Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/8506A5F2291811E9A5145C67F8AEA228.roa
File: 8506A5F2291811E9A5145C67F8AEA228.roa (raw, json)
Hash identifier: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=
Subject key identifier: B1:E9:C8:54:BF:50:B6:F5:F0:FB:02:52:24:E1:F9:CB:A2:8C:5A:42
Certificate issuer: /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial: 02
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Authority info access: rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/8506A5F2291811E9A5145C67F8AEA228.roa
Signing time: Tue 05 Feb 2019 07:34:50 +0000
ROA not before: Tue 05 Feb 2019 07:34:46 +0000
ROA not after: Mon 05 Feb 2029 07:34:46 +0000
asID: 37002
IP address blocks: 165.169.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Validity
Not Before: Feb 5 07:34:46 2019 GMT
Not After : Feb 5 07:34:46 2029 GMT
Subject: CN=5c593c9a-1c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:0c:30:ff:82:2b:8d:18:c6:1d:3c:12:d3:
39:e7:3b:ec:45:e3:80:5b:59:83:28:4b:32:7b:18:
06:a8:19:45:c0:17:29:ab:a9:77:7d:2f:b7:ca:e1:
b5:34:54:0e:70:f7:cb:d8:80:5b:03:de:03:89:7a:
33:e8:33:83:f5:dd:f8:c1:bb:c1:bf:78:1d:57:0f:
cb:fb:00:2b:0a:22:f3:4b:2a:fd:37:2b:ff:a8:05:
12:d1:8a:7e:b6:88:84:e9:eb:05:8a:81:b0:72:d9:
a1:e8:b3:66:19:bb:b5:32:08:55:1d:c8:bf:b8:6f:
34:4e:45:ed:c6:aa:86:68:d2:83:a6:2f:df:c5:4b:
b2:20:99:7e:d7:80:2a:2d:8f:bb:bd:3a:3a:c1:9e:
15:3c:c2:1c:2c:02:63:d5:27:9c:6d:25:b7:60:9e:
ca:1e:63:ad:32:c8:92:b7:ad:fe:32:d7:e2:08:c1:
0a:63:10:c1:e3:b1:77:03:cf:c7:c4:4a:8b:c9:8f:
63:31:bd:de:2e:32:6a:d0:93:5d:6f:29:59:4c:6f:
67:ba:10:d3:6f:cd:3d:7d:93:a8:a9:ff:2c:e6:20:
e5:30:60:fa:5e:0f:f5:95:d4:a5:c9:9f:38:2f:17:
33:2c:f4:5b:09:dd:2c:be:ea:43:0c:d2:26:95:67:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E9:C8:54:BF:50:B6:F5:F0:FB:02:52:24:E1:F9:CB:A2:8C:5A:42
X509v3 Authority Key Identifier:
keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/8506A5F2291811E9A5145C67F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
165.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:2d:01:93:35:5c:59:c0:b1:3e:d7:79:e3:6d:fb:0c:ce:24:
13:df:a2:fd:13:ae:cb:e0:1a:65:03:db:1b:91:3b:15:a4:40:
70:54:97:73:28:43:68:b3:e4:61:03:6d:dc:21:7d:c0:7c:9c:
88:8b:0a:0f:6e:e4:8b:ba:70:d2:0c:51:2a:04:61:d9:00:0d:
de:27:f7:3d:f1:2b:00:44:88:86:85:5d:65:90:19:4b:a3:76:
13:84:1d:03:a8:eb:6d:2b:ef:22:f1:41:88:55:a9:c9:c3:66:
fa:55:ad:dd:97:8c:a5:4f:ae:e5:28:c8:8b:5d:19:67:c2:57:
f5:24:1b:62:9f:13:af:b0:8e:ef:bb:38:ae:73:21:5e:cb:41:
e3:c5:e7:5b:95:b0:1c:17:56:79:8f:57:38:28:b9:ef:de:fd:
75:67:29:83:e9:f3:36:15:df:77:48:33:c3:eb:5c:6f:1a:c5:
07:36:2a:07:04:9c:d8:69:9f:33:13:3f:ab:1e:e0:64:66:28:
5a:73:c2:91:e0:05:b6:3d:95:77:64:88:84:9c:90:4c:c2:ab:
12:fe:f4:31:12:a4:fe:2a:aa:21:86:de:f4:c5:bd:17:31:13:
62:09:83:20:d6:f2:a3:6b:38:4d:a3:33:23:52:5e:c4:d3:bd:
59:eb:6e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org