Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1EF064390811EFBE9BC347762E951A.roa
File: EB1EF064390811EFBE9BC347762E951A.roa (raw, json)
Hash identifier: rfaJKzG1ZaUHLof8Vv2F2iiFkWTeOZukXliI4loXLak=
Subject key identifier: 3F:FE:1D:C2:1F:15:D7:B1:A4:F2:02:59:41:FD:AB:11:E9:99:D8:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 97B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1EF064390811EFBE9BC347762E951A.roa
Signing time: Wed 03 Jul 2024 06:53:14 +0000
ROA not before: Wed 03 Jul 2024 06:53:11 +0000
ROA not after: Sun 06 Jul 2025 06:53:11 +0000
asID: 38638
IP address blocks: 45.207.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Sep 2024 00:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38832 (0x97b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 06:53:11 2024 GMT
Not After : Jul 6 06:53:11 2025 GMT
Subject: CN=6684f55a-8e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:4c:58:0d:25:cb:ed:95:d6:b5:c8:74:37:
9c:3d:7d:34:92:78:f1:e5:d9:78:42:04:48:7f:d7:
92:24:1a:c1:12:7b:9f:09:d1:c4:6b:dc:6f:45:0d:
0e:64:9a:36:e7:8f:ac:7a:f3:9e:a8:a0:ed:03:95:
0e:41:1d:30:7a:d5:63:6b:02:14:af:f3:7a:44:83:
4c:f9:58:3f:ec:46:b6:36:c1:d6:37:d7:b8:4e:f5:
9b:59:57:b5:ad:42:d1:86:2b:73:36:5f:33:06:c8:
6d:bb:af:07:7e:94:32:d8:45:56:e2:11:52:bc:27:
c3:2a:8e:36:59:2e:6d:be:41:bc:1a:9e:e9:10:1e:
35:f9:44:14:9b:19:a6:38:18:3d:30:a1:47:1c:1d:
f1:e2:4c:ac:f9:99:ca:df:0f:51:81:0b:ae:d0:67:
fe:d6:de:67:75:53:c0:0b:df:21:2c:e1:07:cf:bf:
b5:bd:4b:8a:c0:9d:39:81:9c:ca:cc:fd:d7:1f:88:
a5:92:52:e6:3f:ae:df:8b:7d:29:da:6e:6d:4c:14:
59:37:9c:ec:fd:3d:f9:e4:10:ca:6e:b4:8a:1b:28:
42:40:00:34:c5:05:0e:1d:f1:17:c8:e1:d8:f8:af:
50:91:88:60:39:b9:0f:ff:35:1d:9d:a3:84:b9:82:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FE:1D:C2:1F:15:D7:B1:A4:F2:02:59:41:FD:AB:11:E9:99:D8:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB1EF064390811EFBE9BC347762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.173.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f3:fb:12:70:94:00:53:31:bd:2f:3a:15:b6:13:13:ff:fb:
6f:9c:ea:98:87:f6:f0:bb:dc:ae:5e:2d:90:33:1c:8d:da:90:
5b:b6:3a:ec:a8:4f:5b:77:78:91:1a:ca:4e:12:68:4b:d9:9c:
67:fa:d9:43:24:93:43:f9:4f:32:87:e2:8b:ad:d3:ce:b3:5e:
3c:ce:b3:5b:dc:0b:31:1d:19:83:ad:18:1d:6a:dc:c0:cc:08:
51:19:cf:a8:6f:96:4d:30:f6:d4:68:91:cd:78:b4:d8:a9:cd:
44:06:38:7c:5b:8c:fe:83:86:05:b8:5a:ea:99:0f:2c:ab:b5:
4b:c5:0f:d1:bc:71:bd:e7:96:7d:45:18:c9:03:21:89:ba:58:
7b:66:ed:c9:3d:90:12:5a:03:21:4a:15:e7:bb:a1:4e:e9:ca:
00:34:b3:dc:34:77:e2:d1:b6:96:5e:40:df:df:f6:f3:7a:d3:
f4:82:24:00:42:4b:f3:b5:8b:d9:b7:37:57:d6:e6:c6:0a:c7:
eb:0c:19:f3:89:2c:cc:55:bd:b4:4d:31:2d:36:78:c5:12:d2:
e5:52:71:73:b8:a0:11:03:92:55:97:88:47:47:a7:66:d2:1b:
48:bd:c4:d7:ba:95:da:a3:ff:52:31:52:53:42:dd:e9:02:68:
00:54:94:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:12:11 2024 by rpki-client on console-ams.rpki-client.org