Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/AE53A0009EA911EB9AC82A41F8AEA228.roa
File: AE53A0009EA911EB9AC82A41F8AEA228.roa (raw, json)
Hash identifier: 1bd0I/6rZsKsWNhyL71qhITbxUZVlPI0gALS+mourjE=
Subject key identifier: 5B:9B:C7:E6:A4:40:F1:B3:66:15:BD:0A:F4:76:CA:2C:4B:CD:78:30
Certificate issuer: /CN=F362B8A8AR/serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA
Certificate serial: 06
Authority key identifier: AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA
Authority info access: rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/AE53A0009EA911EB9AC82A41F8AEA228.roa
Signing time: Fri 16 Apr 2021 11:48:38 +0000
ROA not before: Fri 16 Apr 2021 11:48:33 +0000
ROA not after: Wed 16 Apr 2031 11:48:33 +0000
asID: 37053
IP address blocks: 165.0.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.mft
rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AR/serialNumber=AD23170C9833B25D8713A0370C4860724A3C87EA
Validity
Not Before: Apr 16 11:48:33 2021 GMT
Not After : Apr 16 11:48:33 2031 GMT
Subject: CN=60797996-56ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:b6:0f:a2:38:bc:b1:82:2a:82:b8:29:6b:
1c:f9:da:29:31:da:9f:43:b3:30:01:2c:86:3a:dd:
01:ec:42:f8:49:11:2a:be:a7:f1:32:b3:d2:fd:e9:
c5:9d:63:35:30:1e:b7:c7:50:e3:99:d5:5a:2d:bf:
22:54:a4:a2:a8:34:cb:99:ee:4a:46:00:81:72:33:
a7:99:be:9c:eb:3d:e2:94:95:48:68:9d:40:a1:77:
e6:5a:e4:89:0d:81:ae:36:dd:ed:df:4c:08:30:89:
44:41:bc:80:ad:f9:23:d5:73:8f:1d:a2:98:64:ca:
4f:0d:fe:c5:0c:c0:a1:ab:5b:1e:ab:2d:72:a1:fc:
9a:ef:ec:a3:cc:a3:5a:b4:c6:22:f8:fa:42:9b:5c:
d2:b4:1d:ae:86:1a:f6:42:f5:c6:66:ad:1e:fb:51:
22:77:ac:50:46:c7:6f:50:af:d2:d3:a3:1b:1c:9f:
27:fe:53:60:89:65:b4:2c:50:2b:59:8b:b3:11:63:
d0:3c:18:b5:01:67:e3:c9:44:19:0a:7e:f7:31:0f:
ac:59:37:38:e5:7b:5d:66:a1:a8:c0:d9:33:9d:97:
dc:4e:d1:ab:81:4c:00:62:2c:a7:f4:eb:18:f9:27:
6c:34:df:fa:a4:80:b4:48:a4:6e:98:c7:9e:eb:23:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9B:C7:E6:A4:40:F1:B3:66:15:BD:0A:F4:76:CA:2C:4B:CD:78:30
X509v3 Authority Key Identifier:
keyid:AD:23:17:0C:98:33:B2:5D:87:13:A0:37:0C:48:60:72:4A:3C:87:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/rSMXDJgzsl2HE6A3DEhgcko8h-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rSMXDJgzsl2HE6A3DEhgcko8h-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/C44538C89C2511EBA8D42654F8AEA228/AE53A0009EA911EB9AC82A41F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:b7:29:5a:d3:90:57:70:3d:b2:a4:3b:80:81:0c:50:c9:b9:
