Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7A8090232BC11EF90EFF7B6762E951A.roa
File: B7A8090232BC11EF90EFF7B6762E951A.roa (raw, json)
Hash identifier: /8vsdA3b5TYuPdpsx8oNAAGp/MLbGIOye+vSPXbmUE4=
Subject key identifier: 45:F9:B9:B6:AD:5F:EC:E0:3F:98:A3:29:F3:81:D0:E4:5F:37:E4:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9498
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7A8090232BC11EF90EFF7B6762E951A.roa
Signing time: Tue 25 Jun 2024 06:32:39 +0000
ROA not before: Tue 25 Jun 2024 06:32:36 +0000
ROA not after: Fri 03 Jan 2025 06:32:36 +0000
asID: 40065
IP address blocks: 45.205.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38040 (0x9498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 06:32:36 2024 GMT
Not After : Jan 3 06:32:36 2025 GMT
Subject: CN=667a6487-365f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:07:49:87:ac:cd:8f:90:77:d9:ad:e6:2f:
9c:08:d8:6c:57:af:5b:36:fd:c4:3c:09:2b:8f:bf:
3c:32:47:40:9d:65:db:ee:5c:05:40:f4:25:e5:26:
b4:6e:c8:79:93:31:c4:8c:3d:8d:cd:ae:8d:90:d6:
bd:3c:44:a0:1b:f2:15:f2:a4:0d:15:67:3c:9c:42:
ef:8b:2c:e8:88:5c:e8:3e:06:da:4b:8a:45:0c:46:
3d:38:25:9b:d7:17:78:99:8f:fa:7b:3f:b7:a1:7a:
05:63:ec:3b:ed:f7:0a:d2:94:ac:e0:5c:86:c4:0d:
a0:1a:37:1b:1e:14:21:53:e0:91:e0:85:84:57:fc:
88:83:cd:f7:1b:ce:86:60:35:9a:9e:11:93:52:e1:
8c:a1:bb:14:24:7b:d7:2f:9e:a4:37:99:98:a9:60:
45:3b:1e:d9:2f:db:dc:31:14:7a:57:06:8d:3b:fc:
64:6b:61:30:a9:37:04:5e:8b:35:6d:0f:2b:93:20:
26:f4:94:3d:e8:00:a0:94:e7:04:05:81:8c:e5:ec:
20:0a:f2:60:dd:ca:0e:c1:bb:8c:34:75:66:ec:bf:
df:dd:0b:ee:ed:00:5a:bf:d1:27:71:c5:75:a1:db:
e6:48:02:8b:72:10:52:f6:11:0a:42:42:fa:e2:e0:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F9:B9:B6:AD:5F:EC:E0:3F:98:A3:29:F3:81:D0:E4:5F:37:E4:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7A8090232BC11EF90EFF7B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.8.0/21
Signature Algorithm: sha256WithRSAEncryption
02:1b:19:8f:18:c9:d6:a0:66:85:c0:e9:5b:e2:8f:05:b4:57:
18:97:9d:4f:61:2d:40:b8:60:a7:9f:99:51:4b:3c:42:6c:36:
6c:31:51:a2:72:cd:bb:4c:16:f7:98:26:c9:c0:92:3c:e7:26:
f0:f9:7c:9b:8e:b3:a7:4c:52:47:a4:09:4e:09:c0:fe:11:14:
28:05:31:cb:de:90:59:02:1a:5a:9a:28:93:f2:49:93:d6:48:
5d:50:25:46:51:d1:b8:f5:1e:49:f9:98:fc:ba:33:00:06:13:
a4:c7:13:6c:36:af:85:97:05:2b:ca:e9:9f:4c:01:45:82:e8:
66:29:b7:c2:ca:97:19:b1:5c:db:f8:62:06:a9:48:f7:05:a6:
72:35:1b:18:05:fe:15:5d:62:e8:2d:1f:47:20:f5:16:3a:55:
ad:ef:5d:8e:63:1d:fd:fd:93:65:36:ad:1a:2d:94:e0:e4:89:
dc:b9:dc:0c:74:6f:4a:f3:dc:bf:71:25:67:d7:ac:ea:a4:30:
3e:39:6d:f7:52:45:9b:63:7d:fe:0f:f8:8f:2d:ee:7d:6e:82:
0e:bf:ba:d2:34:d7:06:65:87:2c:00:60:b0:50:55:72:2e:7a:
0a:7f:22:88:1b:e5:22:a9:d7:3f:85:29:43:71:cf:eb:7c:1c:
89:0e:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 10:38:41 2024 by rpki-client on console-fra.rpki-client.org