Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE0420874C211EF9587E685762E951A.roa
File: FCE0420874C211EF9587E685762E951A.roa (raw, json)
Hash identifier: xTcl0AZW6PcRX+rShsAdyDvZxeLQcmN2a5e/k8g0vyU=
Subject key identifier: 75:98:D2:D6:76:E6:8B:BE:13:9A:23:2B:39:33:CF:06:1B:E3:D2:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: B776
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE0420874C211EF9587E685762E951A.roa
Signing time: Tue 17 Sep 2024 07:03:49 +0000
ROA not before: Tue 17 Sep 2024 07:03:45 +0000
ROA not after: Fri 08 Aug 2025 07:03:45 +0000
asID: 133861
IP address blocks: 45.207.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46966 (0xb776)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Sep 17 07:03:45 2024 GMT
Not After : Aug 8 07:03:45 2025 GMT
Subject: CN=66e929d5-a32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:ab:98:93:81:0c:41:af:27:51:6d:7f:d4:
de:bc:09:ef:d8:9c:c2:6f:5a:d4:a6:b9:32:9d:af:
1a:29:13:da:8c:ce:5d:34:42:2d:1d:63:22:89:7d:
c7:0b:4c:0d:74:1e:fa:bf:8c:1e:d3:7e:67:a6:33:
49:8d:ed:3e:b3:a8:66:f3:5b:80:cd:b4:e6:77:3b:
4d:30:8e:fe:67:07:2f:bd:fd:67:18:63:e0:c6:24:
b4:a7:4b:7d:95:d8:9f:48:98:8e:46:ff:58:37:13:
56:f6:29:da:9d:e4:89:d8:45:e1:1a:23:67:16:4c:
80:1e:70:eb:6e:86:bb:ca:88:1d:7b:b5:b1:fb:73:
29:13:76:3d:57:1a:83:5f:0e:4f:cc:3f:2f:ed:7c:
68:92:4d:ff:ba:38:99:a1:09:96:ad:cc:e9:45:54:
d8:ed:67:6c:14:e6:bd:c3:fd:83:fc:50:5a:fa:fd:
00:24:fe:86:97:44:cd:d0:6b:a9:30:2e:d4:4a:59:
c9:3f:b7:b9:9e:f9:92:16:57:60:ae:1f:d6:6f:a3:
c4:8d:db:71:f7:38:3c:98:73:d3:9f:ca:5c:dd:22:
57:16:f3:80:0d:9e:ba:18:08:39:29:30:b9:15:59:
29:dc:f3:78:b0:16:20:9b:a7:88:94:96:b5:3a:c8:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:98:D2:D6:76:E6:8B:BE:13:9A:23:2B:39:33:CF:06:1B:E3:D2:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCE0420874C211EF9587E685762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:05:77:ed:fc:7a:bf:68:f7:dc:11:76:67:4b:0c:00:f2:ac:
30:d5:e5:72:1e:2e:a6:28:a7:43:d5:5c:66:e0:91:a8:5d:88:
3d:de:6d:69:0c:e7:57:2c:49:aa:64:1d:a9:2b:81:21:b9:ac:
21:c6:f5:eb:6b:69:e8:3e:35:c1:80:27:bb:85:30:62:9c:7a:
7b:7f:2e:00:81:26:02:c6:0b:60:f7:e6:63:02:d8:46:a0:92:
ad:fe:17:d3:a9:68:f4:92:23:13:65:1b:0e:fe:a7:90:c6:38:
0b:74:27:fe:76:96:b6:25:fc:3a:a8:89:b8:cf:6b:bb:74:e2:
6b:4f:6d:f3:0e:6c:28:72:b2:93:3e:2a:12:f8:2b:a5:d1:a9:
9f:b5:d5:5d:cf:ba:a0:05:72:cb:84:cf:db:ca:15:1b:f0:8a:
9c:2a:11:19:da:5e:8d:47:f2:35:63:ca:ee:98:67:e2:64:dd:
43:22:f9:44:64:6a:ff:1d:ee:3f:87:83:b6:92:d3:d2:f5:d0:
b0:b0:a5:fa:8d:55:a0:9d:ad:6e:20:11:ae:44:bc:03:74:f1:
bc:32:81:ba:d6:a9:78:6e:16:9b:75:fd:c7:3a:66:60:3e:0f:
e9:0f:f9:e0:a8:db:fd:70:61:98:02:ba:01:d2:eb:f6:5c:a3:
0c:f6:d2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:56 2024 by rpki-client on console-fra.rpki-client.org