Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/AD8D26F27D4D11E9A43C5972F8AEA228.roa
File: AD8D26F27D4D11E9A43C5972F8AEA228.roa (raw, json)
Hash identifier: J0NYDzKOggR45pKs8ueiUloNUhy6/sW6bdalJakcT1Q=
Subject key identifier: 21:D0:C9:E4:33:73:E7:6E:24:AE:09:94:74:9F:C4:F2:35:35:B7:3B
Certificate issuer: /CN=F363E214AR/serialNumber=5BACE8377F4AC4824F9AAFC7B13845C96B60B24A
Certificate serial: 02
Authority key identifier: 5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
Authority info access: rsync://rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/AD8D26F27D4D11E9A43C5972F8AEA228.roa
Signing time: Thu 23 May 2019 11:27:00 +0000
ROA not before: Thu 23 May 2019 11:26:54 +0000
ROA not after: Thu 31 May 2029 11:26:54 +0000
asID: 327909
IP address blocks: 165.16.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.crl
rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
rsync://rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363E214AR/serialNumber=5BACE8377F4AC4824F9AAFC7B13845C96B60B24A
Validity
Not Before: May 23 11:26:54 2019 GMT
Not After : May 31 11:26:54 2029 GMT
Subject: CN=5ce68383-0b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:3e:4d:05:e2:fe:85:13:e4:f7:ba:c8:7f:
87:f8:c7:29:59:9b:45:bb:44:73:35:1d:d8:0a:b6:
ee:04:fe:79:c3:58:6e:b0:7f:2e:af:08:37:a4:d8:
89:21:8a:c5:4b:05:b5:d8:98:0a:95:d5:e2:ac:30:
cf:3e:5a:77:69:77:59:f2:dc:4e:24:d4:41:1d:91:
a5:cf:30:de:67:6d:0f:d3:6f:5b:94:64:37:52:1a:
81:61:79:e5:74:83:b1:c0:ff:05:f1:a5:44:e3:85:
32:c8:76:89:13:49:5e:f6:57:38:e7:ca:c3:a4:11:
60:65:ec:68:d6:ba:b8:28:5c:13:17:18:cf:97:32:
12:92:a0:96:f4:4b:be:16:37:69:51:13:5b:f9:dd:
35:12:92:23:55:eb:84:b5:9e:25:7d:03:be:64:0a:
d2:92:f7:ac:2a:77:88:12:ea:0c:f4:1f:c4:71:a7:
62:e3:c2:b4:cb:6d:03:da:43:6d:a8:61:d5:8e:53:
1c:e6:04:fe:7b:91:18:8d:dd:93:1c:79:4d:c0:7f:
12:1d:c6:63:30:12:d1:2b:89:cf:3b:e5:7f:88:3c:
3d:1c:ae:dd:d6:22:0e:73:e3:cb:7d:12:c3:96:4d:
0d:06:95:fc:df:32:e1:9f:5f:68:61:14:97:1b:62:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:C9:E4:33:73:E7:6E:24:AE:09:94:74:9F:C4:F2:35:35:B7:3B
X509v3 Authority Key Identifier:
keyid:5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/AD8D26F27D4D11E9A43C5972F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
165.16.224.0/20
Signature Algorithm: sha256WithRSAEncryption
92:d1:d0:b9:64:0f:24:3d:34:02:f7:33:c7:c8:62:b2:37:b7:
f5:b8:ff:47:fe:0b:ac:ac:18:51:c1:2a:82:e8:2c:34:15:6d:
b3:8e:98:a1:4b:84:05:b8:0e:bf:86:c5:c0:87:93:14:87:14:
b2:83:4c:6b:a9:dd:de:49:ff:76:c9:1a:35:32:89:1c:22:69:
44:12:3f:d9:9c:f0:55:1b:b4:8e:ec:6f:99:ef:df:53:9a:0f:
7e:20:4e:70:1b:15:cf:f7:24:8c:22:0a:7e:de:c4:19:68:c8:
b8:0e:93:ae:24:df:5c:40:30:0e:cb:78:09:5c:7b:c7:ce:ed:
4a:e2:bd:13:66:44:8c:0f:96:54:27:06:72:a0:e1:ca:f6:12:
c1:5c:10:77:41:70:59:13:34:99:e9:a4:8e:7a:65:a1:65:cf:
f1:c1:34:64:af:e2:41:85:e3:3a:3f:fc:8e:2d:91:30:25:dd:
a1:2b:3c:82:7c:4f:43:8f:ce:92:b6:00:13:22:17:e7:62:6e:
9a:fc:9a:41:0c:9f:75:69:bf:ab:a9:5f:45:80:93:73:39:6c:
9f:e3:3a:be:e2:5a:ae:97:e2:b7:e1:ee:cd:3f:5b:f1:ca:55:
c7:6d:35:b7:be:3a:2e:06:70:ce:72:b7:7c:5b:3e:bc:76:fb:
5b:99:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:32:41 2024 by rpki-client on console-fra.rpki-client.org