Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/41A178E4429111EF8883AAAA762E951A.roa
File: 41A178E4429111EF8883AAAA762E951A.roa (raw, json)
Hash identifier: MkpjkL83C02qTlHENSDXSaJZwjQp8E4rGj/mJx7w1Cc=
Subject key identifier: DE:80:21:0D:11:64:40:73:80:73:1F:D3:5F:39:5A:17:44:3C:4A:B0
Certificate issuer: /CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Certificate serial: 08
Authority key identifier: EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
Authority info access: rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/41A178E4429111EF8883AAAA762E951A.roa
Signing time: Mon 15 Jul 2024 10:01:51 +0000
ROA not before: Mon 15 Jul 2024 10:01:47 +0000
ROA not after: Fri 14 Jul 2034 10:01:47 +0000
asID: 37153
IP address blocks: 160.115.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.mft
rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Sep 2024 00:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AR/serialNumber=EEB8452014A7AA0B47F2A80E36354127EBB0400D
Validity
Not Before: Jul 15 10:01:47 2024 GMT
Not After : Jul 14 10:01:47 2034 GMT
Subject: CN=6694f38f-9bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:53:a2:18:63:0a:a9:76:56:3a:3c:f1:d5:
c4:10:aa:38:51:18:35:d1:96:80:4f:25:2c:5d:ac:
a6:be:ab:9c:ab:b4:77:87:07:81:b8:03:0b:23:bc:
5d:ba:ea:90:30:93:26:6d:23:f2:1a:d3:09:80:0a:
6b:65:d6:cd:54:c7:c5:b9:6c:06:48:7d:67:29:dc:
62:40:65:38:6f:c5:0c:c3:06:35:a9:fe:11:e0:86:
9f:62:df:ad:80:03:ff:6f:62:6c:53:34:f9:62:a4:
4f:c2:db:87:66:ed:ab:7b:56:01:86:c5:32:39:3c:
19:7e:40:a2:c3:5d:a4:ef:a5:35:03:52:98:7c:c1:
86:cb:11:d5:51:4b:7f:73:6a:de:8c:a5:ad:89:23:
fa:c3:43:ac:c2:d9:b1:97:55:d3:52:cb:36:90:3d:
24:6d:26:96:2b:bc:d1:47:03:e4:69:43:9a:28:3f:
ef:34:d1:d5:59:79:c4:25:a3:e1:10:3a:2b:82:42:
3c:61:97:57:da:02:1a:35:b4:c3:b1:9d:32:be:f4:
15:5c:0b:15:46:db:2a:6a:0d:b7:2e:e1:fc:84:46:
43:6c:9b:77:ea:42:d8:4d:b5:14:4e:03:bf:95:a2:
31:3d:ed:c0:1e:c8:e0:79:69:b7:0a:83:a4:44:5a:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:21:0D:11:64:40:73:80:73:1F:D3:5F:39:5A:17:44:3C:4A:B0
X509v3 Authority Key Identifier:
keyid:EE:B8:45:20:14:A7:AA:0B:47:F2:A8:0E:36:35:41:27:EB:B0:40:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/7rhFIBSnqgtH8qgONjVBJ-uwQA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7rhFIBSnqgtH8qgONjVBJ-uwQA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/393C4C903F5A11EF92994170762E951A/41A178E4429111EF8883AAAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.115.192.0/18
Signature Algorithm: sha256WithRSAEncryption
67:d0:f6:e6:dc:0e:97:33:94:07:1c:da:72:92:aa:cb:04:ce:
ac:80:62:c3:8e:04:3e:f1:20:f9:d7:39:15:8a:91:42:27:a7:
99:4d:3b:f3:90:92:54:48:a3:c3:8d:98:ec:9f:6c:e6:7f:bb:
70:30:e6:ce:54:96:f8:1c:7a:e2:b0:dd:fb:73:b6:40:77:e4:
4e:21:47:a0:5a:a0:a1:39:27:9f:a1:1e:ac:7e:e4:c0:53:a0:
69:09:5e:c6:b2:7b:81:62:71:22:e5:08:3b:3e:52:66:7d:61:
72:16:82:98:38:3a:be:d2:11:89:8f:f3:25:2a:93:de:dc:d0:
d0:55:96:01:f0:09:f6:9d:d6:9f:34:5f:3d:f5:f2:18:95:cd:
22:eb:71:14:cf:ad:a3:bd:30:ab:75:d8:00:5c:91:b7:7b:3e:
1f:c2:29:25:4a:66:59:35:95:e3:9d:28:64:61:bf:b3:a1:20:
31:9f:a3:99:31:b8:b3:2c:06:d5:71:1d:2a:0f:71:7b:82:bf:
57:98:ab:d6:22:32:96:f3:aa:b2:d1:10:d2:ab:90:37:67:eb:
02:37:3f:4d:2e:dc:a9:d8:04:cc:0a:17:df:96:6d:38:59:01:
8d:80:65:3d:62:1f:2c:77:93:5f:ad:1e:37:27:f7:05:01:25:
e8:9f:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 04:18:36 2024 by rpki-client on console-ams.rpki-client.org