Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/64C2AA52D53411EEB69B076E775412E6.roa
File: 64C2AA52D53411EEB69B076E775412E6.roa (raw, json)
Hash identifier: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=
Subject key identifier: B1:D2:BD:19:47:31:92:6D:60:1B:CB:8F:3C:03:A7:88:ED:EB:2A:DB
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 0189
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/64C2AA52D53411EEB69B076E775412E6.roa
Signing time: Tue 27 Feb 2024 05:52:30 +0000
ROA not before: Tue 27 Feb 2024 05:52:27 +0000
ROA not after: Wed 27 Feb 2030 05:52:27 +0000
asID: 202023
IP address blocks: 139.26.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Feb 27 05:52:27 2024 GMT
Not After : Feb 27 05:52:27 2030 GMT
Subject: CN=65dd789e-711c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:cf:89:a4:7f:72:d2:a7:8f:b0:b6:c8:be:
a6:5e:98:11:0d:ee:74:2a:ad:23:d4:81:e5:4f:00:
e7:d9:1b:ba:b0:8d:b9:1c:a8:1b:6c:a6:5b:da:2e:
fd:7b:d5:90:54:be:e1:53:c5:c6:1a:0e:da:ae:6a:
d4:c3:3f:27:c3:e9:8d:4f:27:06:28:ca:93:fa:ed:
57:ab:80:69:c8:00:c5:5b:85:b6:d2:ce:38:56:f4:
12:75:57:ac:44:0e:37:6f:9c:34:33:8a:62:0b:c4:
23:ea:dd:10:da:dc:81:fe:3b:c4:af:e2:bd:f1:37:
4a:5b:b5:89:61:4d:d1:09:96:6e:43:87:d0:ed:ea:
e6:54:98:c7:99:71:88:b2:b3:62:ac:f0:ad:26:09:
ba:e7:76:55:6c:91:d4:52:83:d7:cf:8c:db:1a:3d:
4b:5d:c2:06:00:bf:d1:6b:24:26:e1:24:02:2a:43:
38:8c:8e:60:75:1c:b2:fb:35:b3:86:98:18:4c:1c:
16:97:48:5c:1f:a2:ba:f7:c6:c3:09:47:cb:0b:e6:
06:09:b6:50:26:9c:6a:f2:60:55:ba:f8:29:0c:f8:
41:cb:b0:df:81:4b:d1:52:33:e7:8f:b0:ba:44:a7:
f8:3d:1d:31:0c:d7:ff:a3:aa:d3:2e:f0:7c:3f:2d:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D2:BD:19:47:31:92:6D:60:1B:CB:8F:3C:03:A7:88:ED:EB:2A:DB
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/64C2AA52D53411EEB69B076E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.26.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2a:f6:1b:66:4f:4e:d1:1e:73:5a:9a:74:a0:46:31:82:fb:ad:
6f:e8:bf:dc:80:5c:ff:ee:b2:a0:9f:6e:0e:e2:ff:2a:18:84:
89:74:ce:a4:3e:46:aa:9b:83:ff:8d:96:9d:6b:49:6f:54:f2:
5f:bb:e3:0d:48:b8:e3:dd:a4:7a:fb:3f:a2:98:a5:fe:41:87:
3a:50:2f:df:2d:bd:f7:5b:c4:12:42:e9:2f:5c:2d:52:5c:5a:
30:65:3f:87:86:a3:ca:f0:3b:0c:da:8c:24:dc:df:50:cf:cc:
eb:79:a5:fd:7c:8c:5b:39:45:e4:21:88:91:e5:1d:b4:85:f9:
43:b7:46:4d:d3:e9:5a:12:01:43:d6:ec:31:a6:9e:d4:95:a7:
82:cd:7c:2c:27:9a:46:58:da:aa:ff:be:04:94:3d:1f:ae:ff:
20:66:68:c8:95:74:fe:ba:55:99:02:43:8d:0d:8f:18:ce:c3:
92:a1:3b:47:fb:55:b6:53:3d:2e:fe:e6:68:18:4f:e9:3f:71:
54:01:15:de:3f:99:50:2a:69:48:db:3b:a7:75:c1:d3:bb:68:
b8:45:e4:9a:ae:dc:c1:1b:81:60:bb:9b:9f:a1:0f:e7:26:0a:
2a:8f:06:65:92:2b:bc:55:c3:40:14:00:6c:7b:f0:95:a6:4c:
83:8b:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:30 2024 by rpki-client on console-fra.rpki-client.org