Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDF7C40874C411EFA925F690762E951A.roa
File: EDF7C40874C411EFA925F690762E951A.roa (raw, json)
Hash identifier: hl9fW0yNwIe3BC0OXe6T3K9kKExElsgs6MrFBq0zBEs=
Subject key identifier: 68:13:3C:78:5B:56:AF:FC:A0:FF:7A:90:A2:18:E1:E6:31:55:D1:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B790
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDF7C40874C411EFA925F690762E951A.roa
Signing time: Tue 17 Sep 2024 07:17:43 +0000
ROA not before: Tue 17 Sep 2024 07:17:39 +0000
ROA not after: Fri 08 Aug 2025 07:17:39 +0000
asID: 133199
IP address blocks: 45.207.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46992 (0xb790)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 07:17:39 2024 GMT
Not After : Aug 8 07:17:39 2025 GMT
Subject: CN=66e92d17-95b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:e8:d6:5b:b2:f5:0a:bc:f9:13:46:21:a8:
f4:f9:a6:21:7b:6b:7d:66:f4:7d:07:c5:5c:1a:18:
d0:31:e6:89:54:98:a8:3f:71:10:51:91:b6:d4:4c:
5a:82:45:c7:07:fb:1d:ea:50:2b:f8:f1:94:1a:c7:
ea:99:ab:8a:67:a7:7b:f6:6e:7b:1f:c7:8e:c8:44:
e3:c4:18:11:23:10:da:99:62:85:b5:16:50:57:86:
46:bf:75:82:bf:aa:d1:1d:1c:5a:31:20:ba:b5:51:
c4:e7:9d:59:10:12:7f:1c:e5:27:c7:c8:3b:be:21:
2a:27:94:91:57:82:d8:e9:58:7c:4b:8f:f3:73:90:
a9:76:68:f5:dd:81:00:e1:6c:4f:4a:08:76:47:a4:
f2:0f:a8:e5:3d:e2:26:74:46:b7:90:2b:13:ad:23:
bf:9c:4d:b1:ab:c5:e0:88:1f:00:d1:99:98:b8:b6:
05:1e:92:9c:45:86:a6:8d:03:28:f8:84:73:49:69:
ec:ba:73:3c:5c:27:fe:db:e7:e8:c4:fa:89:26:f1:
8b:f1:58:96:cd:49:28:cb:a1:90:b4:6f:ac:12:3b:
c9:9c:9f:17:9f:e6:a9:cb:0c:94:b3:3d:2c:4f:54:
2b:c3:8f:22:88:08:b9:f3:37:09:ea:d8:38:77:b4:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:13:3C:78:5B:56:AF:FC:A0:FF:7A:90:A2:18:E1:E6:31:55:D1:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDF7C40874C411EFA925F690762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.33.0/24
Signature Algorithm: sha256WithRSAEncryption
84:09:45:9b:9c:ca:ca:3c:05:33:5c:e9:65:90:f0:32:d8:25:
b7:27:a7:52:1c:b3:78:dc:d4:79:32:ca:2b:46:f7:03:2d:8d:
81:e8:c6:7c:99:57:75:a1:8d:60:c4:0f:6d:08:11:b8:a9:15:
74:89:d4:6c:49:2b:ee:82:74:7f:a9:fb:ae:90:d8:cc:47:22:
e1:89:03:92:81:24:f7:91:f8:70:13:c6:c9:56:01:45:01:af:
42:08:f6:cb:b8:b2:6a:a7:e1:90:fe:5c:e8:6c:66:d0:44:9c:
c5:22:c0:80:a9:2f:1a:23:34:6a:9c:16:44:a9:af:13:f9:a3:
be:22:0b:5b:df:88:52:fa:f5:fb:b2:8b:de:97:95:c8:48:b2:
8f:de:d3:9e:3f:90:e0:7f:db:82:36:e2:c1:09:51:64:06:2b:
8a:80:5e:af:75:d6:c3:b8:7f:07:9b:04:32:f9:05:89:3e:01:
eb:23:1c:76:15:ce:b9:5f:46:16:5d:44:cf:0a:e0:45:ef:6a:
f6:9a:f4:32:4f:3d:10:81:6f:93:67:99:c4:b3:56:55:20:b3:
00:46:e1:f1:a8:c2:95:8d:d6:41:aa:5a:d8:cd:1e:f1:5c:be:
c5:f7:ed:28:bf:20:9d:76:71:e2:28:cc:f4:82:a6:94:0f:f2:
4d:f0:0a:45
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALeQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE3MDcxNzM5WhcNMjUwODA4MDcxNzM5WjAYMRYw
FAYDVQQDEw02NmU5MmQxNy05NWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwHzo1luy9Qq8+RNGIaj0+aYhe2t9ZvR9B8VcGhjQMeaJVJioP3EQUZG2
1ExagkXHB/sd6lAr+PGUGsfqmauKZ6d79m57H8eOyETjxBgRIxDamWKFtRZQV4ZG
v3WCv6rRHRxaMSC6tVHE551ZEBJ/HOUnx8g7viEqJ5SRV4LY6Vh8S4/zc5Cpdmj1
3YEA4WxPSgh2R6TyD6jlPeImdEa3kCsTrSO/nE2xq8XgiB8A0ZmYuLYFHpKcRYam
jQMo+IRzSWnsunM8XCf+2+foxPqJJvGL8ViWzUkoy6GQtG+sEjvJnJ8Xn+apywyU
sz0sT1Qrw48iiAi58zcJ6tg4d7SVTwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGgT
PHhbVq/8oP96kKIY4eYxVdGuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FREY3QzQwODc0QzQxMUVGQTkyNUY2OTA3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8hMA0GCSqGSIb3DQEBCwUA
A4IBAQCECUWbnMrKPAUzXOllkPAy2CW3J6dSHLN43NR5MsorRvcDLY2B6MZ8mVd1
oY1gxA9tCBG4qRV0idRsSSvugnR/qfuukNjMRyLhiQOSgST3kfhwE8bJVgFFAa9C
CPbLuLJqp+GQ/lzobGbQRJzFIsCAqS8aIzRqnBZEqa8T+aO+Igtb34hS+vX7sove
l5XISLKP3tOeP5Dgf9uCNuLBCVFkBiuKgF6vddbDuH8HmwQy+QWJPgHrIxx2Fc65
X0YWXUTPCuBF72r2mvQyTz0QgW+TZ5nEs1ZVILMARuHxqMKVjdZBqlrYzR7xXL7F
9+0ovyCddnHiKMz0gqaUD/JN8ApF
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:53 2024 by rpki-client on console-fra.rpki-client.org