Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/6DD19D16D53311EE8136926C775412E6.roa
File: 6DD19D16D53311EE8136926C775412E6.roa (raw, json)
Hash identifier: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=
Subject key identifier: 1A:BA:DA:D8:9D:CF:62:81:12:2F:E7:26:07:E7:21:C2:52:6C:55:80
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 0181
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/6DD19D16D53311EE8136926C775412E6.roa
Signing time: Tue 27 Feb 2024 05:45:36 +0000
ROA not before: Tue 27 Feb 2024 05:45:32 +0000
ROA not after: Wed 27 Feb 2030 05:45:32 +0000
asID: 327697
IP address blocks: 139.26.136.0/21 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Feb 27 05:45:32 2024 GMT
Not After : Feb 27 05:45:32 2030 GMT
Subject: CN=65dd7700-a492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:fc:bc:93:ab:41:f5:89:5e:70:a1:4d:f7:
81:44:05:77:64:a0:47:b5:4a:07:d2:70:7a:32:b6:
54:71:e5:cd:e2:20:5a:27:f3:9a:09:44:19:03:9a:
1e:4c:8d:42:06:a7:73:b3:5f:b4:40:20:f9:50:2b:
46:d7:18:58:6e:73:2c:45:80:0c:9b:43:38:d4:49:
6f:fd:40:3a:66:ea:0c:bc:6a:a5:d0:4e:07:06:c3:
15:14:1b:34:ac:32:bd:0c:32:1b:a4:1d:d7:3a:7e:
43:83:76:19:2e:66:ea:77:18:f8:ed:ec:2d:9d:8a:
f7:62:d6:47:e3:fc:6f:d2:06:67:c7:e5:a0:df:4f:
a9:39:8d:8c:30:4d:06:5b:b2:42:c0:f6:e6:c8:4b:
b9:11:9f:4f:4a:70:16:e8:a5:55:1b:b8:00:38:16:
86:cf:40:2c:64:77:9d:27:76:39:7b:ea:ae:2c:b3:
9a:6b:37:ab:24:4f:45:95:01:87:d6:a8:d7:71:28:
f9:38:09:44:e0:83:f8:64:0b:41:4b:cf:a4:73:0a:
78:c4:b0:39:87:27:6b:15:bd:7e:55:70:f7:16:40:
79:e8:0f:14:5d:6f:75:3e:ca:09:ba:81:c3:95:15:
75:70:ab:74:ac:37:67:2a:01:c3:02:48:97:8b:fc:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:DA:D8:9D:CF:62:81:12:2F:E7:26:07:E7:21:C2:52:6C:55:80
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/6DD19D16D53311EE8136926C775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.26.136.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:b1:64:29:1d:4a:de:bc:70:92:57:84:9b:fa:d2:bc:44:4a:
39:5d:bb:c4:06:ac:5d:19:1e:88:b6:f0:0a:8d:cb:ce:20:b2:
0a:fa:9f:43:fc:9c:27:8b:b0:a2:9c:d4:62:0d:4d:b7:c8:dd:
eb:95:6b:88:1a:31:35:74:c8:61:44:ce:6a:13:9e:09:5b:f6:
28:a1:4c:63:11:c1:ee:34:d6:26:ca:d2:76:29:48:1a:34:a7:
94:19:e4:98:5a:c8:74:56:43:1e:b8:6f:8b:29:37:ea:ad:97:
8f:e4:d9:d0:ad:2c:b2:63:81:a1:5a:be:2f:88:16:0d:e0:9c:
fd:ee:83:db:eb:6e:b1:da:d5:ba:da:96:85:9a:f2:8c:6d:8e:
b0:69:6c:a1:88:b4:48:fd:6f:49:69:0c:e2:4f:63:05:b1:77:
23:b3:b6:3d:28:0e:91:d8:7f:e0:1a:f3:f4:3e:6f:fc:aa:3e:
b8:1a:85:29:b7:43:8a:57:e6:ac:7f:af:09:b4:f6:1f:34:00:
83:cf:f0:9b:de:84:87:55:6e:fb:af:d1:bd:05:67:4b:82:94:
20:13:08:9c:52:cf:f2:7b:23:ff:eb:42:96:d7:c7:84:f7:11:
8d:57:af:7e:9f:2d:12:4d:93:d5:0e:26:92:ad:dd:c3:40:dc:
1c:4f:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:50 2024 by rpki-client on console-ams.rpki-client.org