Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/A147BE680D4211EF9356066C017001B1.roa
File: A147BE680D4211EF9356066C017001B1.roa (raw, json)
Hash identifier: QuPZYoQI7oZ3C2C6Xc4HwdYmjHFXWbZWWnj28DQTRz0=
Subject key identifier: 10:6D:89:44:56:51:8D:33:E7:B3:3C:03:97:08:63:66:9C:A3:4A:9F
Certificate issuer: /CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
Certificate serial: 015E
Authority key identifier: 19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Authority info access: rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/A147BE680D4211EF9356066C017001B1.roa
Signing time: Wed 08 May 2024 13:55:30 +0000
ROA not before: Wed 08 May 2024 13:55:26 +0000
ROA not after: Sun 07 May 2034 13:55:26 +0000
asID: 32437
IP address blocks: 160.119.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
Validity
Not Before: May 8 13:55:26 2024 GMT
Not After : May 7 13:55:26 2034 GMT
Subject: CN=663b8452-ead2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:05:1f:f1:4c:aa:ca:89:7e:7f:8c:ca:68:
7c:ca:02:46:03:2b:16:8a:2b:2d:09:45:f0:68:26:
77:76:ea:7e:7a:7c:c7:ed:a1:d1:d6:03:39:e0:59:
7c:a7:67:e3:9b:6b:7e:49:f5:ad:1f:62:43:a5:8f:
03:33:b5:18:f5:83:1f:f3:a1:e7:6e:0e:a2:e9:ea:
f3:66:7a:b0:80:0c:7e:f5:69:0f:5a:fa:c0:06:fc:
98:97:c2:ad:61:73:bb:ab:4f:b3:5f:ff:1b:02:43:
f3:5a:96:70:a3:02:6b:b7:3e:7c:df:fc:15:8b:53:
a0:5c:40:03:a7:a7:f1:b9:3a:4a:1a:83:78:d9:ad:
43:e6:79:d8:be:31:64:5a:ad:13:ea:7e:03:49:1e:
b6:56:f5:ea:21:8d:0a:e1:d3:08:62:58:6f:35:88:
ed:68:16:53:06:5d:65:db:fc:70:01:65:ff:cb:62:
5c:ab:1a:55:67:be:af:3f:43:aa:2a:77:ce:a7:34:
6e:88:c7:56:8b:88:dd:32:80:52:ff:3e:a3:3f:45:
ba:a1:92:30:d1:1d:eb:7b:f1:24:26:50:2f:43:dc:
38:ce:ca:a7:1c:76:97:37:13:57:66:43:c5:9e:cd:
bf:5e:fa:98:0b:05:3f:a0:65:f6:28:4d:39:bc:58:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6D:89:44:56:51:8D:33:E7:B3:3C:03:97:08:63:66:9C:A3:4A:9F
X509v3 Authority Key Identifier:
keyid:19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/A147BE680D4211EF9356066C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.192.0/22
Signature Algorithm: sha256WithRSAEncryption
68:d5:d1:75:89:05:d5:7e:30:54:09:99:14:2f:8a:ff:3d:54:
2f:73:dc:74:4b:2c:bf:02:37:08:33:2e:a0:8f:29:94:79:84:
f3:f8:83:5a:28:86:46:20:f2:b0:93:5e:80:bc:7d:d4:f6:e9:
b4:62:74:c2:be:37:f6:2c:da:26:16:ac:87:25:6f:79:82:99:
e9:7e:a5:f6:9a:c6:db:cc:40:f0:19:41:6b:14:9f:9b:58:03:
ff:3a:bf:4d:68:3f:04:ae:57:8b:13:cc:2f:12:8f:53:29:95:
12:88:ca:2a:d5:e9:59:7b:fc:5c:81:e4:ab:f6:75:4f:55:18:
6e:1a:dc:69:a5:09:2d:4b:71:b7:ef:4d:f9:a0:a7:ae:b0:58:
73:23:61:05:ce:41:cd:be:0d:e5:90:41:f2:8f:e6:b0:85:1e:
62:1b:9b:33:01:41:c9:05:04:73:db:67:e0:d1:27:19:ae:79:
ef:b6:2c:a1:de:e6:d7:25:aa:19:66:8a:b2:be:e9:91:87:92:
cf:f0:94:32:69:c9:2c:2d:a8:b3:72:ed:34:66:2d:ac:e8:d0:
4e:fe:cb:50:5e:40:07:74:0f:56:b4:da:a1:f4:0c:1f:31:fb:
c9:c1:19:3a:c3:e9:d6:ec:a6:83:f4:d0:ec:d9:bb:e8:28:82:
98:49:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org