Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/61E8A95475A111EFAC7BA279762E951A.roa
File: 61E8A95475A111EFAC7BA279762E951A.roa (raw, json)
Hash identifier: iAiWDX2k6dKqGfuzfdFuo/QfCsfKMTY5hEty8a1QfDk=
Subject key identifier: 43:40:4A:16:71:92:74:9A:7F:29:0C:93:5B:B6:CC:03:4C:44:29:0A
Certificate issuer: /CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
Certificate serial: 018F
Authority key identifier: 01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96
Authority info access: rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/61E8A95475A111EFAC7BA279762E951A.roa
Signing time: Wed 18 Sep 2024 09:35:46 +0000
ROA not before: Wed 18 Sep 2024 09:35:42 +0000
ROA not after: Mon 18 Sep 2028 09:35:42 +0000
asID: 37675
IP address blocks: 165.90.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
Validity
Not Before: Sep 18 09:35:42 2024 GMT
Not After : Sep 18 09:35:42 2028 GMT
Subject: CN=66ea9ef2-fc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dc:4e:45:eb:fa:b3:47:b7:5c:d3:ea:c4:71:
cc:22:3a:59:16:01:db:70:4d:4e:a6:0c:1e:4b:62:
ba:c3:ad:34:3f:df:d2:49:bf:89:32:89:b7:91:7e:
0f:23:c5:b7:7d:52:0b:91:b3:b1:a5:74:77:fc:ee:
38:19:0d:a8:54:2c:a3:1e:62:18:af:da:96:80:e5:
07:d6:3a:b1:ee:a2:af:7b:eb:2b:10:cc:cb:a9:6f:
60:0c:49:4f:8c:d2:14:76:97:de:1b:da:0b:16:bc:
6e:b6:a0:18:aa:39:b8:94:a8:14:5a:82:f9:58:b5:
d3:49:b8:da:c3:6f:c7:31:f9:db:9f:a6:f7:ba:a8:
55:35:16:5f:1c:34:93:f0:d7:86:07:36:15:e4:b3:
3d:25:b2:f4:ef:09:4d:39:8d:37:9f:2d:41:8a:88:
14:39:f5:c4:aa:28:e0:41:1c:f7:81:f9:a3:66:ba:
af:be:55:53:cc:3b:ba:25:e0:1b:8c:a9:d0:a3:36:
d2:12:df:6b:bd:d6:5a:85:75:02:51:34:79:dd:15:
a8:ca:81:d9:2d:24:53:6f:81:4c:43:88:9a:1b:eb:
c3:07:5c:ca:2d:ca:ba:5d:8a:80:6c:f1:71:71:b8:
69:d0:32:5a:16:bc:23:2d:0d:5f:c2:40:a2:05:be:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:4A:16:71:92:74:9A:7F:29:0C:93:5B:B6:CC:03:4C:44:29:0A
X509v3 Authority Key Identifier:
keyid:01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/61E8A95475A111EFAC7BA279762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.90.32.0/19
Signature Algorithm: sha256WithRSAEncryption
25:bd:5b:55:83:32:90:d7:42:6b:81:59:f5:ee:bf:24:bc:f7:
bb:ee:b6:ce:85:0e:1c:aa:6a:a6:fd:75:61:65:a1:38:b9:ea:
a0:f1:42:cf:98:0a:e4:e6:5b:c5:6c:6c:5b:17:ea:b3:f4:d1:
57:e8:9d:30:6b:e6:2f:09:62:5c:86:23:ac:01:4d:4a:de:b6:
ec:f0:1f:89:fa:e0:7d:09:28:45:49:47:a1:b9:47:2a:60:c2:
10:5d:5c:ea:98:ab:eb:de:8f:05:37:ac:df:90:75:04:02:64:
f5:b9:3b:7c:a3:cc:f8:d8:6f:10:21:cf:71:55:33:99:eb:a1:
a1:a5:1f:b7:22:33:65:07:14:c5:77:60:3c:ab:be:db:11:0e:
3c:32:64:25:3e:82:40:c8:67:fd:6e:87:65:2a:1f:50:c3:7b:
56:58:e5:11:e3:1e:2c:e2:25:6c:4b:04:dc:a8:9f:16:0a:df:
4e:a0:e5:8e:34:0f:2b:b2:a0:9a:66:c1:46:7f:89:39:10:05:
8a:73:26:55:a9:68:d4:e6:1c:f9:09:6f:4b:a4:15:63:8f:91:
50:e5:57:62:4b:c2:07:bb:e4:f2:d1:1b:f3:54:11:28:80:41:
a9:39:8f:29:23:6a:5f:a1:27:7b:d5:74:77:25:2f:9b:c9:36:
f1:0f:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org