Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/FAF25EE85C1C11EC823D4E705A40D577.roa
File: FAF25EE85C1C11EC823D4E705A40D577.roa (raw, json)
Hash identifier: RBwd6xkib/nRAXdHuMMwN3jvGs201qwc/Op1fbm86sk=
Subject key identifier: 82:8D:3D:C0:8F:E2:E0:1E:1F:EB:C2:35:F8:5C:C3:7E:EF:E9:2F:91
Certificate issuer: /CN=F3660137AR/serialNumber=BF2E51C85A3A817FF6C7FCC693064F8B3C7A99C6
Certificate serial: 02
Authority key identifier: BF:2E:51:C8:5A:3A:81:7F:F6:C7:FC:C6:93:06:4F:8B:3C:7A:99:C6
Authority info access: rsync://rpki.afrinic.net/repository/arin/vy5RyFo6gX_2x_zGkwZPizx6mcY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/FAF25EE85C1C11EC823D4E705A40D577.roa
Signing time: Mon 13 Dec 2021 14:00:08 +0000
ROA not before: Mon 13 Dec 2021 13:59:57 +0000
ROA not after: Wed 31 Dec 2031 13:59:57 +0000
asID: 327900
IP address blocks: 169.239.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft
rsync://rpki.afrinic.net/repository/arin/vy5RyFo6gX_2x_zGkwZPizx6mcY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660137AR/serialNumber=BF2E51C85A3A817FF6C7FCC693064F8B3C7A99C6
Validity
Not Before: Dec 13 13:59:57 2021 GMT
Not After : Dec 31 13:59:57 2031 GMT
Subject: CN=61b751e8-4774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:8f:dd:b6:cd:c3:97:68:7b:a2:bc:3a:fe:
df:0a:ee:0a:92:0e:09:18:91:8a:c8:5b:c7:a6:1a:
5d:49:28:ee:93:01:a6:4a:5b:f0:59:52:35:49:1f:
16:08:e8:67:7f:d5:1e:9e:5d:37:8d:33:cd:ad:84:
84:17:ba:4c:8f:7e:af:0e:fb:e2:da:85:c3:e8:5f:
60:ec:10:c3:fb:4a:09:73:74:a5:d3:b3:8c:ac:c4:
12:f3:56:3e:ac:c0:1b:00:f5:23:eb:e9:a2:f7:aa:
ac:4b:a3:50:70:7c:08:9b:91:b8:71:e7:cc:f5:90:
6b:07:88:4d:7c:f2:17:ce:e0:49:29:bd:36:46:3e:
b5:09:9b:e0:f0:80:6d:52:f7:8b:07:0f:84:e8:72:
63:d6:b2:b9:cb:39:20:6c:aa:12:35:79:d3:34:a5:
9b:3e:c0:88:d8:d9:aa:f3:9e:25:d9:dc:82:d6:05:
a7:90:71:d4:33:d9:ba:2a:47:4c:78:fc:48:9e:97:
f8:3c:8e:04:29:3b:2c:a4:93:43:dd:4d:04:4d:52:
a3:94:ba:ea:3b:ac:63:f3:20:c4:b8:9c:d5:21:4a:
dd:f7:b1:51:c0:cb:fc:89:0b:7b:84:5d:6d:57:ac:
60:73:0a:26:98:18:c5:30:1f:c5:5e:49:07:40:54:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:3D:C0:8F:E2:E0:1E:1F:EB:C2:35:F8:5C:C3:7E:EF:E9:2F:91
X509v3 Authority Key Identifier:
keyid:BF:2E:51:C8:5A:3A:81:7F:F6:C7:FC:C6:93:06:4F:8B:3C:7A:99:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/vy5RyFo6gX_2x_zGkwZPizx6mcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/FAF25EE85C1C11EC823D4E705A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.0.0/22
Signature Algorithm: sha256WithRSAEncryption
93:26:47:3e:1a:fc:f2:6d:18:86:cd:03:71:9b:bf:39:dc:aa:
68:93:0e:bb:36:b5:9d:2a:bb:1e:6f:86:25:54:ed:e7:93:1e:
38:e9:9a:28:8d:24:e7:9e:ad:c1:e9:3e:d3:4c:87:29:5c:f3:
d0:61:09:7e:f7:29:d5:56:60:e9:b6:01:f9:26:e3:17:95:b9:
3e:38:62:a7:47:a8:7c:a0:a2:2a:fe:9e:dc:d5:eb:96:f8:42:
d0:c0:ac:71:70:b5:d6:86:31:a0:a1:b9:1a:de:eb:54:ab:1c:
86:40:ee:d5:2e:90:2a:60:6d:7f:e4:29:b0:ce:e9:77:08:94:
13:25:7f:15:b9:1c:b0:f4:33:60:6f:b6:e5:c2:4f:8d:16:74:
c0:9d:de:ba:12:e3:4a:22:95:02:88:e7:9b:db:b9:e6:da:27:
cf:1b:d8:08:42:c1:f7:0f:12:fa:c6:0d:1e:df:e4:54:ce:ed:
cd:b3:a1:19:9d:c5:92:31:42:55:c2:18:f1:ad:54:4d:2c:4e:
28:65:d7:a1:d3:a4:e7:ce:86:0d:49:13:88:f5:7f:98:88:5e:
ea:c9:cf:85:02:5e:a4:c2:9d:d6:6b:fc:33:cd:15:b3:92:c6:
59:58:ef:67:94:36:bc:11:7a:7e:02:88:0e:41:06:20:1f:4b:
9b:22:df:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:05:21 2024 by rpki-client on console-fra.rpki-client.org