Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C3BD86734F11EF9D9D1DBE762E951A.roa
File: F8C3BD86734F11EF9D9D1DBE762E951A.roa (raw, json)
Hash identifier: q+h/AFdkTf0AIaZnKVMf6bHw7FVOVAyEy+7/ZOiPNP8=
Subject key identifier: 49:AE:5D:30:83:7B:39:26:36:3C:43:88:FD:8C:7B:4A:02:B4:39:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B662
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C3BD86734F11EF9D9D1DBE762E951A.roa
Signing time: Sun 15 Sep 2024 10:47:59 +0000
ROA not before: Sun 15 Sep 2024 10:47:55 +0000
ROA not after: Fri 08 Aug 2025 10:47:55 +0000
asID: 133199
IP address blocks: 45.207.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46690 (0xb662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 15 10:47:55 2024 GMT
Not After : Aug 8 10:47:55 2025 GMT
Subject: CN=66e6bb5e-63c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:3e:c5:f0:44:5a:61:2a:65:7c:87:36:72:
22:ca:d3:c6:69:a5:8f:7e:2e:27:90:6d:01:1e:91:
d3:36:f4:0a:61:bb:81:15:75:f0:39:6b:d9:fb:06:
d9:88:d3:4e:36:93:9f:01:45:41:ff:c2:50:42:ff:
f1:f1:24:b5:9b:32:22:85:4f:43:8d:60:db:60:7a:
de:eb:01:8c:b8:84:6d:19:5b:88:f5:d9:93:f1:e8:
c1:17:3a:e5:ee:eb:0b:6b:84:00:68:67:97:11:22:
6f:91:98:66:4d:6e:c6:b5:9b:51:73:64:50:b2:64:
08:1e:39:5e:8c:79:59:e6:94:6f:c0:9a:63:90:d2:
92:a1:b5:0c:21:68:68:68:94:95:60:24:a1:8d:61:
9e:ab:dc:e3:5b:b8:a0:45:5c:d0:fb:d2:b6:a8:c2:
56:59:b2:79:c1:05:b7:e8:43:c3:f6:7a:04:95:92:
9d:44:29:ff:62:c7:12:15:35:90:f1:ee:1f:46:52:
d4:b1:ff:34:62:4f:da:4a:23:b6:22:18:89:b5:5c:
4e:c8:5d:e4:01:57:bc:bc:2f:44:ec:ef:22:c9:96:
a4:c4:90:81:f7:02:71:b1:a7:56:6c:2e:07:c5:45:
98:f2:70:e6:b8:47:a1:8b:7d:99:53:6f:bb:42:79:
e5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AE:5D:30:83:7B:39:26:36:3C:43:88:FD:8C:7B:4A:02:B4:39:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C3BD86734F11EF9D9D1DBE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:74:f4:aa:77:b7:eb:2d:29:41:a2:02:2a:77:28:3f:08:05:
6d:32:ef:01:a4:d4:a3:b3:bb:10:3c:69:2e:99:e5:87:ab:40:
75:8d:e1:91:63:03:fd:09:31:7c:18:7e:c4:1b:76:5f:f9:3f:
75:20:46:25:35:1c:6f:b9:79:a4:d7:3d:7a:eb:5f:3d:f6:90:
cf:9c:3f:4f:5c:36:7a:1a:6e:e6:eb:f0:47:3a:af:1d:6a:d1:
33:8c:97:7a:72:d3:03:eb:25:3a:c3:2c:19:6e:7a:53:d8:52:
cc:65:7d:ad:66:98:21:d3:9e:d2:12:1d:51:68:ab:f0:a1:40:
5d:31:73:3e:85:c0:d0:5e:91:79:a9:14:e7:50:cf:5d:ca:43:
8e:e3:0d:1d:20:50:76:1e:9c:e3:a2:cf:97:f9:c4:64:31:19:
91:aa:52:b0:07:a3:10:61:aa:63:27:89:8e:02:5d:89:18:96:
fe:e4:06:d4:ba:f0:1c:8e:62:f4:ec:26:ae:28:73:e8:82:6a:
d6:17:35:32:24:d9:c0:73:e8:55:84:d5:6e:ec:59:e2:05:fd:
42:8c:9c:49:7d:ec:86:a9:0b:9c:6e:c3:17:e7:8b:82:fb:53:
3d:e6:ca:2d:61:de:25:05:90:9c:a7:47:1d:06:da:71:dc:1e:
4c:fd:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:57 2024 by rpki-client on console-ams.rpki-client.org