Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/4FFFB85ED53311EE9E536E6C775412E6.roa
File: 4FFFB85ED53311EE9E536E6C775412E6.roa (raw, json)
Hash identifier: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=
Subject key identifier: 50:12:38:E6:12:23:51:9F:96:0D:69:89:DB:B2:B5:DA:8F:78:5E:06
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 017F
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/4FFFB85ED53311EE9E536E6C775412E6.roa
Signing time: Tue 27 Feb 2024 05:44:46 +0000
ROA not before: Tue 27 Feb 2024 05:44:43 +0000
ROA not after: Wed 27 Feb 2030 05:44:43 +0000
asID: 327697
IP address blocks: 139.26.128.0/21 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Feb 27 05:44:43 2024 GMT
Not After : Feb 27 05:44:43 2030 GMT
Subject: CN=65dd76ce-1539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:85:72:64:73:15:d3:18:9b:02:71:27:a5:2f:
59:7f:8d:24:3d:74:df:6f:24:00:cf:a9:53:ab:83:
b8:f0:de:67:fa:b3:bd:a6:90:2c:e4:ef:bb:f8:9b:
95:21:d7:b2:a3:89:ff:7c:b3:f4:93:8d:bc:53:84:
09:d5:e7:32:b8:db:95:a0:2b:44:9b:71:9d:d8:bc:
61:3e:73:95:f0:81:b6:ae:a4:03:aa:4b:f2:bb:45:
9f:5f:de:4e:34:06:81:50:5c:fe:e7:29:09:64:f5:
4e:ae:37:f8:67:37:3b:a7:96:3e:92:13:00:3d:62:
23:f3:6a:32:a9:c8:b7:8c:2c:88:58:ac:38:6f:59:
52:6a:e0:27:9f:4e:d0:4b:66:51:1a:1d:3e:2f:09:
e3:d8:57:81:a6:78:d7:95:72:40:07:0f:18:c1:eb:
51:0f:1c:6f:92:95:30:bc:f7:c1:bc:a5:bb:a7:d8:
ec:16:3a:cf:74:b6:df:a8:a8:ea:39:e4:03:b9:e5:
50:e2:39:c5:17:52:00:64:70:7b:ca:39:9a:89:49:
37:ff:6d:e2:b0:c0:c2:42:7f:8d:00:83:3c:1d:cd:
e7:70:b1:2d:f0:1c:b9:2a:7f:89:89:0f:f0:1f:d5:
27:15:a8:42:bb:b9:29:e7:73:a0:14:2f:20:f1:75:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:12:38:E6:12:23:51:9F:96:0D:69:89:DB:B2:B5:DA:8F:78:5E:06
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/4FFFB85ED53311EE9E536E6C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.26.128.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:6c:d4:5c:34:a8:be:a7:7a:2f:fb:01:ca:28:e2:e9:bb:56:
82:4c:14:a3:cf:2a:fa:3b:f4:1b:31:b5:ed:c8:19:5b:d3:31:
9a:96:16:6c:bb:c7:a4:8c:16:fc:ff:f6:ef:33:87:f7:fe:2b:
91:fa:e8:ae:53:d1:53:fc:f6:f5:90:18:79:61:28:fa:9b:35:
c1:c5:03:d3:e0:45:08:31:ef:49:fd:5a:1d:1d:83:9f:b1:3d:
0d:7e:78:62:6c:07:0b:a5:df:5a:76:40:1e:77:24:3b:ab:6b:
79:3d:b1:95:64:e7:57:8c:e3:10:ad:ed:fc:67:61:de:62:c6:
31:54:c9:1a:ba:26:14:a6:40:48:3f:ab:04:9c:7b:38:2c:b7:
af:36:2b:24:78:37:81:ce:04:46:07:d6:20:29:5f:70:cc:63:
24:aa:31:74:b3:48:99:30:33:2b:8a:e9:12:0c:41:c2:87:d0:
ef:d3:e1:5d:04:30:b2:13:74:d1:11:da:ff:51:7d:4c:43:a5:
df:95:95:cd:2f:fb:32:18:4e:3a:a6:29:9e:2d:bf:bf:80:21:
4a:8d:6a:94:c5:7d:f6:7c:f6:00:fa:1c:a9:42:34:95:3e:6e:
15:90:9f:57:71:e9:47:27:fe:ff:21:15:2a:87:3c:2a:43:6c:
d9:3b:19:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org