0c:c9:54:ab:89:ae:7b:20:ca:f2:ed:07:43:79:65:ef:d1:4b:
6e:b6:d0:08:0e:f9:93:5c:b4:e1:aa:dc:4c:7b:2a:56:4b:69:
03:0a:7b:63:5f:85:d8:4a:47:30:88:29:8a:0a:10:52:d3:e8:
f6:fc:3d:3f:9b:2d:ee:a8:a6:46:9d:95:bb:f3:62:fd:bc:97:
d0:1d:0d:8d:df:ca:4a:fb:90:4b:b4:3c:7a:df:e2:ba:cf:97:
f4:fa:df:3c:b1:97:97:1c:10:92:dd:e6:10:5e:0c:ad:07:50:
ac:3b:0b:76:5f:76:f1:2b:fd:8f:55:fa:a4:b5:3d:0b:c1:57:
a1:e3:dc:91:ab:3a:6c:f9:ae:7f:de:59:f4:f2:fc:e5:a0:0c:
1a:e2:4f:12:a4:03:fa:5f:75:27:be:b8:61:3e:bf:e5:a8:56:
71:2c:c7:2f:d1:53:61:90:93:11:d7:f0:ee:d5:19:e2:6e:4f:
6a:90:72:6d:5f:b2:27:60:d0:e9:8e:ed:98:6d:e6:47:1b:41:
a5:f6:c6:84:f6:d8:72:b8:33:3c:e3:21:a3:ac:19:98:76:2f:
01:bf:1a:01:15:80:bb:e1:f7:aa:40:39:41:7d:3c:5b:e4:aa:
a1:7d:a2:22
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QjhBOEFSMTEwLwYDVQQFEyhBRDIzMTcwQzk4MzNCMjVEODcxM0EwMzcwQzQ4NjA3
MjRBM0M4N0VBMB4XDTIxMDQxNjExNDgzM1oXDTMxMDQxNjExNDgzM1owGDEWMBQG
A1UEAxMNNjA3OTc5OTYtNTZmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMJktg+iOLyxgiqCuClrHPnaKTHan0OzMAEshjrdAexC+EkRKr6n8TKz0v3p
xZ1jNTAet8dQ45nVWi2/IlSkoqg0y5nuSkYAgXIzp5m+nOs94pSVSGidQKF35lrk
iQ2Brjbd7d9MCDCJREG8gK35I9Vzjx2imGTKTw3+xQzAoatbHqstcqH8mu/so8yj
WrTGIvj6Qptc0rQdroYa9kL1xmatHvtRInesUEbHb1Cv0tOjGxyfJ/5TYIlltCxQ
K1mLsxFj0DwYtQFn48lEGQp+9zEPrFk3OOV7XWahqMDZM52X3E7Rq4FMAGIsp/Tr
GPknbDTf+qSAtEikbpjHnusjIGMCAwEAAaOCAqEwggKdMB0GA1UdDgQWBBRbm8fm
pEDxs2YVvQr0dsosS814MDAfBgNVHSMEGDAWgBStIxcMmDOyXYcToDcMSGBySjyH
6jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkI4QTgvQzQ0NTM4Qzg5QzI1MTFFQkE4RDQyNjU0RjhBRUEyMjgvclNNWERK
Z3pzbDJIRTZBM0RFaGdja284aC1vLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
clNNWERKZ3pzbDJIRTZBM0RFaGdja284aC1vLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkI4QTgvQzQ0NTM4Qzg5QzI1MTFFQkE4RDQyNjU0RjhBRUEy
MjgvQUU1M0EwMDA5RUE5MTFFQjlBQzgyQTQxRjhBRUEyMjgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAe
BggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBPtyla05BXcD2ypDuAgQxQybkMyVSria57IMry7QdDeWXv0UtuttAIDvmTXLTh
qtxMeypWS2kDCntjX4XYSkcwiCmKChBS0+j2/D0/my3uqKZGnZW782L9vJfQHQ2N
38pK+5BLtDx63+K6z5f0+t88sZeXHBCS3eYQXgytB1CsOwt2X3bxK/2PVfqktT0L
wVeh49yRqzps+a5/3ln08vzloAwa4k8SpAP6X3UnvrhhPr/lqFZxLMcv0VNhkJMR
1/Du1Rnibk9qkHJtX7InYNDpju2YbeZHG0Gl9saE9thyuDM84yGjrBmYdi8BvxoB
FYC74feqQDlBfTxb5KqhfaIi
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:25 2024 by rpki-client on console-fra.rpki-client.org