Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/9E593C109B6F11EBAD7A975FF8AEA228.roa
File: 9E593C109B6F11EBAD7A975FF8AEA228.roa (raw, json)
Hash identifier: xET6XUHCDmCqH38ucd3N48zFFOtJqzDtFTRniETpe74=
Subject key identifier: A1:D9:62:86:B3:88:60:9A:3F:5B:4E:16:FB:38:6A:DE:9A:A8:69:1E
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 58
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/9E593C109B6F11EBAD7A975FF8AEA228.roa
Signing time: Mon 12 Apr 2021 09:15:27 +0000
ROA not before: Mon 12 Apr 2021 09:15:21 +0000
ROA not after: Wed 30 Apr 2031 09:15:21 +0000
asID: 3741
IP address blocks: 168.142.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Apr 12 09:15:21 2021 GMT
Not After : Apr 30 09:15:21 2031 GMT
Subject: CN=60740fae-c197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:17:7a:3c:32:1c:b7:87:d3:10:2d:24:b6:db:
e0:b2:e2:d0:19:b3:60:99:c6:f5:67:b5:70:93:a4:
c0:91:ba:8a:76:3a:3f:d9:6e:3f:26:26:6c:92:87:
eb:c6:5a:7c:93:13:5d:1c:e2:80:53:84:38:fc:21:
c4:44:39:86:37:67:5d:e8:15:45:3a:ff:20:34:81:
c9:09:59:69:f9:80:7a:46:1b:9a:15:0e:36:f8:43:
ec:34:20:6a:37:76:a7:d8:4b:3c:0a:0d:b9:aa:74:
c5:03:f3:95:81:64:3e:5e:92:13:37:26:c4:9c:55:
a2:35:00:db:72:c0:e8:61:fa:7a:fc:16:f4:68:f5:
24:20:88:cd:5d:22:4a:71:b8:a3:d9:21:40:38:13:
ae:ea:42:66:68:79:63:7c:8d:d4:e8:20:6d:64:c0:
99:ac:13:ff:4b:20:34:14:ae:a6:88:43:08:24:13:
85:0c:cb:e8:5c:b5:38:e2:a6:af:77:52:56:8b:56:
e7:5d:1c:e0:73:26:ab:ba:03:fc:17:24:4c:24:15:
cb:25:59:f2:eb:15:91:54:98:7e:ab:a5:28:0f:06:
e3:9b:9f:25:90:b1:73:bc:5f:62:f0:9f:58:15:2f:
ca:f9:06:03:ca:34:71:3f:0b:f6:d3:b2:b8:57:41:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D9:62:86:B3:88:60:9A:3F:5B:4E:16:FB:38:6A:DE:9A:A8:69:1E
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/9E593C109B6F11EBAD7A975FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.142.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:7b:7c:8f:0a:9a:05:1e:f2:15:e3:37:e5:c7:6d:6c:6b:75:
93:9a:da:82:f7:01:dc:b6:2f:7e:ea:d5:41:0f:97:ec:b4:64:
3f:71:da:90:24:01:32:e5:a3:b7:2e:03:1a:c4:05:4b:a5:2d:
d9:ac:d8:e1:c7:13:dc:11:44:39:88:13:5b:6d:56:43:5a:97:
e1:b4:da:fe:2b:92:dd:e6:68:ce:e3:44:01:fd:0d:c4:6d:32:
71:8f:d9:04:e5:46:81:91:26:1b:65:96:a6:12:21:a6:88:57:
d4:38:f7:47:e0:4c:bb:9e:87:e0:10:d7:32:71:56:a8:57:68:
55:df:dc:1c:1a:42:e0:d7:85:4b:79:57:d9:44:7d:83:1b:a9:
fa:4a:5d:52:e1:76:33:e3:8b:46:59:2d:5e:4f:39:2b:a3:03:
99:0b:9b:e5:39:41:86:2f:7b:87:0c:85:02:f1:5e:70:b3:09:
f3:60:02:2d:e3:b1:e4:4b:28:a1:d4:cb:4e:49:e0:eb:26:3e:
30:f8:b7:79:80:64:18:82:73:31:f3:7b:f2:8e:f9:5f:f4:79:
0c:ad:b5:f3:e9:a5:6f:05:79:9f:aa:c6:69:f0:9f:72:b0:5d:
9a:b3:58:26:38:6d:26:5a:60:80:32:76:dd:67:e2:20:0d:39:
e6:09:c4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:48 2024 by rpki-client on console-fra.rpki-client.org