Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1A025986C33311E8AC8D2975F8AEA228.roa
File: 1A025986C33311E8AC8D2975F8AEA228.roa (raw, json)
Hash identifier: Jl05SvMReaOz3j6YRMEohYjQhYufWTyW+plH8imsl5A=
Subject key identifier: 51:B1:91:5F:45:E2:61:19:97:5C:A6:BA:4F:5A:B7:79:A8:0C:00:28
Certificate issuer: /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial: 17
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Authority info access: rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1A025986C33311E8AC8D2975F8AEA228.roa
Signing time: Fri 28 Sep 2018 15:28:08 +0000
ROA not before: Fri 28 Sep 2018 15:27:55 +0000
ROA not after: Sun 28 Sep 2025 15:27:55 +0000
asID: 37721
IP address blocks: 165.16.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Validity
Not Before: Sep 28 15:27:55 2018 GMT
Not After : Sep 28 15:27:55 2025 GMT
Subject: CN=5bae4888-f578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:af:d4:93:e1:43:f2:1a:00:84:a6:28:22:
fa:83:10:46:e9:e1:76:e5:82:fb:00:45:88:76:8e:
4f:c3:63:2b:94:3a:3c:83:f6:f6:c1:d2:ab:ab:48:
df:94:34:fa:da:32:06:e9:79:39:4c:38:01:77:25:
38:aa:d4:65:9f:2d:35:93:c4:95:5a:64:4a:d4:3b:
3a:51:ea:b4:51:c7:82:e5:f9:a2:fe:ec:91:64:83:
dc:10:49:70:fb:d8:e5:df:5f:fa:6c:73:04:6d:85:
9c:c4:25:71:11:cf:3c:68:8f:22:5b:b9:08:9c:d3:
b7:8f:46:47:0f:c7:e3:1f:ce:7f:d2:28:eb:eb:be:
df:b1:49:5d:42:95:04:26:d4:9c:60:ca:af:57:fd:
a9:1a:09:55:5c:19:c7:f3:cc:21:99:8c:3b:90:49:
b3:16:28:4b:04:73:df:fb:24:ff:b1:3e:a6:f0:b0:
76:46:37:e4:b1:75:b4:d5:ec:70:34:30:12:46:f1:
f8:76:eb:43:10:97:6a:58:03:21:7a:d2:d8:0f:3a:
ca:eb:dc:35:ee:7c:69:74:cb:a5:e9:2b:ef:2f:c3:
85:d6:63:a6:87:7e:59:5b:05:a8:15:b1:60:a8:7f:
61:48:7f:52:7b:98:94:b5:be:a4:61:a7:7f:a6:48:
f9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B1:91:5F:45:E2:61:19:97:5C:A6:BA:4F:5A:B7:79:A8:0C:00:28
X509v3 Authority Key Identifier:
keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1A025986C33311E8AC8D2975F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
165.16.208.0/20
Signature Algorithm: sha256WithRSAEncryption
51:07:95:84:6b:d6:02:6a:11:76:cf:f8:e7:27:0b:ad:8f:d7:
ac:02:57:93:7f:ac:3b:99:cf:90:29:73:97:4d:37:a3:b0:ef:
8c:ba:55:45:96:3c:03:da:6e:87:aa:e5:ac:89:20:e7:a5:23:
80:fb:b3:f0:d7:ac:3d:d0:69:46:b4:64:97:a2:9a:d3:d2:05:
41:32:42:b8:73:9f:29:ca:a0:76:f3:85:b2:fa:e1:b7:1c:1d:
05:3c:dc:60:d5:ae:a6:c5:47:c5:fd:95:d3:7c:41:44:ba:35:
8e:17:12:81:45:5c:26:41:7f:94:4e:1c:53:59:01:12:a8:b9:
90:36:5b:b9:92:30:ce:b9:97:d8:e8:3e:1e:4a:65:15:ca:f9:
89:7c:c2:00:09:c0:19:e3:e6:1b:33:df:10:71:cd:2b:d9:2b:
c4:3f:6e:0d:20:07:56:ce:a8:e8:53:74:97:ec:80:4f:c8:80:
8b:d3:1f:16:b7:08:9a:8f:ce:d0:e7:64:a9:af:b2:13:e5:22:
ae:01:21:5c:04:b7:6e:37:dc:d4:a2:5d:5f:44:f8:7d:c9:b7:
60:30:da:fd:99:da:cb:d4:a6:4b:d1:73:96:8a:6b:d1:1d:e9:
0d:fe:e0:27:6c:74:6c:ea:25:ae:9e:20:e3:c6:61:7f:a2:99:
85:c7:9d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org