Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/D810301ACD7411ED924EB195F1222468.roa
File: D810301ACD7411ED924EB195F1222468.roa (raw, json)
Hash identifier: dYxWBrTu9OW1ZJgskbPQ7plpE3AfWJJfm6WsS57HfsU=
Subject key identifier: A6:94:A1:1B:65:14:1B:46:E4:B0:72:DD:DC:66:80:79:E3:DF:B5:90
Certificate issuer: /CN=F365062AAR/serialNumber=1ADCB578254AC0C819B1C168EF55C01BB2C24A93
Certificate serial: 06
Authority key identifier: 1A:DC:B5:78:25:4A:C0:C8:19:B1:C1:68:EF:55:C0:1B:B2:C2:4A:93
Authority info access: rsync://rpki.afrinic.net/repository/arin/Gty1eCVKwMgZscFo71XAG7LCSpM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/D810301ACD7411ED924EB195F1222468.roa
Signing time: Tue 28 Mar 2023 14:28:45 +0000
ROA not before: Tue 28 Mar 2023 14:28:40 +0000
ROA not after: Thu 31 Mar 2033 14:28:40 +0000
asID: 37309
IP address blocks: 146.196.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.crl
rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.mft
rsync://rpki.afrinic.net/repository/arin/Gty1eCVKwMgZscFo71XAG7LCSpM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365062AAR/serialNumber=1ADCB578254AC0C819B1C168EF55C01BB2C24A93
Validity
Not Before: Mar 28 14:28:40 2023 GMT
Not After : Mar 31 14:28:40 2033 GMT
Subject: CN=6422f99c-e952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:8f:da:5c:d5:2e:f7:05:90:b5:f4:21:a0:
8d:88:1f:36:67:5e:14:8c:38:3b:1d:06:e4:9f:01:
bb:d2:5a:8e:52:7d:33:0a:d1:cd:d5:4c:4d:6e:9f:
d6:7e:a3:e2:14:d4:b7:3c:a6:54:7d:2b:3f:a7:a6:
69:e9:f7:50:6c:fc:aa:9b:cc:10:44:2a:e1:0f:95:
a4:9f:8b:9c:d3:f5:23:c2:59:c2:ab:e8:b3:5e:0d:
fe:5d:8c:62:4e:c7:15:49:a1:b4:9c:29:91:15:65:
e7:09:1c:fc:90:c4:aa:bf:83:e1:63:34:25:a9:6c:
07:51:d3:1f:59:10:a3:ef:50:6f:fb:a7:75:02:11:
48:14:c0:eb:d3:89:67:65:6a:6c:b0:26:4b:e2:94:
cc:4c:25:8a:a7:f7:31:f0:3a:9c:ed:27:10:b7:f4:
27:93:89:71:81:19:4b:58:b6:fc:fa:b0:fc:a6:cf:
98:df:f1:ac:9b:76:a8:9d:89:18:ad:de:80:d7:6d:
fe:4f:98:4b:23:2d:e7:f2:3d:63:a8:3b:44:e6:bd:
38:b3:9f:17:42:2d:36:65:e6:5e:94:20:d9:c8:f3:
7c:d5:b2:db:a3:88:e2:da:57:6c:42:d4:b4:23:bb:
33:ab:93:54:39:b6:d9:68:05:68:9d:72:c0:4c:85:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:A1:1B:65:14:1B:46:E4:B0:72:DD:DC:66:80:79:E3:DF:B5:90
X509v3 Authority Key Identifier:
keyid:1A:DC:B5:78:25:4A:C0:C8:19:B1:C1:68:EF:55:C0:1B:B2:C2:4A:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/Gty1eCVKwMgZscFo71XAG7LCSpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Gty1eCVKwMgZscFo71XAG7LCSpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365062A/BA505688CD7211ED924A748FF1222468/D810301ACD7411ED924EB195F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.196.128.0/17
Signature Algorithm: sha256WithRSAEncryption
03:8c:fd:2c:42:1b:d6:f2:79:63:3e:d5:0d:be:57:e8:4b:0b:
a5:f2:79:0d:ac:1d:2b:78:1d:21:cc:f4:d1:11:ec:b1:dd:0d:
52:6e:66:7a:fd:78:0d:ba:35:2e:82:24:15:c8:86:b8:1a:16:
83:d8:fe:f4:2c:f0:13:7a:24:e0:4d:62:6f:e3:60:76:d2:c2:
43:ea:ff:b3:d0:0b:bd:6d:67:44:7a:92:da:b6:e9:88:3a:f4:
44:0f:b0:ce:03:31:d6:88:c4:20:28:59:ac:72:41:e6:4a:62:
d0:ec:00:6a:a9:18:58:59:93:c1:b9:9e:e5:56:e7:cc:a5:ba:
2e:cb:b5:f5:29:31:32:77:83:89:fe:74:6b:de:1e:52:d3:76:
51:14:d1:6f:6f:25:4b:65:6b:8d:9a:50:c0:d9:1f:65:ed:a2:
5e:b2:b7:49:73:63:73:b1:57:56:4f:dc:b3:3b:b9:46:48:d0:
5c:3d:f7:6e:cc:a6:1d:41:0f:26:60:80:11:bb:13:9f:b8:36:
ac:d1:0d:e2:50:69:f8:b6:20:c2:af:a0:14:72:5a:ce:d3:76:
b8:ec:12:6d:43:8b:61:4b:9b:76:c0:d4:3f:e5:c8:90:78:42:
c3:80:4a:c6:6b:fb:72:83:fa:af:ff:24:16:2b:cf:f6:4f:80:
3e:51:13:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org