Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/FD8F3AE8BC2511EEA262C8AF775412E6.roa
File: FD8F3AE8BC2511EEA262C8AF775412E6.roa (raw, json)
Hash identifier: oLYmgki9mz5lwTsVGngG2jpWOy0zZNH+Gds3faUhjqY=
Subject key identifier: 58:D1:82:7E:35:27:6B:EC:C2:8B:0C:A6:B8:73:C0:CD:DC:00:FD:5F
Certificate issuer: /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial: 068B
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Authority info access: rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/FD8F3AE8BC2511EEA262C8AF775412E6.roa
Signing time: Fri 26 Jan 2024 08:36:25 +0000
ROA not before: Fri 26 Jan 2024 08:36:21 +0000
ROA not after: Fri 29 Dec 2034 08:36:21 +0000
asID: 30844
IP address blocks: 152.108.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1675 (0x68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Validity
Not Before: Jan 26 08:36:21 2024 GMT
Not After : Dec 29 08:36:21 2034 GMT
Subject: CN=65b36f09-608b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:71:4d:5f:44:7d:52:07:96:86:5a:de:79:
83:f5:a5:93:57:c1:e3:b9:70:c2:78:be:12:77:7b:
95:a2:df:71:9c:f5:f4:e0:21:36:30:fd:83:cb:a0:
e6:c8:18:b3:8c:29:bc:91:e0:28:95:bd:2e:e5:37:
e1:9e:46:98:95:52:15:d9:bb:56:67:92:09:b0:bb:
7e:3b:1a:e5:b8:4c:b9:54:5b:83:58:7b:0b:6e:a2:
bc:53:e8:92:32:58:4e:26:64:7f:e3:8b:da:da:24:
b5:57:f7:d7:51:e2:f8:51:eb:6c:c2:f2:d3:ab:a9:
8c:d0:da:f9:c7:95:38:c2:e9:6d:d2:81:57:f5:b5:
9c:d5:07:bf:14:36:ca:4b:6a:8c:d3:6d:b7:c8:87:
85:f4:7d:8e:10:55:3e:7c:49:dd:bb:12:d8:d7:8b:
d8:97:26:03:13:c6:a8:b7:25:13:3b:3b:ac:88:f5:
93:af:b3:37:ca:d6:c5:29:9f:3c:74:db:13:2a:9b:
94:20:c7:2b:0d:86:38:3d:95:9b:41:b3:e3:8d:12:
16:9b:8e:c8:2c:4c:b0:6a:0d:0a:21:fd:23:d5:8c:
91:ea:60:38:7b:c8:c7:64:1c:2a:cb:0f:96:58:34:
2e:fb:aa:64:e5:12:ad:4b:57:9c:5a:f3:41:e1:4e:
0e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:82:7E:35:27:6B:EC:C2:8B:0C:A6:B8:73:C0:CD:DC:00:FD:5F
X509v3 Authority Key Identifier:
keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/FD8F3AE8BC2511EEA262C8AF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:98:85:5b:67:90:3f:c5:6f:8f:52:0c:c0:4c:1c:29:bd:e5:
d9:72:c7:97:44:14:04:7b:96:d5:5f:8d:41:da:eb:02:5d:d3:
ab:5c:40:75:99:c0:84:5c:e3:98:f3:75:20:7b:03:ba:d1:b0:
e1:de:8f:86:ce:e2:a8:2f:5f:db:a2:77:1e:44:ed:36:c1:0f:
23:0f:db:16:c3:e0:11:52:6a:cf:48:86:12:a8:7e:58:6f:a6:
a4:3f:d2:c8:3f:ce:61:37:f8:42:98:1e:60:6e:7e:e1:e6:24:
d0:2a:fb:bc:14:a7:42:9e:1f:c7:2e:2a:e4:6c:0a:30:b9:0e:
32:5c:7d:9f:5c:6e:0d:01:3d:15:fb:bb:14:49:0f:6f:81:25:
ac:04:5d:12:38:bb:47:de:d0:60:56:73:e5:ca:96:8c:38:b3:
97:4c:83:03:1b:18:6f:48:36:cb:43:a1:17:2a:3b:71:9a:f0:
1b:6e:9a:11:3f:fc:fe:8d:8f:ee:6d:68:04:15:fd:a4:41:e7:
30:5c:a3:ae:db:db:89:f4:1a:98:49:0e:83:72:74:51:62:d1:
69:c0:fc:9c:b9:45:60:56:9e:50:ba:0e:08:c6:ef:d8:46:c5:
b5:91:c4:9f:c4:0e:aa:9d:04:6b:24:fb:6a:00:59:a5:07:22:
77:88:71:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 04:55:48 2024 by rpki-client on console-ams.rpki-client.org