Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/B2B100A8960311EE9DAC9C0ED25BE465.roa
File: B2B100A8960311EE9DAC9C0ED25BE465.roa (raw, json)
Hash identifier: oJ8IY/etJV+KmOnt6rOLNi+N6bGbXrWs5HWdSZ42ZyE=
Subject key identifier: F5:61:5A:58:6D:85:3D:15:E4:F3:8B:94:87:18:84:B8:34:B7:83:29
Certificate issuer: /CN=F361F1DAAR/serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
Certificate serial: 29
Authority key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
Authority info access: rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/B2B100A8960311EE9DAC9C0ED25BE465.roa
Signing time: Fri 08 Dec 2023 19:55:12 +0000
ROA not before: Fri 08 Dec 2023 19:55:09 +0000
ROA not after: Mon 08 Dec 2025 19:55:09 +0000
asID: 327907
IP address blocks: 169.239.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl
rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41 (0x29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361F1DAAR/serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
Validity
Not Before: Dec 8 19:55:09 2023 GMT
Not After : Dec 8 19:55:09 2025 GMT
Subject: CN=657374a0-d535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:8b:a9:03:58:29:5d:82:f2:19:d4:59:3e:
1e:31:70:16:20:f9:f9:ff:50:fe:c1:ad:ab:6f:c4:
e0:41:22:cc:1a:b8:63:df:53:37:4f:8c:10:fd:2b:
42:f6:ac:d6:0e:7c:8e:e3:a9:17:ab:a5:41:6b:42:
66:ff:a1:56:15:c8:02:3a:d4:1d:24:c9:ed:36:b0:
c0:da:8c:fe:f6:af:28:5f:67:67:95:85:fd:af:1b:
65:e1:23:d9:55:a4:91:ba:08:93:83:f2:df:e9:89:
b7:a2:0a:00:fc:cb:4e:8b:20:5c:7d:dc:48:04:e1:
4d:db:12:a7:58:17:81:e3:73:b6:0d:d2:48:99:c1:
1a:3c:16:3d:6a:17:69:bf:c3:4a:01:d6:09:ef:50:
07:f7:80:e7:31:8d:8c:cc:ec:c3:01:9e:60:67:a5:
46:cc:55:b5:14:97:28:8e:55:a7:69:d8:f1:a8:1c:
45:03:41:a4:85:4c:54:f5:c5:87:55:84:25:24:f7:
91:13:7a:51:4c:f0:df:35:ad:3c:77:12:2c:83:6e:
c4:6f:d1:04:97:10:99:9e:15:7e:bc:11:67:76:50:
a1:97:6e:3f:4f:d9:66:5d:2c:89:57:4a:46:b4:e2:
a1:73:1a:7d:12:7a:31:63:4f:68:79:6d:87:26:6b:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:61:5A:58:6D:85:3D:15:E4:F3:8B:94:87:18:84:B8:34:B7:83:29
X509v3 Authority Key Identifier:
keyid:86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/B2B100A8960311EE9DAC9C0ED25BE465.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.8.0/22
Signature Algorithm: sha256WithRSAEncryption
95:52:89:b1:71:a0:07:9b:4a:8a:12:13:6c:f3:80:ea:69:42:
af:77:d6:21:59:07:bb:9a:07:fe:c2:bb:10:cb:1f:5e:56:8f:
47:02:39:c2:b2:94:95:03:1f:2d:05:ba:cc:ff:ec:6b:02:9d:
21:0c:04:fd:37:4c:2e:af:5a:ee:51:f7:0e:fb:09:8f:0f:47:
bd:2e:d3:9f:66:38:03:b9:50:68:6c:cb:ff:92:f4:6d:0f:cb:
c8:4c:16:e6:35:6f:b6:f8:9a:c6:fe:08:7a:dc:8b:c7:8c:47:
41:69:ef:04:9d:5d:4d:29:f0:fd:38:e5:d1:aa:a8:e1:32:e5:
e8:bb:d6:15:dc:a6:99:7b:1c:dd:f8:75:e9:ba:23:fb:52:2b:
84:3e:9e:2e:9d:c2:f7:72:8a:0c:14:f7:8a:85:8a:60:d6:0e:
41:ee:2b:5d:d5:f3:82:6f:37:ee:d4:38:a7:2f:f3:aa:1c:b0:
bc:e7:d2:10:c8:4a:f9:21:6a:b0:54:54:45:3f:d3:16:ba:4c:
6c:3b:ed:19:ad:d0:f6:d1:cb:f9:f6:6d:ee:d0:0c:6c:a5:4f:
04:b3:5c:56:fd:5c:4e:af:3b:13:34:bb:d1:b5:2c:35:f9:ef:
5e:43:f8:ff:db:3d:de:b8:1b:6c:d4:8c:9a:ff:e1:e7:f3:2a:
c6:c1:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org