Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/9C57BBCA514411E9819FB57FF8AEA228.roa
File: 9C57BBCA514411E9819FB57FF8AEA228.roa (raw, json)
Hash identifier: a2EFqum38j7M+ZpqwnpRi/IEA/fqXEm99Nf0ZysxusA=
Subject key identifier: AE:15:58:62:B2:6B:07:6E:EC:BC:CF:EB:17:2D:6B:5A:6C:04:FF:82
Certificate issuer: /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial: D3
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Authority info access: rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/9C57BBCA514411E9819FB57FF8AEA228.roa
Signing time: Thu 28 Mar 2019 10:31:14 +0000
ROA not before: Thu 28 Mar 2019 10:30:57 +0000
ROA not after: Sat 28 Mar 2026 10:30:57 +0000
asID: 37721
IP address blocks: 165.16.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Validity
Not Before: Mar 28 10:30:57 2019 GMT
Not After : Mar 28 10:30:57 2026 GMT
Subject: CN=5c9ca271-231f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fd:93:62:bf:e1:26:9f:44:69:36:10:fc:60:
5b:99:df:e3:e6:d1:a7:21:55:2a:9d:15:72:08:6b:
f9:cc:d3:f2:c2:ce:35:a1:32:25:9e:ff:9b:75:aa:
84:37:5f:25:b0:5f:71:7b:20:92:85:00:f0:ad:f7:
f5:ad:ab:73:12:82:e9:78:23:50:cd:4c:55:00:26:
cd:73:75:b3:97:73:f8:e9:8d:b7:74:25:88:5f:ed:
00:0b:3f:d2:7b:18:36:1c:db:ca:c2:f9:d7:4c:96:
27:9b:02:26:9e:e1:26:c9:f9:10:97:c9:e1:89:09:
10:05:d3:31:c4:3f:c1:dd:b3:ac:92:55:9a:f3:db:
2a:6e:61:ab:6d:6e:51:98:70:8f:b8:27:c9:a7:fb:
1b:c7:19:e6:cf:0b:9e:b0:a8:59:2c:74:22:87:a7:
7e:06:86:5c:ef:2e:3b:56:30:6d:f8:3a:8a:81:6b:
64:78:1d:7c:23:78:74:19:5a:c4:28:98:84:28:f6:
10:19:a4:4a:af:e4:3a:cf:67:c3:8b:7a:5b:1a:64:
a5:2b:2e:44:73:4e:92:85:54:18:7c:f5:6b:3d:ab:
3c:f4:40:99:1c:60:93:2e:4d:c7:6e:1f:38:4b:9b:
a5:81:8c:e2:51:29:26:65:0f:19:98:e0:c3:e3:ed:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:15:58:62:B2:6B:07:6E:EC:BC:CF:EB:17:2D:6B:5A:6C:04:FF:82
X509v3 Authority Key Identifier:
keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/9C57BBCA514411E9819FB57FF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
165.16.208.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:e2:06:40:e3:64:e5:ac:04:4f:cf:49:10:aa:20:52:81:e7:
7a:dd:00:1d:7d:67:3a:45:a4:f0:f5:5f:50:b6:c0:37:79:7c:
1c:42:da:91:f3:67:0b:4e:b0:e5:58:c1:49:0f:11:3b:a1:f0:
b2:d3:41:a6:d0:71:5b:42:d5:04:b2:b9:a7:b1:82:4e:4d:21:
82:e2:b2:5e:c0:04:93:4f:cd:27:79:b6:f8:68:d8:cc:a9:94:
de:34:3d:2c:c1:60:b6:d1:98:a4:ec:88:06:a3:b9:6b:83:9e:
de:31:71:ec:7c:b0:4d:81:01:0a:79:41:9e:1f:35:cc:24:be:
0a:68:26:ae:1b:bf:6b:6f:07:8c:3d:2f:fc:2f:48:fc:88:cc:
25:92:3a:74:80:cb:0e:7d:f1:b9:50:9f:e8:66:94:f4:4a:7b:
01:92:b6:f2:ca:95:4f:e7:ba:53:66:22:51:e9:29:04:7b:4c:
23:45:e7:98:37:3e:c5:44:ed:2b:fd:27:0b:76:e1:34:d1:41:
62:7d:c6:31:b7:f0:2b:77:41:db:f7:ea:a2:8b:8a:df:eb:99:
a5:df:e9:2d:6f:42:19:22:cf:68:df:73:7a:33:a4:ce:d1:ad:
b7:1c:7b:a7:8d:93:3a:6d:a1:13:f3:3a:b3:1e:61:92:95:bb:
d9:ee:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org