:0c:bb:d4:7f:
ba:43:db:be:78:4d:3d:12:ca:00:2f:73:9c:3b:87:8f:75:68:
f1:5d:5b:37:9c:a0:4f:53:9a:a1:b7:9a:85:df:35:00:ca:1f:
b2:bd:7c:01:73:08:f2:54:cd:3f:11:2a:30:bf:8b:15:b1:aa:
92:ae:35:64:bc:5e:30:dd:d3:41:1d:36:40:67:a8:c4:f3:82:
e2:17:df:73:de:25:fd:08:31:a0:fd:9f:18:b0:6d:ef:e3:fe:
48:a8:17:48:cc:43:dd:4b:dc:57:cd:98:07:27:5e:f2:3e:be:
24:e6:80:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:41 2024 by rpki-client on console-fra.rpki-client.org