Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/0DEEF6F0D53311EEB556F46B775412E6.roa
File: 0DEEF6F0D53311EEB556F46B775412E6.roa (raw, json)
Hash identifier: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=
Subject key identifier: E7:E9:84:05:92:BC:38:78:DB:75:57:0E:5E:BF:91:0B:0F:99:30:FF
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 017D
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/0DEEF6F0D53311EEB556F46B775412E6.roa
Signing time: Tue 27 Feb 2024 05:42:55 +0000
ROA not before: Tue 27 Feb 2024 05:42:51 +0000
ROA not after: Wed 27 Feb 2030 05:42:51 +0000
asID: 327697
IP address blocks: 139.26.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Feb 27 05:42:51 2024 GMT
Not After : Feb 27 05:42:51 2030 GMT
Subject: CN=65dd765f-3ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:a4:5f:af:b1:b5:af:3f:cf:68:95:ec:37:
a6:65:e1:44:d4:9a:64:94:4b:de:30:84:ba:9a:f3:
61:12:01:59:b0:35:d3:c4:2a:70:47:de:43:91:41:
c9:11:c1:35:64:37:45:52:f4:b3:08:89:f3:b2:2e:
d5:f8:a3:bf:a7:37:00:58:db:fb:45:a9:03:65:fd:
ec:e8:ed:06:59:da:04:69:28:27:c3:ae:91:36:9f:
27:83:94:5d:5b:ae:43:cd:e5:01:a5:10:e3:10:b0:
ac:6d:f2:09:72:cb:20:d3:a9:f8:d3:7e:a4:3e:10:
60:bb:8b:1f:60:a8:3f:7e:ae:4c:5e:3e:57:9c:ce:
78:cb:94:77:6b:41:b4:8d:d9:5e:d9:ee:31:98:c6:
1b:94:70:9d:51:0a:bc:9b:6e:36:64:9d:49:d2:5f:
02:51:db:a1:2d:48:65:b0:97:94:c5:b5:9a:5e:d4:
2c:66:99:ba:78:01:7a:a8:2b:7a:00:59:0e:cc:ba:
65:0f:d3:1a:34:5c:31:9d:78:3d:62:09:d9:6f:1d:
dd:d3:ab:c2:3f:14:f6:56:81:06:6a:4a:39:c6:0b:
70:7a:78:3a:12:fa:cc:a8:c4:a0:e8:f7:69:ac:4f:
7b:61:29:fc:ec:75:d9:fe:4f:68:1c:0e:b4:5c:09:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E9:84:05:92:BC:38:78:DB:75:57:0E:5E:BF:91:0B:0F:99:30:FF
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/0DEEF6F0D53311EEB556F46B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.26.128.0/17
Signature Algorithm: sha256WithRSAEncryption
84:30:95:83:69:25:d8:e1:02:76:1f:6c:0c:4b:ad:18:d1:33:
55:61:7e:95:66:3d:41:43:9b:3a:34:d9:98:b3:cf:58:f7:9a:
50:45:51:9c:97:b8:c0:64:96:12:68:f6:13:95:5f:7e:d7:22:
a5:53:24:f1:21:9f:7e:18:b3:75:9f:62:9c:38:f7:2a:c2:49:
59:38:61:fa:84:23:41:d3:e5:3a:fe:69:67:9b:10:af:25:8d:
2d:45:bc:67:09:81:26:59:3c:b0:99:6b:6a:1f:0f:99:5e:0d:
3d:07:82:0d:08:57:e5:05:a5:81:93:58:32:96:92:c0:2c:9d:
c0:7b:f3:58:4e:1e:8c:28:b8:4e:e0:6d:ed:e5:bb:c2:8e:19:
ae:46:5d:aa:c9:53:31:54:4a:93:b6:c0:95:a2:ef:3f:5b:48:
bb:5e:a2:ba:b4:dd:6b:90:66:f8:e3:06:bd:b6:1c:87:bd:bc:
d1:7e:19:a2:aa:63:11:b6:bd:e6:48:af:66:5b:a4:a6:f0:75:
94:5f:80:f6:55:5c:24:8e:d1:3d:d0:69:9e:6b:4b:e4:6c:85:
ca:e2:ad:78:05:6f:a1:73:39:ba:e7:27:ba:fe:a8:f5:e7:ec:
04:e6:42:30:90:83:ab:3a:dc:6d:c4:a0:5f:43:b5:5c:63:ac:
d9:0c:6b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:50 2024 by rpki-client on console-ams.rpki-client.org