Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE3ED036719C11EF9DF3084F762E951A.roa
File: DE3ED036719C11EF9DF3084F762E951A.roa (raw, json)
Hash identifier: o45CIpUZvAHPDNNTQzYWvWX6A3d6wrPBgtNvUXIk2UE=
Subject key identifier: 57:42:DB:A4:58:F6:54:FF:59:A1:72:A5:65:21:22:86:96:A9:B5:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B518
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE3ED036719C11EF9DF3084F762E951A.roa
Signing time: Fri 13 Sep 2024 06:53:23 +0000
ROA not before: Fri 13 Sep 2024 06:53:20 +0000
ROA not after: Fri 08 Aug 2025 06:53:20 +0000
asID: 133199
IP address blocks: 45.207.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46360 (0xb518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 13 06:53:20 2024 GMT
Not After : Aug 8 06:53:20 2025 GMT
Subject: CN=66e3e163-456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:17:f9:5f:aa:5a:bb:7f:ea:7d:ba:38:f0:
f0:d6:9a:f7:78:d7:33:9f:4f:78:76:00:05:85:c0:
c9:ee:22:97:e9:db:f6:e7:29:96:cc:ac:52:fd:aa:
bc:09:d5:73:12:50:51:f6:f1:56:34:2d:99:8d:52:
c5:02:c0:b5:31:84:fa:51:e0:56:a5:ee:a8:a6:21:
e2:b2:4e:1f:1a:2b:f1:75:a7:f7:41:a1:28:1d:22:
9f:89:3a:71:25:b3:44:0f:08:57:9f:ba:6b:60:13:
9d:d7:d1:11:44:b7:fd:66:94:cf:90:a7:d7:91:d8:
fb:5c:32:05:0a:04:13:84:46:a7:5c:7c:bc:0e:1e:
a7:eb:3b:e1:f9:29:cd:cd:d0:23:ba:87:9e:1e:3c:
4c:89:29:b8:1d:83:38:94:b2:16:ed:d5:6d:eb:e5:
78:b0:e3:42:9a:90:ae:5b:ae:e7:c1:38:b1:f2:20:
63:c0:19:27:73:ef:23:ef:33:66:19:82:3b:1e:f4:
2d:05:13:19:d5:ba:75:d8:35:88:1e:78:44:8d:55:
ac:70:95:ae:fd:ec:b6:6e:f7:55:c1:6d:72:76:e2:
8f:06:26:db:09:7e:ab:b4:eb:25:07:cf:d9:06:02:
32:75:15:9f:81:bb:aa:07:db:43:36:b1:0e:62:05:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:DB:A4:58:F6:54:FF:59:A1:72:A5:65:21:22:86:96:A9:B5:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE3ED036719C11EF9DF3084F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:4a:04:37:61:92:8d:e6:41:d1:85:e7:ae:af:a8:bb:1b:fe:
6f:3b:6d:da:66:1c:ba:96:af:fd:0b:55:7e:5d:20:9c:20:d0:
ad:a7:22:30:c6:f6:e3:37:65:79:1d:64:75:39:35:d7:43:ff:
b0:39:ac:18:99:cc:32:b0:f4:b5:29:d7:2f:6e:06:f1:eb:d1:
01:a5:f3:15:8d:2d:7c:0e:61:fe:03:95:a5:8d:35:0d:52:41:
51:c8:a1:35:96:56:90:f0:bd:ed:10:62:c2:c2:57:f6:d0:63:
98:ba:77:b7:50:29:70:7c:19:27:7c:07:84:ff:9c:e4:fd:8a:
97:89:bc:86:01:fb:0d:4f:1e:bc:65:a9:fc:71:e4:b2:ed:db:
50:1a:74:21:da:b9:79:34:43:78:51:93:b7:46:84:ec:ba:2e:
c5:73:65:4a:dc:c0:37:33:18:17:73:d6:f8:88:dd:f2:5c:4b:
8b:e7:12:30:98:c7:67:99:4c:75:d2:1c:10:f3:2d:f5:7c:2f:
86:b4:d5:c8:50:a8:53:d8:06:07:36:74:da:7f:82:49:bc:ad:
4e:e2:a8:00:91:e1:70:e4:0e:10:4a:e4:f7:f4:94:94:6d:c9:
c4:11:4f:7f:8f:32:60:25:51:75:26:af:ee:90:ca:7f:97:48:
23:9c:b5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:50 2024 by rpki-client on console-fra.rpki-client.org