Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C61F1C46612E11EFB5DB9694762E951A.roa
File: C61F1C46612E11EFB5DB9694762E951A.roa (raw, json)
Hash identifier: 2ntSm2YQfERN4VsSbbM1Q6vs4w7BDcJFv7Vn6aOj41g=
Subject key identifier: A1:1A:AA:E5:E5:A4:33:78:47:22:78:D9:0D:92:37:AF:05:27:62:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: ACE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C61F1C46612E11EFB5DB9694762E951A.roa
Signing time: Fri 23 Aug 2024 09:04:59 +0000
ROA not before: Fri 23 Aug 2024 09:04:56 +0000
ROA not after: Sat 14 Jun 2025 09:04:56 +0000
asID: 21859
IP address blocks: 45.207.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44262 (0xace6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 23 09:04:56 2024 GMT
Not After : Jun 14 09:04:56 2025 GMT
Subject: CN=66c850bb-8e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2f:1b:79:cd:d1:25:89:54:90:2e:32:43:07:
42:b1:ca:35:f8:a2:ff:d1:80:b5:a7:2e:3d:e4:4a:
37:27:c8:f3:bc:d1:50:e6:5f:c8:55:70:65:24:e0:
cf:84:9b:43:4f:9e:7d:2b:e8:79:ba:b8:be:a5:30:
86:b7:8e:f4:eb:8e:22:b8:2a:9d:8f:fb:2c:1e:40:
ad:b2:73:0b:1e:6b:99:b5:50:1b:e7:2b:f0:e9:c2:
3d:49:21:dc:cc:7f:6b:f8:33:6a:fe:7b:86:3d:65:
f3:3f:90:2f:02:37:42:5b:b0:8a:82:d0:ce:96:9c:
02:e6:04:eb:03:14:b4:09:a5:d6:16:7d:11:b2:14:
6a:eb:bf:20:b6:68:a2:0f:0e:31:73:44:3e:b2:d9:
ae:d9:62:0e:16:df:07:f8:8a:77:7e:8e:6d:82:f4:
ac:e4:71:7a:a2:55:03:5f:3e:54:6f:90:82:e9:66:
af:41:7d:7f:f9:ef:63:66:28:8c:a6:d0:43:31:2a:
ee:53:f2:d2:a7:7d:1f:70:45:84:9f:b1:0f:f7:e5:
4f:9a:cd:4b:9a:dd:9b:00:00:12:af:54:3e:01:51:
6c:23:af:74:6b:18:7a:7f:be:f6:ab:d8:fa:c2:0e:
e0:aa:84:36:23:72:ff:4c:c7:f4:af:f3:43:0f:0f:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1A:AA:E5:E5:A4:33:78:47:22:78:D9:0D:92:37:AF:05:27:62:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C61F1C46612E11EFB5DB9694762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.172.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:23:0f:55:02:83:17:d3:46:1b:95:3b:52:73:33:3e:68:60:
c4:1f:56:aa:66:73:bb:f4:57:3e:71:cf:3e:d9:fe:04:bd:99:
dd:96:84:01:36:c8:c9:b5:e8:a0:ab:85:af:c2:0f:ff:70:f9:
d5:cb:bc:37:41:7d:71:93:2a:e4:1a:c5:3d:4f:61:25:84:9a:
d1:12:42:44:c3:42:a5:f5:9c:eb:f3:67:3c:c9:af:ad:1b:6c:
7f:8f:3d:73:16:96:c3:c6:7f:a3:46:5d:e0:8b:56:8c:ec:93:
1d:2a:f7:14:5f:00:5a:10:3c:cb:72:18:f5:3e:49:cd:01:f5:
4c:10:5b:bb:94:c3:fa:40:3a:20:23:54:a6:68:41:15:05:5c:
20:68:1e:44:54:9c:bd:ef:68:35:9d:51:6c:47:ab:33:dd:3c:
b0:40:0f:75:ee:53:63:48:4d:b6:2f:b7:f1:d3:71:5a:70:00:
84:59:ed:4d:78:27:39:13:db:0f:33:88:89:9e:4a:15:90:03:
13:52:8a:1d:91:81:f5:ac:dc:89:24:fb:01:cc:0e:2f:a0:5b:
3a:b8:d5:c4:e2:3d:11:21:96:da:a8:0f:78:7c:0e:71:6e:ca:
c5:0b:01:6a:15:9e:2f:f6:23:73:39:0a:9b:52:02:b9:5d:5a:
de:66:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:49 2024 by rpki-client on console-ams.rpki-client.org