Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A30D8D4C74C411EFBBD0D28E762E951A.roa
File: A30D8D4C74C411EFBBD0D28E762E951A.roa (raw, json)
Hash identifier: 4rwZ2WJtmk2S2BMLYVFLP2zEZKytj3L4cbMW8jytoWU=
Subject key identifier: 8F:B6:DA:43:EA:A2:9F:E4:DE:FB:DC:A4:8F:7C:CA:FA:EA:AA:01:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B78C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A30D8D4C74C411EFBBD0D28E762E951A.roa
Signing time: Tue 17 Sep 2024 07:15:37 +0000
ROA not before: Tue 17 Sep 2024 07:15:34 +0000
ROA not after: Fri 08 Aug 2025 07:15:34 +0000
asID: 133199
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46988 (0xb78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 07:15:34 2024 GMT
Not After : Aug 8 07:15:34 2025 GMT
Subject: CN=66e92c99-f94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:87:2b:ae:7e:c8:f6:7c:82:26:0c:55:1e:
6e:30:3b:46:fa:b8:f5:ae:99:9a:54:59:fe:ba:a5:
44:e2:dc:42:ef:54:81:e8:d9:41:b4:af:66:06:58:
f8:52:1a:bf:f5:32:ee:c4:f1:a1:3f:c8:61:ef:8a:
b8:5b:29:22:28:fd:b5:7b:65:8a:cf:28:05:89:39:
f4:c2:90:d1:3c:ae:0c:87:85:81:dc:0b:4a:63:b3:
5f:d8:b9:06:ac:27:b5:8e:6e:b7:5e:9e:d7:1a:79:
19:55:66:d5:16:b0:2f:0b:e0:cf:85:ae:93:77:88:
7c:43:03:41:fb:e0:19:cc:b4:d6:7a:82:3c:09:30:
76:45:35:51:5f:90:15:c4:b2:7a:a6:dc:ea:28:cd:
1c:b3:91:65:c7:92:f0:3a:07:57:6c:91:e6:6c:9e:
2e:33:5c:7b:dc:2d:6d:d0:8c:6b:98:1e:b7:11:a8:
2c:62:df:74:94:4a:90:cc:7f:08:07:f2:a9:92:ad:
74:db:7f:be:51:36:cf:4b:ff:19:7d:ca:30:ef:af:
08:d8:7d:df:f7:68:0f:a4:c2:81:aa:78:c5:c3:78:
d7:d2:a8:07:47:6f:77:c0:cd:90:6a:2c:74:6b:e8:
6a:7e:17:ba:2a:66:dc:dd:0f:7e:aa:cf:f1:96:26:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B6:DA:43:EA:A2:9F:E4:DE:FB:DC:A4:8F:7C:CA:FA:EA:AA:01:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A30D8D4C74C411EFBBD0D28E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
38:9a:8f:31:51:64:8e:9f:77:0f:d1:c9:ae:69:c4:90:ab:88:
e8:cf:3a:f1:09:2b:6f:91:ed:57:5b:22:ad:57:49:0a:88:67:
cd:59:5c:1c:fa:a4:ba:1d:bc:15:5c:a3:92:a4:62:06:5a:91:
27:0c:c5:78:a4:57:7d:79:50:f8:af:1c:26:bd:a8:a9:35:6c:
de:c8:e9:f0:82:e6:ed:40:e5:7d:2d:44:ad:63:11:67:55:1d:
b9:6f:33:6a:a1:eb:e3:97:c5:d8:50:74:6b:2c:ac:71:5a:e9:
9b:c7:f1:d6:5a:06:d9:b1:74:7b:48:1c:c3:b1:a7:82:0e:93:
ca:2f:09:7f:77:97:1f:76:4b:7c:3a:59:a1:54:e5:0e:82:f9:
55:85:f1:7b:ce:54:a3:cc:6a:5e:f4:d0:10:ff:3c:03:fe:39:
a1:4f:d7:f7:34:8f:92:8d:23:12:b8:5e:84:d5:4c:49:aa:0e:
bb:a9:af:b7:54:57:c9:7a:21:d4:16:11:a8:ca:a8:84:0a:97:
0a:49:12:01:59:2b:05:f6:59:6e:49:26:47:16:16:63:97:99:
c3:d5:54:25:65:39:ec:1a:08:55:ca:81:45:a5:63:7a:0a:45:
87:46:44:00:35:70:77:2e:fe:58:bd:ab:58:4d:ad:44:3d:2f:
05:92:27:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:43 2024 by rpki-client on console-ams.rpki-client.org