Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/5F7AB17428B611EDB115B48AF1222468.roa
File: 5F7AB17428B611EDB115B48AF1222468.roa (raw, json)
Hash identifier: OF/fSOSuvHu8HSaG6Hw4O63ywB6BMdELYNXTmsSswzk=
Subject key identifier: 89:19:8D:A9:CB:F8:20:E4:2C:D6:4A:7D:8E:7B:C9:86:30:8D:56:D2
Certificate issuer: /CN=F365E03DAR/serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
Certificate serial: 04
Authority key identifier: 0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
Authority info access: rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/5F7AB17428B611EDB115B48AF1222468.roa
Signing time: Tue 30 Aug 2022 22:52:07 +0000
ROA not before: Tue 30 Aug 2022 22:52:01 +0000
ROA not after: Sun 29 Aug 2032 22:52:01 +0000
asID: 328111
IP address blocks: 169.239.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl
rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365E03DAR/serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
Validity
Not Before: Aug 30 22:52:01 2022 GMT
Not After : Aug 29 22:52:01 2032 GMT
Subject: CN=630e9497-c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:e0:1d:cf:d5:37:41:61:8e:17:64:88:84:
25:8d:e9:59:f4:dc:ab:61:e7:88:37:65:41:96:e2:
34:4f:11:44:96:fe:b6:44:ab:d2:4b:10:36:e9:66:
99:ee:a3:25:69:13:ec:c5:a8:ec:db:a8:a5:58:0e:
27:3a:76:84:58:7e:7c:1c:0f:83:11:85:99:63:11:
8b:de:73:ef:7e:cd:ac:ee:bb:16:a4:c2:76:71:ae:
71:ae:4a:4d:4c:0e:8a:31:78:22:58:22:8f:d9:26:
01:06:b0:79:66:26:c1:9f:c7:b9:11:d8:92:6c:65:
0b:ae:e0:74:22:01:0b:14:bd:4c:0b:d1:d3:6c:16:
75:0f:af:76:29:45:bd:4c:b8:15:5c:26:74:5c:18:
82:21:e1:2e:90:0a:8b:07:d3:e3:c5:df:17:26:bc:
8e:fa:41:bd:2b:d0:87:c4:7f:f9:a6:1c:52:77:9a:
c6:e5:4e:93:42:2e:40:6e:27:9b:ee:c5:fe:fa:03:
d0:ff:d8:53:f8:d1:ab:19:63:30:43:f2:8b:1f:4a:
35:84:9d:f1:5f:4b:b2:d1:bf:5a:62:01:3b:96:9c:
8c:0e:a1:ea:76:df:4e:55:fa:b9:f0:dc:f4:bc:65:
c9:8e:9b:4d:cd:67:ae:a9:0d:8b:43:13:f5:8d:74:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:19:8D:A9:CB:F8:20:E4:2C:D6:4A:7D:8E:7B:C9:86:30:8D:56:D2
X509v3 Authority Key Identifier:
keyid:0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/5F7AB17428B611EDB115B48AF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.132.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:98:6b:3e:24:40:10:b2:10:b2:ec:1a:e2:27:81:71:98:5b:
46:b6:24:f5:7c:8b:70:41:f7:4a:b0:86:34:ac:91:9a:45:3b:
2f:1f:ee:d3:d1:a7:2b:4c:e5:d6:99:47:5b:75:0c:90:14:8b:
f8:dd:08:a4:42:b9:fa:2f:4d:f8:6e:da:19:30:bd:51:2c:f0:
74:b4:2e:ae:41:5b:e2:76:f9:f7:88:35:6c:4f:a3:c4:98:ad:
82:cf:54:e1:eb:38:80:b5:9f:ef:c2:e4:40:61:7c:64:61:e8:
38:06:59:9b:eb:6c:bf:42:e1:d4:96:2d:5b:cd:98:67:cf:5c:
79:18:74:b4:a0:dd:39:01:09:7d:9d:ce:43:fc:33:fc:6d:72:
c2:b8:2f:5d:be:c2:f3:2c:04:88:9f:6c:9b:d7:4e:67:dd:a7:
4b:30:72:43:15:d7:92:fc:01:52:35:da:e7:b9:53:65:e0:6b:
46:89:42:08:d6:12:64:60:5f:1b:23:75:b7:a6:37:e4:b5:3d:
b7:a6:9f:2e:07:56:b9:3d:5b:55:fd:9a:49:13:98:78:34:39:
7b:14:2e:bb:ee:7f:95:13:9b:7d:89:89:3d:7f:75:6a:e2:ff:
47:e4:e9:d0:43:be:61:6f:9f:72:ba:05:70:83:6a:51:d7:05:
29:f2:4e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:26 2024 by rpki-client on console-ams.rpki-client.org