Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/B03DD41482B211ED9ACDF2D8F1222468.roa
File: B03DD41482B211ED9ACDF2D8F1222468.roa (raw, json)
Hash identifier: p4erYRKk741+pc1GTQOQg0ZDNMWUeJrKmmr5PjLZGWc=
Subject key identifier: 67:D9:0D:CA:97:E6:5A:46:86:9B:19:BA:B1:C7:1C:4C:4D:09:CB:F1
Certificate issuer: /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial: 0648
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Authority info access: rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/B03DD41482B211ED9ACDF2D8F1222468.roa
Signing time: Fri 23 Dec 2022 11:12:29 +0000
ROA not before: Fri 23 Dec 2022 11:12:18 +0000
ROA not after: Wed 22 Dec 2027 11:12:18 +0000
asID: 37721
IP address blocks: 165.16.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Validity
Not Before: Dec 23 11:12:18 2022 GMT
Not After : Dec 22 11:12:18 2027 GMT
Subject: CN=63a58d1d-a0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:99:66:09:33:01:26:bf:59:07:66:93:d5:
0d:00:b0:0c:ca:1f:6f:7a:1d:09:17:7b:9d:08:7e:
34:f4:f1:e7:4d:0b:49:6e:57:7e:a9:04:c6:39:5e:
1f:e3:a1:08:b8:be:36:70:b8:b7:6d:5d:0c:88:d6:
9d:da:c8:08:97:90:44:da:96:b3:59:61:1f:57:a4:
7e:e1:f6:11:28:e5:a3:04:74:54:54:12:57:16:e7:
c2:68:e0:31:1d:20:83:5f:4a:39:fb:e4:72:42:60:
df:0d:ea:15:92:65:f5:6c:2b:eb:5c:b9:1c:a0:02:
de:a8:33:79:8a:c9:6a:35:b8:6d:a9:73:ad:93:e2:
8a:f3:56:80:9c:f8:cd:08:a2:34:7a:f3:9d:6e:89:
4c:4b:f6:0d:25:9a:56:c5:7a:99:47:f6:bc:40:1d:
7f:1b:e4:49:92:98:e9:b8:09:78:49:e0:64:82:61:
02:2d:5e:f0:f9:f8:81:f8:c5:34:da:c6:dc:ac:23:
4a:3f:56:57:7e:1c:fd:08:4a:58:82:41:23:5e:2e:
08:3d:b5:4c:ef:da:15:26:9c:2c:2a:e5:b8:46:a3:
d6:40:5c:2c:59:62:97:17:81:bf:12:63:46:24:bd:
c9:4e:db:da:68:ce:d3:14:e6:93:b1:21:d2:d3:22:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D9:0D:CA:97:E6:5A:46:86:9B:19:BA:B1:C7:1C:4C:4D:09:CB:F1
X509v3 Authority Key Identifier:
keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/B03DD41482B211ED9ACDF2D8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.208.0/20
Signature Algorithm: sha256WithRSAEncryption
87:65:26:f0:df:23:74:3b:ec:ac:98:54:d8:d1:89:da:7e:eb:
28:c2:71:77:d1:7e:46:08:cb:cb:86:92:ec:49:94:65:79:70:
2c:6d:75:4e:0f:49:69:52:fb:01:05:da:9d:d8:56:06:51:4b:
11:d3:28:5a:e8:50:00:51:f5:d0:73:fa:54:35:39:48:4b:4b:
8e:42:68:69:fe:b0:8d:d6:32:1c:2a:89:ac:34:82:cf:fe:e8:
6b:70:35:2e:e4:04:8c:b4:ff:50:2d:e9:df:ab:5b:34:b1:1b:
49:e1:12:a9:b2:54:c0:50:84:a3:26:bb:3f:1e:81:c3:36:d4:
33:fe:5c:31:f4:4d:b6:8e:de:34:ac:d0:d1:18:48:f7:1a:76:
eb:43:d5:5d:53:69:14:c2:a3:79:30:e1:f5:65:9a:bd:12:59:
3c:9d:88:88:50:45:1d:16:f7:ac:9a:16:2b:19:ac:47:0b:ee:
76:87:d3:80:90:4c:99:03:d0:30:17:68:1e:5b:ed:a8:07:73:
e8:e3:23:18:59:6f:24:79:eb:56:01:54:df:7f:51:bc:45:4a:
b3:55:78:cc:b2:fe:13:af:1d:4d:0d:24:d0:55:4c:0e:4e:88:
4f:4f:91:30:3e:8e:8f:cc:fe:3c:0f:95:3b:72:52:c4:c3:ac:
25:9a:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:51 2024 by rpki-client on console-fra.rpki-client.org