Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/E73F0D38C8C611E98A095B56F8AEA228.roa
File: E73F0D38C8C611E98A095B56F8AEA228.roa (raw, json)
Hash identifier: B5Em/KidBogdtiGbZ1QNgeUY8m5bNBKn2AeQxhe44fA=
Subject key identifier: A8:97:D2:EF:64:24:91:85:65:5B:11:4F:48:78:3A:F4:AC:8A:6B:BB
Certificate issuer: /CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Certificate serial: 03E7
Authority key identifier: 1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/E73F0D38C8C611E98A095B56F8AEA228.roa
Signing time: Tue 27 Aug 2019 12:33:43 +0000
ROA not before: Tue 27 Aug 2019 12:33:37 +0000
ROA not after: Mon 27 Aug 2029 12:33:37 +0000
asID: 328032
IP address blocks: 164.160.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 May 2024 00:16:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Validity
Not Before: Aug 27 12:33:37 2019 GMT
Not After : Aug 27 12:33:37 2029 GMT
Subject: CN=5d652326-047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:10:60:29:cc:ec:40:b6:4f:4d:cc:49:0b:
b1:72:1e:e2:19:61:49:4d:10:b6:30:c1:b0:60:6b:
ed:a6:bc:d9:02:1d:c4:4e:5d:fb:fa:58:25:ee:89:
6b:90:17:47:85:fa:13:cb:69:fe:2c:aa:30:1e:d8:
e8:ef:07:a4:a5:98:62:cc:32:57:11:d3:ec:47:e8:
48:78:66:b8:b5:4b:6a:38:16:a4:8c:2f:ec:2e:46:
91:c1:c1:0d:17:d0:2d:ea:6d:f8:27:03:02:78:55:
80:16:0a:a0:30:d2:fd:53:b2:4e:a0:8c:8f:1b:01:
5f:62:86:03:bc:90:67:dd:cd:02:b0:6d:7b:de:0a:
e4:18:ba:7e:ae:b7:ee:06:db:e3:7e:0b:65:b5:12:
4e:2e:bc:8c:22:fb:24:f8:01:86:39:e2:10:ae:e8:
cf:ff:4b:ec:0b:7d:91:95:06:92:f7:79:d8:0d:81:
d0:1e:41:df:a3:75:14:e0:00:4e:36:88:1b:c6:ab:
99:1d:ad:8b:b0:c4:77:20:6f:4e:14:d2:f4:c4:89:
53:51:4c:b6:d0:2a:87:e3:ee:fc:15:d2:e0:07:10:
1a:06:02:c9:97:c1:41:4d:28:4a:08:82:9a:28:5f:
7f:54:93:92:d7:80:bc:f6:38:62:0c:df:54:c3:1b:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:97:D2:EF:64:24:91:85:65:5B:11:4F:48:78:3A:F4:AC:8A:6B:BB
X509v3 Authority Key Identifier:
keyid:1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/E73F0D38C8C611E98A095B56F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
164.160.45.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ed:78:f6:8f:4a:2d:27:5c:6e:1c:50:50:08:cd:bf:a1:90:
eb:03:7f:13:f2:ab:83:8b:40:7f:e1:51:76:36:d2:e8:3b:e1:
82:a6:fb:f8:81:73:42:71:b5:e0:f8:69:1a:d6:c2:11:7c:d5:
b7:d5:20:ce:1e:0a:e3:b5:b1:d8:9e:8d:dd:37:59:c8:09:4c:
6a:6b:d5:f5:fd:a4:a6:2e:96:d7:d1:1d:42:14:0b:ec:9d:68:
94:54:d0:e8:36:a1:d2:a2:5b:c5:fd:e8:bd:d7:9c:59:cc:d4:
29:d9:83:60:e7:03:e3:6e:a9:34:b2:28:63:f4:3d:0c:b9:06:
5d:92:3a:d1:27:60:14:90:8d:8b:ce:2a:56:69:32:a6:41:51:
97:e2:7c:fc:86:55:14:dc:32:3d:30:23:79:d1:13:2b:d3:0a:
9e:09:16:3c:3c:ec:1e:43:14:ca:08:80:5c:24:40:95:03:21:
29:bc:4d:df:9c:88:db:c6:f2:7d:0e:30:b7:a6:26:a2:cc:84:
96:9d:f8:b8:59:5b:70:38:6e:3c:8a:d7:af:50:58:e4:91:3f:
79:ea:9d:56:d7:02:6d:14:70:e3:d8:d6:6c:a8:30:16:a9:d8:
fc:66:3b:b6:e6:89:88:af:7f:20:b8:36:88:be:6c:4a:e3:21:
76:4c:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:37:54 2024 by rpki-client on console-ams.rpki-client.org