Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/8F3335ACF77F11EC98D462A7F1222468.roa
File: 8F3335ACF77F11EC98D462A7F1222468.roa (raw, json)
Hash identifier: iORNhgjatzDUmNPyX2jFtmgRUlmKGU0cdxe7wHOTwkc=
Subject key identifier: 89:FE:D8:E0:92:AD:8F:2B:DD:47:FD:68:34:86:9F:A8:02:D1:34:FA
Certificate issuer: /CN=F362C7E9AR/serialNumber=B97DC46099CD50FCF299DA5E82B005646984C4F3
Certificate serial: 03FE
Authority key identifier: B9:7D:C4:60:99:CD:50:FC:F2:99:DA:5E:82:B0:05:64:69:84:C4:F3
Authority info access: rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/8F3335ACF77F11EC98D462A7F1222468.roa
Signing time: Wed 29 Jun 2022 07:46:18 +0000
ROA not before: Wed 29 Jun 2022 07:46:14 +0000
ROA not after: Sat 29 Jun 2030 07:46:14 +0000
asID: 22572
IP address blocks: 66.18.64.0/20 maxlen: 24
66.18.80.0/21 maxlen: 24
66.18.88.0/22 maxlen: 24
66.18.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.crl
rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1022 (0x3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362C7E9AR/serialNumber=B97DC46099CD50FCF299DA5E82B005646984C4F3
Validity
Not Before: Jun 29 07:46:14 2022 GMT
Not After : Jun 29 07:46:14 2030 GMT
Subject: CN=62bc034a-310e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:ee:a7:fa:94:b7:01:5d:8b:b4:52:d3:8d:
32:4d:b4:ac:82:75:72:d3:64:9a:8f:ee:15:fa:d0:
2f:ac:ff:90:6d:d4:8b:85:d9:67:01:a2:e6:87:06:
d2:c2:57:9e:c8:c6:fd:83:11:3e:e5:cc:e5:6e:4e:
20:75:5b:00:b5:23:ec:67:16:d3:9b:cb:50:e9:c5:
2f:d2:66:f9:52:12:a5:0f:56:8d:87:5f:56:b4:d9:
59:d0:5a:0f:f8:1a:cb:04:9f:62:ae:55:9d:87:62:
d5:22:a3:62:7e:1d:ca:6b:1b:47:ea:3c:3a:4c:18:
a5:cc:45:d6:f8:ce:b5:1e:41:9b:64:96:89:44:a0:
99:f7:61:61:37:5b:2e:20:04:7d:86:b5:4a:ac:7d:
47:a8:c4:e9:c3:fd:15:43:2d:57:41:44:e2:32:5b:
66:a9:70:b5:ff:44:f2:68:5a:8e:6b:46:e6:2d:a5:
db:dd:ed:3e:f6:45:9b:d3:c3:a4:9e:d0:f0:44:80:
36:49:a9:e8:75:e4:32:a8:0d:27:2e:b1:5e:33:32:
51:47:fb:64:e9:c8:bb:a2:c3:42:8a:3b:87:4d:f0:
20:31:5c:5b:a0:a9:9f:2d:9e:53:2b:c9:b1:06:66:
82:aa:97:ec:7f:2e:bf:08:09:b1:81:e9:50:aa:a4:
9f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FE:D8:E0:92:AD:8F:2B:DD:47:FD:68:34:86:9F:A8:02:D1:34:FA
X509v3 Authority Key Identifier:
keyid:B9:7D:C4:60:99:CD:50:FC:F2:99:DA:5E:82:B0:05:64:69:84:C4:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/8F3335ACF77F11EC98D462A7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
66.18.64.0-66.18.93.255
Signature Algorithm: sha256WithRSAEncryption
a4:01:78:76:42:b3:92:55:46:2d:be:62:2a:7d:98:8e:74:e4:
fd:d9:ca:50:7e:31:d8:de:25:a3:6f:bd:2c:86:61:b4:b6:92:
c4:ed:f6:a2:94:2f:ec:8f:3f:70:38:bf:80:df:7d:78:bd:5a:
37:c9:ee:55:9c:02:60:77:29:76:cd:07:d4:3e:99:77:23:04:
e0:75:8f:d1:2a:f4:ee:34:4b:b1:01:41:8c:8d:ea:9a:dd:89:
91:18:f2:cd:ba:7b:63:50:d2:5a:fb:2c:22:f8:b7:77:68:f0:
1e:13:ca:ce:c3:87:9b:d9:ff:20:e3:24:ab:ab:f1:b8:2a:55:
51:78:77:3d:32:de:9b:e9:61:e8:7f:b8:b9:fd:69:2e:6c:46:
54:0c:ba:dd:54:b1:2b:98:a3:51:4c:2c:80:31:d1:6a:c5:24:
18:97:75:a9:ec:6a:c7:af:10:c4:21:f0:72:6f:67:54:74:83:
00:ad:4e:5e:0b:f3:f8:8d:65:5d:93:62:dc:7c:fb:de:c9:d5:
26:48:57:91:f7:8e:ea:f5:eb:a0:de:93:54:62:db:0f:3e:c8:
78:c4:c4:89:e4:2d:ce:23:60:ee:ef:65:21:10:77:d4:88:05:
a7:64:a1:09:d3:3b:45:3e:39:d6:d6:5d:cc:84:0e:60:2d:63:
4e:66:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:19 2024 by rpki-client on console-ams.rpki-client.org