Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/85DEE92291EF11E9ABCCB07EF8AEA228.roa
File: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (raw, json)
Hash identifier: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=
Subject key identifier: 4D:A2:89:52:88:57:30:13:C4:D7:B8:69:62:61:FD:48:CC:63:66:0C
Certificate issuer: /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial: 02
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Authority info access: rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/85DEE92291EF11E9ABCCB07EF8AEA228.roa
Signing time: Tue 18 Jun 2019 17:35:55 +0000
ROA not before: Tue 18 Jun 2019 17:35:50 +0000
ROA not after: Sat 18 Jun 2039 17:35:50 +0000
asID: 6968
IP address blocks: 206.223.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Validity
Not Before: Jun 18 17:35:50 2019 GMT
Not After : Jun 18 17:35:50 2039 GMT
Subject: CN=5d0920fa-bddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:5e:65:a1:6f:b7:7c:ce:6b:c5:96:97:e0:
b1:43:a9:49:88:54:ef:bc:85:38:56:51:16:3d:96:
aa:1e:4b:7f:02:b9:f8:59:07:18:68:73:f9:df:0e:
2b:85:db:c4:2d:76:3c:79:d0:71:04:54:0e:66:c1:
ba:0c:b1:4a:31:af:b3:0f:53:1a:13:7e:7e:21:7f:
0b:19:96:32:42:ec:06:0c:22:8d:28:b6:a2:85:ce:
a9:ef:1c:6f:d8:36:df:12:a0:9a:1c:18:cb:74:58:
1b:ec:45:5b:42:2e:d8:68:ac:3b:e4:ea:54:f2:24:
12:fd:56:34:29:d5:c9:5c:c3:e9:cd:81:7c:d6:d2:
4b:f6:1d:39:83:04:5e:28:44:e2:18:db:a5:d3:c2:
d3:a3:bb:84:1c:fc:45:79:a9:67:a3:8c:1d:92:ed:
06:78:b1:83:2d:91:0f:ea:82:27:b1:3d:c5:49:a2:
74:ee:4d:89:14:94:ca:21:1d:58:af:4c:2f:44:f2:
34:bc:eb:48:f7:fd:ec:6a:e9:b0:7b:b3:fb:98:81:
cd:66:81:d6:e7:0a:0f:b6:a1:32:5a:7a:01:89:1d:
a2:23:32:26:f1:47:b6:a0:53:85:af:76:3c:82:b8:
12:bb:5a:ca:61:0e:e1:03:53:27:ed:a9:c7:ef:2c:
ff:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A2:89:52:88:57:30:13:C4:D7:B8:69:62:61:FD:48:CC:63:66:0C
X509v3 Authority Key Identifier:
keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/85DEE92291EF11E9ABCCB07EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
206.223.136.0/24
Signature Algorithm: sha256WithRSAEncryption
95:4b:90:84:64:4b:20:c8:cd:05:0d:69:04:ee:da:fd:30:75:
04:f4:c3:4b:c9:18:c2:a6:26:58:d3:2b:40:7f:fb:8c:d4:e3:
bb:02:73:b2:1b:ac:d9:5a:4b:5a:2f:5e:29:a6:23:96:94:82:
2c:45:e0:a4:83:7b:cd:c8:21:b7:83:e8:70:43:50:06:a8:17:
a7:79:55:57:85:8b:16:39:c0:72:3d:9c:b5:9f:49:3a:5e:02:
81:f9:2c:63:3d:ae:73:a7:58:75:e1:73:26:5e:25:9b:16:78:
37:c5:3b:10:a9:3f:81:be:f3:4c:56:5f:28:16:fd:65:3a:ed:
0d:c3:97:b0:81:50:3f:db:94:2b:2c:c8:b7:dc:20:7e:ca:01:
21:a1:c7:02:0c:8a:f5:3b:14:01:f1:26:72:80:5c:72:9a:fb:
ea:35:15:0b:f2:1a:84:51:ba:c7:b1:78:24:ad:c6:5a:aa:e2:
4a:10:ed:a2:0a:97:59:07:2a:da:01:52:54:af:18:3d:b2:dc:
73:3f:04:4d:c2:2f:a7:78:70:61:f4:3f:ec:ab:3c:8b:7e:63:
33:79:53:83:cd:c8:b5:ad:d8:ae:5a:be:56:4a:84:4c:ae:eb:
38:b2:5c:34:50:ac:b0:67:27:b9:4d:04:15:a1:b2:12:2a:ba:
5f:93:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:37:47 2024 by rpki-client on console-fra.rpki-client.org