Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/146302C4C8C711E984B79356F8AEA228.roa
File: 146302C4C8C711E984B79356F8AEA228.roa (raw, json)
Hash identifier: DdSuiwT/ngk7JQ1+7xZSJqCpSkRWy7BhZniM1rPy9e8=
Subject key identifier: CD:24:E3:1E:B2:24:E7:20:93:3A:63:0D:39:2B:4A:B1:A0:34:6F:0D
Certificate issuer: /CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Certificate serial: 03E9
Authority key identifier: 1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/146302C4C8C711E984B79356F8AEA228.roa
Signing time: Tue 27 Aug 2019 12:34:58 +0000
ROA not before: Tue 27 Aug 2019 12:34:53 +0000
ROA not after: Mon 27 Aug 2029 12:34:53 +0000
asID: 328032
IP address blocks: 164.160.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Feb 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1001 (0x3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656177AR
Validity
Not Before: Aug 27 12:34:53 2019 GMT
Not After : Aug 27 12:34:53 2029 GMT
Subject: CN=5d652372-8851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:cf:cb:ad:c8:4f:d3:78:b9:de:a2:ba:19:
a1:53:43:d7:a4:6a:c8:1c:71:37:55:3a:e6:d6:8a:
75:c0:59:64:ea:42:28:7e:57:fd:53:44:fb:aa:8a:
06:b7:88:e4:49:18:ac:a0:4d:0d:17:61:e6:32:ef:
5c:3a:3c:4c:af:3d:17:b8:95:26:08:e5:7f:7d:c5:
4f:b4:bb:15:74:7e:8c:04:db:9c:43:8c:72:39:e2:
03:c7:db:04:c7:b6:2a:70:2a:40:33:fd:f5:db:4b:
fd:29:df:19:0c:1c:6f:d5:7d:eb:69:41:6c:5b:52:
4d:31:7b:1a:ca:cf:1c:80:1c:f1:7d:a8:cd:79:01:
37:f4:9c:d3:12:ee:a2:05:de:db:2e:3b:43:87:32:
45:ae:26:94:a9:f8:41:6a:93:ee:76:2f:1d:25:18:
b8:81:85:d4:63:81:b0:f8:c1:d0:fe:fe:56:cb:c6:
91:1c:d5:1d:98:4e:e5:6b:01:f3:50:be:e4:10:3a:
98:c1:2b:09:d1:f6:20:54:93:ff:a9:e4:0d:ce:76:
16:6c:5b:2d:e1:35:27:f8:77:68:23:99:ab:63:94:
9e:21:e2:09:c1:d5:32:50:34:43:95:a0:49:4c:fa:
63:8a:2e:e3:24:d5:eb:de:0a:d0:69:e6:33:ba:e1:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:24:E3:1E:B2:24:E7:20:93:3A:63:0D:39:2B:4A:B1:A0:34:6F:0D
X509v3 Authority Key Identifier:
keyid:1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/146302C4C8C711E984B79356F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
164.160.46.0/24
Signature Algorithm: sha256WithRSAEncryption
10:84:d0:10:63:00:aa:44:f9:3b:6b:fd:39:b1:79:60:ff:f6:
b9:a1:42:fd:d1:b4:5c:2d:30:11:9b:9e:22:a6:cd:93:ce:9d:
9c:08:b2:31:98:1b:3a:1b:44:e3:c3:73:0b:17:10:e6:c8:e2:
a8:56:1a:a9:00:72:3f:36:10:b0:91:33:78:aa:2c:45:d3:af:
63:79:4b:ce:43:3a:84:7f:69:06:2b:34:11:0f:15:95:9d:ba:
e8:9c:73:37:45:dc:9e:09:3f:6b:d7:f8:20:37:aa:05:fb:45:
ca:aa:cb:56:f6:9a:2f:70:d8:8e:09:64:e8:90:18:04:1c:b3:
2d:f2:dd:49:87:98:fa:13:11:11:2d:bd:76:4c:17:00:b2:5c:
3f:fe:1e:c1:e5:ea:4d:df:cd:f9:8a:53:41:12:c3:8a:82:1e:
db:dc:b2:66:8c:34:1a:18:de:b8:01:b3:dc:11:c3:b1:2a:8a:
46:6c:5d:85:86:10:eb:62:d3:67:eb:fa:67:1a:11:b5:70:10:
e4:7d:b4:29:50:5b:e4:09:40:08:ac:3c:34:13:b5:dd:f9:ea:
26:36:d8:1c:a0:7a:ec:bf:87:8d:95:7f:67:84:87:a9:f6:7d:
ae:2c:d2:32:73:0b:92:71:f5:37:00:81:1f:45:6c:03:92:16:
fe:18:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:54 2025 by rpki-client