Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/125EF2A63F7011EFB90A2881762E951A.roa
File: 125EF2A63F7011EFB90A2881762E951A.roa (raw, json)
Hash identifier: CYHaNxXH3G1/sB9APmxu1n3UtTgC5Edc0gfpDVgJNk8=
Subject key identifier: 24:D7:18:3E:79:42:57:9C:F3:A1:6F:5D:EA:A5:78:6F:42:50:64:35
Certificate issuer: /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial: 02
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Authority info access: rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/125EF2A63F7011EFB90A2881762E951A.roa
Signing time: Thu 11 Jul 2024 10:26:45 +0000
ROA not before: Thu 11 Jul 2024 10:26:41 +0000
ROA not after: Mon 10 Jul 2034 10:26:41 +0000
asID: 37153
IP address blocks: 160.115.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Sep 2024 00:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Validity
Not Before: Jul 11 10:26:41 2024 GMT
Not After : Jul 10 10:26:41 2034 GMT
Subject: CN=668fb365-9bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:3d:39:fa:a2:fa:2d:09:bb:8b:61:b6:ff:
06:18:f7:1e:8f:06:17:34:5d:05:b9:a9:d4:b3:f2:
cc:b1:72:6a:a5:5b:aa:a7:f9:5a:0f:da:42:c9:68:
64:8b:05:3e:a5:8c:89:87:a2:27:a0:d3:e9:0b:30:
ed:ab:60:7a:9a:d4:67:62:ac:e1:f3:fd:bf:96:b6:
b2:35:ea:84:78:9f:07:e5:77:b5:8e:07:b5:b2:cb:
23:88:51:8e:c7:39:52:ba:b3:28:4c:f0:02:4b:76:
1d:f1:57:35:eb:05:09:e0:a6:f0:6d:14:d8:63:bd:
37:a4:f6:4a:57:03:a2:b4:06:10:27:76:a2:a0:53:
54:84:88:34:b6:6e:e0:90:41:59:e2:f7:98:bd:eb:
7c:1d:1e:0e:99:6c:af:75:59:2b:19:29:6a:7e:e9:
b2:d0:11:c5:05:81:27:eb:d0:c8:dd:91:8c:e4:e4:
01:4e:60:f6:27:9c:91:04:7b:24:bb:64:44:20:05:
08:22:f0:dd:7c:6f:54:6a:e6:7f:3b:42:b3:32:5f:
45:b1:86:f9:5c:e0:59:18:64:2b:67:21:2b:9b:3e:
d0:7d:94:42:02:24:9d:d6:92:3c:cb:06:ee:43:b4:
43:04:ed:68:30:a4:dc:bb:98:b7:6d:a8:67:6a:de:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:18:3E:79:42:57:9C:F3:A1:6F:5D:EA:A5:78:6F:42:50:64:35
X509v3 Authority Key Identifier:
keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/125EF2A63F7011EFB90A2881762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.115.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:cf:0a:6a:38:89:66:85:13:0a:05:97:8d:12:25:22:c1:3a:
c7:3b:82:9c:02:bb:e5:e7:ae:c6:6b:45:8b:a7:94:88:48:81:
d2:d4:b5:77:4c:d6:28:53:5c:82:fa:6b:6a:67:5f:75:0e:5b:
c4:03:7a:82:22:33:73:34:7e:d2:35:f7:64:8b:04:3b:62:d7:
a3:8c:a4:ac:c9:c3:06:21:b3:16:07:e3:98:2f:5a:52:e5:f9:
5d:66:c4:98:1e:e8:38:83:6d:31:87:c1:d4:f1:22:c3:96:a1:
5d:9a:4a:f0:99:82:c1:de:03:e8:c5:6f:4d:94:5c:e2:1a:3b:
e8:52:5e:b6:9c:f9:85:6c:b6:d0:a1:02:3f:e5:6f:b3:d1:8c:
05:fb:1e:5e:0a:6e:de:93:89:54:2c:3e:f4:d4:b4:04:7b:85:
02:50:2f:c6:74:8a:76:17:25:34:2a:3b:52:fe:18:7e:9e:da:
11:c0:8e:46:f8:66:47:20:61:df:dd:2f:ea:95:87:25:f9:ff:
43:30:42:a9:84:75:3e:81:e0:84:a4:0c:3d:e5:6f:a1:dd:f5:
6a:b3:81:03:8f:58:b5:aa:54:96:05:48:e6:13:1a:98:8f:1b:
f2:cc:ac:61:cc:7c:77:09:2a:0d:c6:b4:70:57:03:3a:5d:3e:
8d:0c:11:e0
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
ODBBMUFSMTEwLwYDVQQFEyhFRUI4NDUyMDE0QTdBQTBCNDdGMkE4MEUzNjM1NDEy
N0VCQjA0MDBEMB4XDTI0MDcxMTEwMjY0MVoXDTM0MDcxMDEwMjY0MVowGDEWMBQG
A1UEAxMNNjY4ZmIzNjUtOWJjMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMOdPTn6ovotCbuLYbb/Bhj3Ho8GFzRdBbmp1LPyzLFyaqVbqqf5Wg/aQslo
ZIsFPqWMiYeiJ6DT6Qsw7atgeprUZ2Ks4fP9v5a2sjXqhHifB+V3tY4HtbLLI4hR
jsc5UrqzKEzwAkt2HfFXNesFCeCm8G0U2GO9N6T2SlcDorQGECd2oqBTVISINLZu
4JBBWeL3mL3rfB0eDplsr3VZKxkpan7pstARxQWBJ+vQyN2RjOTkAU5g9ieckQR7
JLtkRCAFCCLw3XxvVGrmfztCszJfRbGG+VzgWRhkK2chK5s+0H2UQgIkndaSPMsG
7kO0QwTtaDCk3LuYt22oZ2reVgcCAwEAAaOCAqEwggKdMB0GA1UdDgQWBBQk1xg+
eUJXnPOhb13qpXhvQlBkNTAfBgNVHSMEGDAWgBTuuEUgFKeqC0fyqA42NUEn67BA
DTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTgwQTEvMzkzQzRDOTAzRjVBMTFFRjkyOTk0MTcwNzYyRTk1MUEvN3JoRklC
U25xZ3RIOHFnT05qVkJKLXV3UUEwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
N3JoRklCU25xZ3RIOHFnT05qVkJKLXV3UUEwLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTgwQTEvMzkzQzRDOTAzRjVBMTFFRjkyOTk0MTcwNzYyRTk1
MUEvMTI1RUYyQTYzRjcwMTFFRkI5MEEyODgxNzYyRTk1MUEucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKBzMA0GCSqGSIb3DQEBCwUAA4IB
AQAazwpqOIlmhRMKBZeNEiUiwTrHO4KcArvl567Ga0WLp5SISIHS1LV3TNYoU1yC
+mtqZ191DlvEA3qCIjNzNH7SNfdkiwQ7YtejjKSsycMGIbMWB+OYL1pS5fldZsSY
Hug4g20xh8HU8SLDlqFdmkrwmYLB3gPoxW9NlFziGjvoUl62nPmFbLbQoQI/5W+z
0YwF+x5eCm7ek4lULD701LQEe4UCUC/GdIp2FyU0KjtS/hh+ntoRwI5G+GZHIGHf
3S/qlYcl+f9DMEKphHU+geCEpAw95W+h3fVqs4EDj1i1qlSWBUjmExqYjxvyzKxh
zHx3CSoNxrRwVwM6XT6NDBHg
-----END CERTIFICATE-----
Generated at Wed Sep 18 04:18:36 2024 by rpki-client on console-ams.rpki-client.org