Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/2A43259A58F611EBBD09D57CF8AEA228.roa
File: 2A43259A58F611EBBD09D57CF8AEA228.roa (raw, json)
Hash identifier: WPisOjcj+StdxwsqWmn4CkLiQfIapFNZLQWEEijOKvI=
Subject key identifier: 57:54:37:82:D7:9A:BD:55:E8:9A:67:9F:31:B0:FF:38:EC:B1:32:17
Certificate issuer: /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial: 037A
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Authority info access: rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/2A43259A58F611EBBD09D57CF8AEA228.roa
Signing time: Sun 17 Jan 2021 18:59:46 +0000
ROA not before: Sun 17 Jan 2021 18:59:31 +0000
ROA not after: Fri 17 Jan 2025 18:59:31 +0000
asID: 37721
IP address blocks: 165.16.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Validity
Not Before: Jan 17 18:59:31 2021 GMT
Not After : Jan 17 18:59:31 2025 GMT
Subject: CN=60048922-f3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:67:44:5d:69:93:4d:10:f3:fb:f8:ab:1a:
06:f4:7f:7d:32:b9:28:c7:7b:38:a6:40:37:81:f6:
6d:df:23:96:a7:93:2b:12:5e:7f:75:26:f8:1a:68:
d6:66:fb:d2:8c:a6:63:bc:26:e2:77:ea:b8:44:47:
e2:fb:06:44:8b:c0:db:ff:9b:e3:48:70:3c:b6:49:
ea:c9:f0:0c:b6:8a:39:cc:19:5f:d4:f6:3d:0a:af:
d8:7b:d5:6a:1b:a9:cd:6d:a5:8c:70:2d:33:29:ca:
2b:a0:34:20:ca:71:9f:c5:9f:cc:bd:23:35:de:b9:
c9:6c:07:15:0c:bb:c1:e9:99:bf:0f:a0:9c:47:3b:
4a:c1:6d:7c:91:5e:5f:ad:d3:02:19:ab:e5:b5:73:
e0:28:df:a9:76:0e:16:9d:1f:3a:5d:d5:4d:b2:dc:
dc:db:3c:49:ff:1a:0f:85:29:d6:99:05:ce:e3:02:
9d:ab:c7:bf:1d:1d:9c:2f:6a:c7:12:67:0c:36:c2:
33:9f:f5:ae:a3:b9:72:b5:4a:56:3a:65:4a:f8:87:
7b:5b:b6:5e:78:c8:51:11:26:0d:99:de:5a:ec:e1:
b4:3c:26:b4:6c:7b:fa:30:48:8d:4e:b7:e2:a1:ba:
43:b4:9e:12:5c:27:93:32:85:c4:2c:78:a7:d2:31:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:54:37:82:D7:9A:BD:55:E8:9A:67:9F:31:B0:FF:38:EC:B1:32:17
X509v3 Authority Key Identifier:
keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/2A43259A58F611EBBD09D57CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.208.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:a5:e5:21:bd:8d:68:2a:2c:31:14:8c:08:60:aa:5f:65:17:
90:43:fb:bb:d4:1b:dd:5a:ec:9e:b3:53:fe:38:f1:31:27:c7:
02:25:7e:0e:cb:56:64:b3:78:2c:09:55:68:c5:d3:bb:ef:bc:
65:72:38:f5:f8:4f:6e:cc:a8:c4:d8:11:29:be:eb:64:24:de:
d2:ad:2f:1d:b2:c0:34:04:8e:29:f1:dd:43:df:d1:f0:8c:84:
50:17:35:ea:d8:8c:1c:0f:5b:b4:1d:ec:75:44:bb:e0:d6:d6:
6e:bd:1a:9d:ce:dc:db:fb:2d:b5:a3:74:b3:2e:4d:1f:a7:c2:
43:75:8d:88:b2:26:90:81:a0:9d:f0:ac:ec:d8:89:e7:ee:b8:
50:19:45:02:49:06:59:4a:88:09:dd:17:cc:98:6c:9a:e2:1d:
f1:fd:8a:a5:a5:56:09:a0:60:3e:b5:bc:f2:82:b6:9f:70:2e:
c3:eb:58:36:97:08:e4:8e:86:c2:fe:a8:fb:5b:33:29:69:c5:
f4:ff:3d:f2:09:e7:68:f0:ca:e4:1e:fb:b8:d2:3c:77:33:a9:
8d:c4:46:45:a8:3f:ae:ef:15:42:8c:e7:34:5b:6d:de:46:b2:
95:c8:a6:20:a2:3f:72:9c:0b:6e:a6:d6:5b:da:68:57:15:ed:
6d:09:a3:0d
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICA3owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdBMDJBUjExMC8GA1UEBRMoRDZBNENFQjI1MEUxQjg5ODIzQzVBQzQzOTg3NEQz
NTFGOTBDNDJFNjAeFw0yMTAxMTcxODU5MzFaFw0yNTAxMTcxODU5MzFaMBgxFjAU
BgNVBAMTDTYwMDQ4OTIyLWYzZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2eGdEXWmTTRDz+/irGgb0f30yuSjHezimQDeB9m3fI5ankysSXn91Jvga
aNZm+9KMpmO8JuJ36rhER+L7BkSLwNv/m+NIcDy2SerJ8Ay2ijnMGV/U9j0Kr9h7
1Wobqc1tpYxwLTMpyiugNCDKcZ/Fn8y9IzXeuclsBxUMu8Hpmb8PoJxHO0rBbXyR
Xl+t0wIZq+W1c+Ao36l2DhadHzpd1U2y3NzbPEn/Gg+FKdaZBc7jAp2rx78dHZwv
ascSZww2wjOf9a6juXK1SlY6ZUr4h3tbtl54yFERJg2Z3lrs4bQ8JrRse/owSI1O
t+KhukO0nhJcJ5MyhcQseKfSMRVvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUV1Q3
gteavVXommefMbD/OOyxMhcwHwYDVR0jBBgwFoAU1qTOslDhuJgjxaxDmHTTUfkM
QuYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QTAyLzM5NTc3QjJBQjU4RTExRThCNjBBNDA2NEY4QUVBMjI4LzFxVE9z
bERodUpnanhheERtSFRUVWZrTVF1WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzFxVE9zbERodUpnanhheERtSFRUVWZrTVF1WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjI3QTAyLzM5NTc3QjJBQjU4RTExRThCNjBBNDA2NEY4QUVB
MjI4LzJBNDMyNTlBNThGNjExRUJCRDA5RDU3Q0Y4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASlENAwDQYJKoZIhvcNAQELBQAD
ggEBAH+l5SG9jWgqLDEUjAhgql9lF5BD+7vUG91a7J6zU/448TEnxwIlfg7LVmSz
eCwJVWjF07vvvGVyOPX4T27MqMTYESm+62Qk3tKtLx2ywDQEjinx3UPf0fCMhFAX
NerYjBwPW7Qd7HVEu+DW1m69Gp3O3Nv7LbWjdLMuTR+nwkN1jYiyJpCBoJ3wrOzY
iefuuFAZRQJJBllKiAndF8yYbJriHfH9iqWlVgmgYD61vPKCtp9wLsPrWDaXCOSO
hsL+qPtbMylpxfT/PfIJ52jwyuQe+7jSPHczqY3ERkWoP67vFUKM5zRbbd5GspXI
piCiP3KcC26m1lvaaFcV7W0Jow0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:51 2024 by rpki-client on console-fra.rpki-client.org