Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/271BDC865B7D11EEA292A6744AD9E6FC.roa
File: 271BDC865B7D11EEA292A6744AD9E6FC.roa (raw, json)
Hash identifier: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=
Subject key identifier: 18:77:EB:93:3C:44:C0:64:CB:5A:40:B1:A0:81:91:82:02:B4:3F:4F
Certificate issuer: /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial: 30
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Authority info access: rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/271BDC865B7D11EEA292A6744AD9E6FC.roa
Signing time: Mon 25 Sep 2023 08:25:58 +0000
ROA not before: Mon 25 Sep 2023 08:25:55 +0000
ROA not after: Sat 31 Dec 2033 08:25:55 +0000
asID: 327889
IP address blocks: 169.239.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48 (0x30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Validity
Not Before: Sep 25 08:25:55 2023 GMT
Not After : Dec 31 08:25:55 2033 GMT
Subject: CN=65114416-8f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:02:1c:c4:fb:bd:07:c4:89:38:bd:89:73:
0f:f2:d0:22:36:56:01:a4:be:02:dc:b8:be:a4:27:
3b:ef:c0:b4:4c:ca:e2:a8:bd:f1:fc:b3:6f:83:69:
cf:73:ec:7a:57:2b:7d:ca:5e:79:02:ef:78:f9:21:
90:fa:e0:a9:fe:30:87:9c:e2:a7:ad:5c:ee:ca:5c:
02:ad:3e:bc:f2:5e:c4:8c:5c:2f:1c:b3:a4:d0:3c:
ad:00:3d:e9:9f:b2:4c:d8:e7:7a:c3:1b:0b:07:82:
c3:15:04:a3:3b:1c:eb:2c:95:64:a2:7f:c0:b7:0c:
8a:e9:cc:ae:4a:13:b4:9c:48:17:4e:60:40:15:20:
d4:94:01:51:4f:5f:22:eb:a6:89:7e:55:c8:38:44:
01:f0:26:70:f6:cc:f5:c2:1b:fd:16:f3:0c:5f:70:
cc:59:26:9f:f9:11:34:30:14:54:e6:92:d7:67:57:
2c:41:f7:8b:7f:a7:08:de:d5:4f:7e:98:4f:1f:eb:
7f:f7:7b:35:c6:19:9f:89:48:34:98:1c:41:64:48:
0a:c0:b0:29:0a:2e:3c:ec:a1:d2:0f:4d:4c:34:20:
60:df:bd:4b:b4:d2:02:b8:fb:a9:ae:05:ab:e2:d1:
06:63:47:6b:ef:62:e4:93:e4:aa:d3:3c:e6:bd:54:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:EB:93:3C:44:C0:64:CB:5A:40:B1:A0:81:91:82:02:B4:3F:4F
X509v3 Authority Key Identifier:
keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/271BDC865B7D11EEA292A6744AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:9e:95:60:c3:3c:40:da:63:27:e6:8a:e6:03:a1:15:6b:d6:
af:60:19:66:c7:2f:66:8d:14:09:df:85:14:b5:9b:b6:68:42:
66:5e:83:07:e3:47:fe:05:5a:7c:88:a4:7d:d6:67:1c:ff:9e:
60:15:c4:52:00:2f:ce:22:1c:fd:80:8d:8f:38:c3:db:db:fa:
1f:1a:de:ab:84:5f:37:ac:d4:ae:5d:ee:96:74:f5:1b:09:73:
3e:d6:9e:cc:60:73:c9:67:e1:ca:f3:61:c1:25:13:96:86:b8:
85:04:ea:37:1a:1e:39:96:25:cd:a9:e9:cd:00:f6:63:ad:e9:
d2:0c:31:e3:f6:18:55:fa:b6:a6:48:7a:d4:39:05:a4:dc:cb:
3a:f5:74:18:3e:67:b8:a0:4f:9e:aa:ad:b6:a0:fb:5d:fb:60:
32:61:71:a1:d2:af:ae:72:78:14:ed:c0:56:e3:b5:e9:09:da:
7e:8b:bf:fd:2a:7e:fe:cd:b2:c7:83:2c:70:77:f1:fe:96:f5:
d5:3e:3f:c8:d2:23:b9:91:79:dc:9a:e6:2e:a9:54:d4:ab:b0:
55:64:d0:6c:ee:1d:22:f3:08:4e:8d:4f:dd:b3:60:80:43:80:
3e:26:da:e7:b4:f9:f5:cf:ee:b0:22:83:8a:4a:76:70:43:00:
57:7c:8f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:09 2024 by rpki-client on console-fra.rpki-client.org