Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/21625A96533111ECB2F6BE24D8A014CE.roa
File: 21625A96533111ECB2F6BE24D8A014CE.roa (raw, json)
Hash identifier: D7uWKw4MsAwTkL/YB/+bUaU6FUc2W7evgUV4IerLvVk=
Subject key identifier: E9:B8:20:5D:31:74:7E:02:63:15:70:02:38:AE:02:8F:84:C1:7B:5D
Certificate issuer: /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial: 0B
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Authority info access: rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/21625A96533111ECB2F6BE24D8A014CE.roa
Signing time: Thu 02 Dec 2021 05:31:42 +0000
ROA not before: Thu 02 Dec 2021 05:31:37 +0000
ROA not after: Thu 02 Dec 2049 05:31:37 +0000
asID: 327979
IP address blocks: 169.239.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Validity
Not Before: Dec 2 05:31:37 2021 GMT
Not After : Dec 2 05:31:37 2049 GMT
Subject: CN=61a85a3e-db4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:67:6c:54:74:85:28:1f:96:ef:a0:2f:5c:
bb:07:b4:f3:97:08:4f:0b:d5:c3:30:52:52:e1:cf:
a3:40:aa:ff:a6:94:bf:bc:21:bc:03:84:6c:fd:b8:
5e:fe:ec:b9:ee:be:29:78:0e:c6:49:11:3f:61:40:
f9:c4:33:15:d0:f5:be:b5:70:b0:fb:ca:89:7c:6a:
72:73:fc:b5:07:3b:3f:df:bb:d7:da:4a:63:94:d2:
f8:fc:28:1b:b3:01:5d:cb:0f:0b:8d:d4:b9:61:81:
72:5a:15:e8:b8:46:5f:44:7e:46:79:cb:d5:25:46:
e8:c2:18:47:01:08:14:b4:d3:2b:77:d3:ea:39:81:
d8:d5:8d:35:14:0c:55:27:bf:cd:4f:d7:e2:57:9e:
a2:83:f1:ee:a2:9f:6d:61:14:4f:0c:cc:cb:07:1a:
1e:2b:85:44:d8:4f:ae:c9:1f:dd:b3:3f:00:40:f1:
f8:c6:36:0c:11:5e:1e:62:2b:a2:f4:c6:bc:89:21:
b4:be:8b:b9:00:3e:fb:a9:f6:65:f2:d3:cc:25:1f:
fa:13:72:36:5a:2b:a9:d2:1f:18:65:80:11:f0:02:
d1:c8:31:3b:dd:22:0d:26:e8:c5:51:17:48:07:26:
b1:df:5c:1b:c8:54:68:06:09:e5:e8:83:a0:63:85:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B8:20:5D:31:74:7E:02:63:15:70:02:38:AE:02:8F:84:C1:7B:5D
X509v3 Authority Key Identifier:
keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/21625A96533111ECB2F6BE24D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.216.0/22
Signature Algorithm: sha256WithRSAEncryption
71:3a:39:3b:3d:2f:dc:8c:98:88:4c:59:80:e4:d9:6e:fc:80:
36:b2:b9:2a:50:01:c7:2e:54:61:52:e3:3d:23:ac:f5:7d:ae:
a9:d4:67:c7:c1:d1:ad:56:a9:35:24:5d:9a:01:fb:6b:e5:90:
00:48:a2:04:0f:2f:8d:db:c8:cf:65:68:7f:ea:73:03:ef:c3:
9f:94:6b:dc:9e:d8:8e:25:90:46:96:83:3d:07:33:6b:a1:d0:
14:28:e6:cd:37:b4:0e:02:6f:d9:b6:e0:83:6b:6d:0c:8e:14:
b1:d7:8d:75:26:77:15:8c:74:27:a1:92:12:3a:4c:bc:21:80:
4a:f3:ad:bf:1e:66:f7:31:02:f3:e4:9e:66:00:19:27:3f:7b:
84:21:2c:a3:65:35:07:27:ee:c6:6b:5b:ee:ed:82:19:42:ce:
e0:7a:a2:c1:c1:d2:2b:b3:6e:48:9d:22:36:87:7e:99:cf:b7:
a1:13:ab:6c:36:13:9a:d7:63:3b:c2:97:b8:28:f9:7f:73:1d:
bc:f3:1e:48:0c:8f:08:88:39:b7:ee:7f:b5:b2:83:89:43:d7:
6d:9c:96:41:1c:1e:96:e0:bd:c7:3f:cf:97:47:4a:b7:27:51:
d4:cb:18:2c:a1:38:45:a3:4f:dd:25:dc:b9:3f:9e:62:5c:86:
30:df:64:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:18 2024 by rpki-client on console-ams.rpki-client.org