Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363520F/1AE67086848811EAA67B9A80F8AEA228/B4E2629A7D5D11EEB96D08814AD9E6FC.roa
File: B4E2629A7D5D11EEB96D08814AD9E6FC.roa (raw, json)
Hash identifier: 7sjuZr4t82G6LCIiBORQrXRUeYSGZULmh1EngM1tyyU=
Subject key identifier: B0:34:92:C3:00:1F:96:06:86:EB:33:36:AD:4D:37:6B:CA:FD:E2:8B
Certificate issuer: /CN=F363520FAR/serialNumber=8A99E3854604A21AADCF66518E4B59FE8A13A206
Certificate serial: 0533
Authority key identifier: 8A:99:E3:85:46:04:A2:1A:AD:CF:66:51:8E:4B:59:FE:8A:13:A2:06
Authority info access: rsync://rpki.afrinic.net/repository/arin/ipnjhUYEohqtz2ZRjktZ_ooTogY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363520F/1AE67086848811EAA67B9A80F8AEA228/B4E2629A7D5D11EEB96D08814AD9E6FC.roa
Signing time: Tue 07 Nov 2023 11:06:32 +0000
ROA not before: Tue 07 Nov 2023 11:06:27 +0000
ROA not after: Sat 07 Nov 2037 11:06:27 +0000
asID: 37611
IP address blocks: 165.73.0.0/17 maxlen: 24
165.255.0.0/16 maxlen: 24
169.0.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363520F/1AE67086848811EAA67B9A80F8AEA228/ipnjhUYEohqtz2ZRjktZ_ooTogY.crl
rsync://rpki.afrinic.net/repository/member_repository/F363520F/1AE67086848811EAA67B9A80F8AEA228/ipnjhUYEohqtz2ZRjktZ_ooTogY.mft
rsync://rpki.afrinic.net/repository/arin/ipnjhUYEohqtz2ZRjktZ_ooTogY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1331 (0x533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363520FAR/serialNumber=8A99E3854604A21AADCF66518E4B59FE8A13A206
Validity
Not Before: Nov 7 11:06:27 2023 GMT
Not After : Nov 7 11:06:27 2037 GMT
Subject: CN=654a1a37-d248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:d0:2c:dd:37:99:37:e9:54:a6:b2:10:0e:
6f:32:71:5a:9c:10:20:f1:9f:b5:b1:2a:1c:21:54:
24:2b:3c:e6:bc:0e:24:05:69:10:e0:29:49:e6:2c:
0b:91:f5:cf:a8:5d:a3:60:c0:62:ce:28:6c:bd:5d:
7f:b6:48:74:13:84:c2:9d:a8:f0:22:8e:f9:4a:d3:
de:3d:f8:87:3f:c1:99:d5:8a:32:f9:6d:12:6e:6e:
22:8b:be:64:7f:23:c1:c6:79:a6:56:18:be:b8:86:
75:71:49:fa:01:a7:f6:01:45:03:a3:45:50:7a:1f:
dd:91:53:83:47:51:5f:b6:cf:8b:36:80:37:af:b6:
23:8c:a7:53:3e:af:4d:a4:8c:f3:9c:48:5a:57:2a:
9a:85:8a:90:2e:00:92:c1:de:1a:7b:5e:de:bd:91:
48:6c:75:70:30:a4:f5:0d:08:86:23:a0:47:ad:a9:
26:14:6f:b3:1a:5e:28:0a:69:63:3a:44:04:4d:4c:
6d:43:75:c4:cf:9c:02:4f:81:ce:c9:cb:0a:fc:97:
5b:47:cf:0c:7c:3b:23:23:cf:e8:a2:e9:50:7b:7e:
54:10:5f:11:02:50:02:5f:90:7e:ea:c9:6c:0e:2b:
8c:e9:86:fa:66:25:1d:ce:e9:4b:44:6a:14:d3:98:
6a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:34:92:C3:00:1F:96:06:86:EB:33:36:AD:4D:37:6B:CA:FD:E2:8B
X509v3 Authority Key Identifier:
keyid:8A:99:E3:85:46:04:A2:1A:AD:CF:66:51:8E:4B:59:FE:8A:13:A2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/1AE67086848811EAA67B9A80F8AEA228/ipnjhUYEohqtz2ZRjktZ_ooTogY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ipnjhUYEohqtz2ZRjktZ_ooTogY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/1AE67086848811EAA67B9A80F8AEA228/B4E2629A7D5D11EEB96D08814AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.73.0.0/17
165.255.0.0/16
169.0.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3d:14:ff:ad:9f:58:fc:7c:90:0e:c7:77:b0:75:cf:d6:e4:c3:
0d:85:77:c4:05:8f:ef:b7:44:b9:d9:5e:d9:c4:f0:fa:e2:1e:
ac:34:36:25:c6:df:e5:7b:d6:8a:0b:9d:bd:6d:42:61:d2:01:
54:6b:1e:4a:5e:e3:9e:bf:33:45:c1:0b:c2:fb:ca:d6:27:f6:
67:71:0d:da:90:91:3e:42:f4:d6:e9:7f:4b:e7:15:c8:6c:76:
f5:3e:dd:4e:93:87:3e:b1:52:da:8a:c0:b5:f6:b3:26:f0:9e:
b5:be:c3:08:1e:3e:02:d3:23:fa:fd:89:28:2b:d4:27:7d:28:
b0:8e:18:bd:4e:27:b3:41:83:20:55:fe:1e:37:76:40:b8:6f:
6b:53:43:64:c2:ef:75:a2:ef:89:4c:fd:7e:8d:63:63:dd:0e:
ce:cf:6e:b6:98:50:10:84:17:4c:47:53:c2:6a:4d:fc:9e:6d:
fb:f6:ff:61:02:90:a5:f5:60:84:c1:ff:3f:b6:90:6c:5b:77:
f1:7d:c7:54:f9:a6:30:2b:4c:1e:62:28:7b:8d:15:eb:8f:60:
18:77:99:45:ec:ec:b7:cd:70:cd:8f:3a:a8:1a:44:06:96:97:
ba:d2:88:d7:f3:bf:f8:b9:8d:d7:32:aa:1c:fc:c2:e6:b7:87:
94:58:d3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:46:42 2024 by rpki-client on console-fra.rpki-client.org