Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/8065B86A532E11EC801D331CD8A014CE.roa
File: 8065B86A532E11EC801D331CD8A014CE.roa (raw, json)
Hash identifier: F5eLw3Oa+DcohLxtO7dVJeRypNojvOsC5f+wTgH4pR0=
Subject key identifier: E0:6E:D0:65:08:C5:37:92:CD:CE:D4:6A:B4:33:8F:EC:EC:F2:D5:B9
Certificate issuer: /CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Certificate serial: 09
Authority key identifier: DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
Authority info access: rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/8065B86A532E11EC801D331CD8A014CE.roa
Signing time: Thu 02 Dec 2021 05:12:53 +0000
ROA not before: Thu 02 Dec 2021 05:12:49 +0000
ROA not after: Thu 02 Dec 2049 05:12:49 +0000
asID: 327979
IP address blocks: 169.239.216.0/24 maxlen: 24
169.239.217.0/24 maxlen: 24
169.239.218.0/24 maxlen: 24
169.239.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.mft
rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Apr 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAR/serialNumber=DF066697B0A035988C0EF33B42BEED7E70A5554B
Validity
Not Before: Dec 2 05:12:49 2021 GMT
Not After : Dec 2 05:12:49 2049 GMT
Subject: CN=61a855d5-e5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:f5:13:40:19:e4:c7:b9:0e:99:e0:3c:02:
88:06:e9:23:52:55:45:3d:cf:ce:a4:5a:4e:2b:68:
27:c5:72:18:e1:37:6c:91:40:02:e2:9b:f7:f5:78:
ca:6e:88:58:bf:94:92:5a:0d:b7:ef:a7:3c:d8:31:
c3:00:8b:14:cb:1c:b4:ef:f1:6d:8a:42:3c:49:63:
1a:55:e3:51:88:84:b5:db:cb:2f:d4:a5:5e:26:77:
bb:42:e0:61:6f:21:c8:19:d9:f0:c6:c3:19:29:cf:
fd:4b:70:80:20:9e:4f:b7:d0:e5:34:f6:c7:0e:eb:
af:68:12:37:4b:c3:c2:56:3d:e2:f4:f5:12:cc:67:
df:04:05:b6:1e:0b:1d:01:00:c9:68:76:9f:ef:2f:
9c:3e:2a:a1:fa:b3:4d:2f:56:b5:1d:85:ed:c6:bb:
e2:7e:b5:76:88:12:fb:6e:ad:b0:b2:d4:e7:be:72:
2b:32:8c:99:39:3e:9d:a0:b1:4a:fa:53:69:08:43:
9d:41:ba:83:92:32:e0:c1:81:aa:5d:e0:bf:f5:f6:
f0:dc:42:3a:c6:0a:33:3b:7f:93:e5:3e:87:ba:de:
bc:9b:86:8c:b4:e2:98:8f:f3:e8:af:ad:e5:51:cd:
7e:46:aa:a5:24:00:c1:c5:c3:ce:89:cb:2f:1a:0f:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6E:D0:65:08:C5:37:92:CD:CE:D4:6A:B4:33:8F:EC:EC:F2:D5:B9
X509v3 Authority Key Identifier:
keyid:DF:06:66:97:B0:A0:35:98:8C:0E:F3:3B:42:BE:ED:7E:70:A5:55:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/3wZml7CgNZiMDvM7Qr7tfnClVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3wZml7CgNZiMDvM7Qr7tfnClVUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/33F4EB0E51B711EC821A9843D8A014CE/8065B86A532E11EC801D331CD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.216.0/22
Signature Algorithm: sha256WithRSAEncryption
64:eb:19:80:e9:34:f5:bf:58:c9:e9:d0:90:af:cf:99:08:62:
2e:71:de:8e:c2:6d:d4:1e:06:ad:ab:ff:f4:ce:aa:34:3e:eb:
2d:0d:45:ac:1e:27:45:b9:15:83:a1:06:25:dc:a7:a4:de:2e:
d8:dd:c2:b2:42:f4:d8:f2:2c:b2:e5:bd:53:d0:59:13:50:d1:
a7:ad:56:c8:59:7c:7d:ec:45:84:cf:a7:18:9b:ee:66:0a:79:
8e:54:a2:02:0d:a0:a2:0d:c8:35:62:51:66:3f:f0:39:c6:d4:
07:5d:8c:ba:8d:73:c0:16:9e:98:b4:39:70:5d:24:ec:8c:36:
e8:f8:9f:d3:41:13:8b:16:c3:e8:d0:1b:4e:9c:88:11:31:ce:
15:ba:af:b4:53:6b:7b:af:6e:a0:f8:24:ae:5c:4a:75:1d:57:
73:57:06:93:f4:5a:d5:7e:96:e3:70:42:c2:48:5b:93:91:78:
03:df:77:66:68:1a:8a:97:5f:62:06:14:87:85:ab:c3:66:59:
e1:77:5b:1f:44:ae:bb:6a:bb:ae:8f:5e:42:b8:00:e2:cf:eb:
1e:f9:e5:b2:9a:a5:21:aa:bc:db:5b:60:21:e4:37:68:c9:66:
79:5f:7c:2f:15:41:c0:f9:a5:3e:85:26:31:f4:fe:ac:61:2f:
1a:4c:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 02:44:34 2024 by rpki-client on console-fra.rpki-client.org