Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/244420086AAF11EF80A9C242762E951A.roa
File: 244420086AAF11EF80A9C242762E951A.roa (raw, json)
Hash identifier: fikLA7pBGoWp/AmNcVCYvVm3zMrgMWIgXbWTjt1of2E=
Subject key identifier: 8E:93:CF:0B:04:D8:D3:02:4D:1B:45:5B:7C:FE:18:4F:56:14:A9:73
Certificate issuer: /CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Certificate serial: 02
Authority key identifier: AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
Authority info access: rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/244420086AAF11EF80A9C242762E951A.roa
Signing time: Wed 04 Sep 2024 11:16:33 +0000
ROA not before: Wed 04 Sep 2024 11:16:23 +0000
ROA not after: Mon 31 Mar 2025 11:16:23 +0000
asID: 37542
IP address blocks: 160.226.192.0/18 maxlen: 24
164.160.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Validity
Not Before: Sep 4 11:16:23 2024 GMT
Not After : Mar 31 11:16:23 2025 GMT
Subject: CN=66d84191-2597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:fd:46:7a:8f:99:0b:7e:d8:59:86:63:d0:
e0:18:b3:d5:57:a6:fa:c1:cc:d9:e5:87:42:e9:53:
eb:86:c8:2d:7b:56:cd:ad:71:e4:92:0e:78:c9:a0:
d2:ef:42:57:2f:7d:19:d0:8f:f8:cc:f9:c1:f8:53:
cd:42:34:7f:b7:3e:a4:b3:24:4b:95:5a:77:79:39:
e1:ed:0e:2b:a0:fb:95:12:65:c4:23:66:e1:95:3a:
97:20:19:67:f4:4d:db:cc:39:2f:14:84:02:bd:7b:
42:0c:5f:44:8f:ba:79:1c:62:f9:cf:64:e5:8f:9f:
85:ea:06:52:f1:7a:3d:94:81:d1:47:8d:db:ee:74:
43:7e:d6:e3:fb:09:4b:7a:22:15:b6:83:b8:31:e8:
1a:0a:e6:19:98:16:ce:78:1c:77:fc:4b:d1:72:7b:
00:e0:55:98:b1:96:7e:0e:71:ef:e6:8b:65:b5:b8:
9b:68:a9:80:80:39:24:48:56:f4:60:aa:f7:dc:e2:
c6:da:75:a4:89:18:39:99:89:55:e6:64:40:a9:c0:
92:10:9b:00:55:bc:52:92:fc:4b:27:38:5c:2f:1d:
a4:6a:52:0d:d5:f0:72:4b:44:0c:08:1d:9c:fd:f8:
47:6c:54:c9:46:0a:f1:07:ba:33:b2:6e:06:45:5f:
1d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:CF:0B:04:D8:D3:02:4D:1B:45:5B:7C:FE:18:4F:56:14:A9:73
X509v3 Authority Key Identifier:
keyid:AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/244420086AAF11EF80A9C242762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.226.192.0/18
164.160.80.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:88:2e:b1:ef:1e:38:01:b5:df:63:95:d8:fa:bb:83:1e:bd:
51:f4:d8:01:b5:a2:a0:5a:d0:a9:85:51:94:0c:cb:b3:0c:ed:
dd:49:8e:b0:ca:d7:64:cc:90:38:a1:a0:3d:af:f3:52:69:a7:
8f:47:58:73:28:06:8b:6c:c7:ba:22:46:64:2a:e6:12:e7:da:
83:46:56:43:12:d9:dc:c8:cc:0c:27:f6:c0:eb:ba:74:c8:64:
87:6c:0e:67:57:cf:bb:49:91:3a:3e:7c:a9:05:78:78:fe:11:
11:76:79:4b:50:3b:09:70:69:42:e3:b4:97:48:b1:79:ee:4c:
76:22:46:cd:10:4c:75:d4:c2:7a:c4:7a:3a:d2:83:44:58:09:
69:9d:1d:ca:c0:37:60:33:9d:99:93:55:bc:0d:a3:50:31:3b:
40:29:6a:17:28:65:54:5d:54:09:6d:44:7e:17:5f:59:4e:1c:
e9:5b:61:f5:56:32:0d:f6:13:0b:c5:0e:83:e4:81:a8:6c:98:
3a:80:be:2e:92:9a:54:81:55:bd:89:a7:77:10:70:97:51:e7:
9d:3c:42:5e:4c:11:f3:2d:6e:2c:1c:9e:69:fe:58:6d:78:85:
34:9d:91:2a:06:6a:98:d4:9e:9e:16:6b:58:50:7c:f5:9a:8b:
ac:c8:c6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:20 2024 by rpki-client on console-ams.rpki-client.org