Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/FE7EF4DEA9A011EA8E58EF35F8AEA228.roa
File: FE7EF4DEA9A011EA8E58EF35F8AEA228.roa (raw, json)
Hash identifier: N7Iw9MeumlpaJ1CJWOcoOBYQ72/5ZVnOPL/BKPNdyjA=
Subject key identifier: 90:1C:80:60:1A:66:FB:EF:EA:FE:BA:83:04:DB:B2:5E:71:1D:36:75
Certificate issuer: /CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Certificate serial: 0582
Authority key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Authority info access: rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/FE7EF4DEA9A011EA8E58EF35F8AEA228.roa
Signing time: Mon 08 Jun 2020 15:59:12 +0000
ROA not before: Mon 08 Jun 2020 15:58:59 +0000
ROA not after: Sun 01 Jun 2025 15:58:59 +0000
asID: 327983
IP address blocks: 160.19.112.0/20 maxlen: 24
169.239.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Validity
Not Before: Jun 8 15:58:59 2020 GMT
Not After : Jun 1 15:58:59 2025 GMT
Subject: CN=5ede6050-8231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:a5:41:cb:34:79:2c:f6:58:8e:a3:e4:5f:
f1:c4:24:98:7d:84:cf:a1:59:10:45:ed:a6:51:7f:
30:aa:9d:75:63:80:5e:9f:a5:cc:76:7b:8b:bd:61:
6b:71:c1:1f:de:c7:90:ba:28:6b:49:34:11:12:88:
81:f1:d9:51:b8:1a:fc:f7:9c:68:65:41:9a:d9:01:
ce:d8:b3:84:85:9b:84:37:81:00:ec:c9:a6:de:cd:
4f:19:59:61:48:c3:e6:54:46:1f:c4:30:ff:bf:81:
29:22:07:80:07:85:89:2c:cb:c1:cb:23:ec:f6:4e:
fc:a8:0a:f6:60:95:05:50:ca:4a:78:ab:e0:06:a6:
81:4f:10:e2:c9:2a:fe:dd:33:fd:53:9f:15:a6:c6:
f7:bf:96:98:e1:5e:f0:fa:0d:0a:f1:41:a7:2a:34:
c9:91:8c:70:7b:04:67:df:82:d7:e8:fe:67:5c:67:
60:3d:20:55:3b:bf:37:19:4b:65:34:1e:35:d0:28:
2c:9e:97:f8:29:af:88:c6:18:48:d1:d6:bc:9a:43:
8a:4c:51:58:cb:56:64:52:87:75:82:aa:8f:94:1d:
68:8e:9a:1b:b9:3e:c5:ac:a1:c3:89:7c:ff:2f:ee:
b2:eb:a6:51:6e:77:74:5e:18:78:47:0f:c9:15:cd:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1C:80:60:1A:66:FB:EF:EA:FE:BA:83:04:DB:B2:5E:71:1D:36:75
X509v3 Authority Key Identifier:
keyid:9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/FE7EF4DEA9A011EA8E58EF35F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.19.112.0/20
169.239.208.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:49:53:ff:52:dd:c2:d0:38:96:14:11:fa:96:21:74:23:72:
fe:76:3d:e2:cd:e5:1c:79:da:7a:03:65:22:ce:77:45:e6:9e:
fa:e4:1f:a5:85:36:4d:16:11:49:ed:8f:75:d6:e9:3f:e9:55:
b4:1b:3b:45:f7:1b:b8:a4:ea:77:d1:a2:b5:d8:03:af:dc:a3:
b2:39:ef:fa:c3:28:0a:0b:13:a2:0c:73:1e:d6:1e:11:e7:be:
53:f5:74:fc:13:44:89:e9:52:c3:ff:da:2e:2d:57:04:75:ac:
57:8e:6b:a3:5a:57:56:1d:0b:10:52:85:d4:38:a6:7c:20:48:
bd:29:06:b5:5d:02:41:25:4b:e1:c3:4a:03:87:ef:d1:96:d5:
35:fe:61:97:b1:03:d3:12:cb:ec:ce:19:9d:8d:e2:33:15:54:
ad:b6:cf:82:93:53:6d:b6:58:87:1f:d2:e0:2d:97:ae:b4:df:
0b:3a:64:ed:0e:68:39:13:64:fe:9d:b9:58:29:ad:b1:ad:55:
78:7b:8b:b0:8b:61:8e:12:7f:91:11:c3:31:ca:40:20:12:d1:
ef:57:c6:e2:22:ac:87:43:4e:1c:24:8c:9c:4c:6d:ac:30:2c:
82:61:15:9b:16:47:4f:95:fa:1d:82:57:fd:3f:6d:3e:26:fd:
95:23:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:07 2024 by rpki-client on console-ams.rpki-client.org