Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/1A49A96A7AC911ED812AA695F1222468.roa
File: 1A49A96A7AC911ED812AA695F1222468.roa (raw, json)
Hash identifier: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=
Subject key identifier: E3:79:5A:A2:F9:51:9C:07:B2:7D:BC:BE:A9:3B:87:6B:9D:E1:E3:69
Certificate issuer: /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial: 41
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/1A49A96A7AC911ED812AA695F1222468.roa
Signing time: Tue 13 Dec 2022 09:32:47 +0000
ROA not before: Tue 13 Dec 2022 09:32:43 +0000
ROA not after: Mon 13 Dec 2032 09:32:43 +0000
asID: 328218
IP address blocks: 160.19.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Validity
Not Before: Dec 13 09:32:43 2022 GMT
Not After : Dec 13 09:32:43 2032 GMT
Subject: CN=639846bf-6e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:49:42:fd:b0:20:f0:87:c9:c5:17:c7:ed:
aa:6d:d9:f2:0b:e0:cf:f9:a0:f8:1c:a6:94:ce:18:
79:30:f6:2e:03:91:3c:4e:4a:68:68:32:be:da:fa:
28:05:93:31:45:2c:b0:2f:3d:b2:0e:45:e1:12:29:
66:b1:f9:c9:db:73:54:59:ee:eb:f2:43:13:63:89:
48:61:fb:14:f9:1b:51:0e:80:35:05:55:ed:5e:5a:
79:d4:10:bc:db:b4:70:91:34:18:f9:a5:b1:c7:eb:
1b:c3:62:f6:b4:12:a0:2a:27:f2:61:32:e6:35:f5:
dd:5c:87:98:6f:0b:1e:16:d2:21:36:a0:ca:18:1c:
68:f1:32:22:0d:fe:25:34:2a:90:04:80:b8:b7:1d:
39:be:5d:1f:eb:3b:96:d8:ce:0b:ee:1b:f1:11:1c:
b9:eb:87:99:b0:e9:26:74:48:04:8a:2f:8b:f8:cd:
67:04:b4:a3:43:e7:8b:46:bb:8d:02:b5:d1:f0:ac:
81:a4:1b:18:24:17:f2:32:ec:ad:fd:0e:be:83:3f:
f1:a9:8b:df:9f:61:e3:11:3d:79:c1:3f:c5:e6:4a:
fe:63:f1:03:ce:bf:e0:5d:ed:13:a5:b0:08:0a:31:
95:35:4d:2b:bd:80:02:ab:c9:28:9d:d9:57:58:c2:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:79:5A:A2:F9:51:9C:07:B2:7D:BC:BE:A9:3B:87:6B:9D:E1:E3:69
X509v3 Authority Key Identifier:
keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/1A49A96A7AC911ED812AA695F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.19.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:7a:56:9b:ce:59:36:e2:82:e7:70:d5:ce:06:74:10:8c:48:
e9:08:78:35:29:df:d6:06:1e:9f:ec:be:fc:84:8b:7b:bf:50:
e3:95:2c:59:15:d8:ae:98:82:6c:bb:80:64:c6:9a:88:4f:d6:
1e:05:24:35:7c:a6:1d:19:f5:e7:42:5b:a6:19:e1:f3:07:86:
4a:ad:da:4e:61:b5:22:54:16:02:e3:7d:56:65:31:ea:0e:cb:
31:26:ce:b0:f8:f6:96:85:fb:12:6f:4f:ec:df:85:9b:4e:c8:
0c:c8:5c:4f:12:67:f3:1c:f9:37:93:d8:7b:e0:c9:37:a7:b3:
22:b6:6e:6b:ab:d8:d0:cc:1e:34:0a:b7:9d:40:8b:e0:7f:da:
be:fa:90:c0:d1:2d:e5:76:b2:3b:ee:37:9b:ed:eb:75:03:f4:
c9:63:a3:69:06:e0:cd:18:ee:05:3b:82:6b:af:69:12:b3:0b:
37:9d:0e:c7:32:94:9e:7d:a0:fe:db:7b:86:8a:67:c2:cd:ef:
b3:ec:7b:87:d1:bd:9a:91:df:5c:f6:9d:2a:68:95:51:4e:c3:
2d:5d:5b:e4:20:dc:38:a0:85:ef:99:d4:48:f7:37:9a:34:d8:
82:f1:29:5d:c3:25:64:15:b4:fa:53:0b:b5:e6:a0:de:52:ba:
20:4f:8f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:25 2024 by rpki-client on console-fra.rpki-client.org