Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/0E3B72CCC8C811E98D790458F8AEA228.roa
File: 0E3B72CCC8C811E98D790458F8AEA228.roa (raw, json)
Hash identifier: itr9OUnzmKbdqppKMzcknLB4lBw9Ah9MK/Fp31d00b0=
Subject key identifier: 15:60:96:7A:56:09:25:5E:FE:F5:F7:65:D6:3A:81:39:B6:F1:00:9A
Certificate issuer: /CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Certificate serial: 03ED
Authority key identifier: 1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/0E3B72CCC8C811E98D790458F8AEA228.roa
Signing time: Tue 27 Aug 2019 12:41:57 +0000
ROA not before: Tue 27 Aug 2019 12:41:53 +0000
ROA not after: Mon 27 Aug 2029 12:41:53 +0000
asID: 328032
IP address blocks: 164.160.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Validity
Not Before: Aug 27 12:41:53 2019 GMT
Not After : Aug 27 12:41:53 2029 GMT
Subject: CN=5d652515-24a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:e9:37:92:60:5e:a7:a1:5e:f3:a9:57:a3:
30:ac:4c:c3:f4:8a:eb:93:80:6a:d3:56:70:75:ad:
23:cb:1a:dc:9a:a6:2a:2b:1b:d2:3b:3a:eb:5c:b9:
bc:b6:fe:e3:02:21:32:fb:35:d3:82:fd:d8:6c:93:
d5:22:c5:f7:9d:cc:c9:97:a9:2c:e4:02:e3:48:30:
ea:61:48:fb:69:5c:1c:17:14:ce:ea:d7:27:2d:c7:
cd:c5:69:17:74:cb:6a:fb:bf:f0:eb:02:76:5a:c3:
52:b0:20:e1:49:02:04:b2:3c:9f:0c:26:49:7e:67:
bc:15:5b:4e:d5:ed:40:44:e4:6a:c3:d0:fc:2d:01:
8c:76:84:92:90:15:c8:81:55:ab:8f:78:99:d8:fb:
2f:b9:37:ec:bb:4d:d4:fa:45:cc:d4:4e:11:7d:d7:
9b:ea:59:dd:9d:b5:14:48:ba:56:a7:40:20:7d:ed:
1b:4f:de:c7:22:b4:ea:49:15:f6:f8:20:0a:1e:38:
5c:e6:e0:1d:b7:c4:9e:ff:af:df:e8:65:7e:ba:92:
7a:e0:08:40:e5:b2:13:ab:95:51:df:d6:62:16:03:
c1:76:d3:f6:3d:45:ea:5b:0c:2f:2f:b4:62:7c:dd:
7b:28:f0:d4:82:3a:b4:2b:4d:27:31:b2:1d:a8:42:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:96:7A:56:09:25:5E:FE:F5:F7:65:D6:3A:81:39:B6:F1:00:9A
X509v3 Authority Key Identifier:
keyid:1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/0E3B72CCC8C811E98D790458F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
164.160.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:34:99:13:7e:0e:a2:8d:f7:cd:64:76:99:81:cb:8d:c5:ed:
30:15:02:12:33:fc:eb:4d:ab:35:f9:60:4d:ea:c3:c0:25:1a:
e5:3b:f5:6b:b7:c9:04:97:9f:a9:37:bd:7e:2e:e0:ec:ec:35:
52:d7:4b:c3:c2:e0:08:51:0a:5c:a0:b2:55:bf:56:79:41:7f:
90:cd:c7:2d:a9:ee:93:57:38:57:ae:dd:af:b4:57:08:55:ce:
21:8d:46:f3:bb:5a:44:38:52:a2:10:c7:93:c7:e7:a8:e3:70:
c9:fb:87:46:a9:45:87:4d:91:8f:b1:ef:87:9b:b6:6a:a2:c7:
8e:2d:4a:35:f3:60:1c:7d:4f:24:ed:fc:2f:9b:a4:ba:42:e6:
d6:76:c9:50:04:d8:f4:c3:cb:af:24:b6:94:78:bf:b5:46:75:
fc:47:ba:0e:4a:dd:8f:40:ab:ba:01:71:c7:9d:68:65:b6:80:
5f:e7:22:44:c3:01:34:81:05:23:06:49:01:f5:b4:cb:44:12:
00:d7:d9:a4:29:0a:58:ca:db:6a:be:b1:36:60:eb:7a:bb:99:
09:10:81:56:65:b8:05:2e:e3:de:34:39:eb:70:7c:cf:03:50:
cc:8f:36:0a:74:c9:9a:ad:61:08:36:53:39:7a:c0:be:76:46:
12:38:64:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:09 2024 by rpki-client on console-ams.rpki-client.org