Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/0C8DE5D04FC511EE980D7F164AD9E6FC.roa
File: 0C8DE5D04FC511EE980D7F164AD9E6FC.roa (raw, json)
Hash identifier: sboLQWOdsfngWR3FIp/k7CaTYwMhhstu8x5+Uywb2Lw=
Subject key identifier: EC:6B:04:4D:28:D9:C9:B8:49:9E:6A:79:7B:2B:08:85:77:B9:69:B7
Certificate issuer: /CN=F367D0C5AR/serialNumber=6C17A00CE7A5EE9B7072DA0B8CD628213074D001
Certificate serial: EB
Authority key identifier: 6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01
Authority info access: rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/0C8DE5D04FC511EE980D7F164AD9E6FC.roa
Signing time: Sun 10 Sep 2023 10:30:23 +0000
ROA not before: Sun 10 Sep 2023 10:30:19 +0000
ROA not after: Thu 10 Sep 2026 10:30:19 +0000
asID: 37284
IP address blocks: 165.16.0.0/17 maxlen: 27
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl
rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367D0C5AR/serialNumber=6C17A00CE7A5EE9B7072DA0B8CD628213074D001
Validity
Not Before: Sep 10 10:30:19 2023 GMT
Not After : Sep 10 10:30:19 2026 GMT
Subject: CN=64fd9abf-a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d9:e7:6c:97:10:e3:e2:fb:0d:9c:5e:4e:8b:
bc:ec:dd:03:5e:a0:27:5a:80:a1:c6:c1:36:3d:82:
38:ed:af:c2:1d:3e:3f:ff:5c:c9:eb:95:b9:0d:25:
fc:0e:90:2b:18:de:36:8e:7d:75:b8:9d:90:97:00:
44:dc:52:a5:17:dc:39:7d:6f:dd:0f:05:e9:88:db:
c0:c6:c4:60:f2:37:ff:8c:3e:5f:ae:be:bd:83:ec:
05:06:2b:64:7a:c5:12:94:55:d9:56:d2:40:48:3c:
9c:cf:16:84:69:7c:bc:57:2f:45:19:35:7d:f5:ae:
89:69:fb:7a:31:72:b0:4c:b8:55:85:c0:f9:f7:f6:
3e:61:7b:65:5b:c9:7d:2b:bf:40:b9:39:52:1f:7f:
2d:55:3b:92:a9:cf:63:aa:3c:88:54:46:55:97:44:
1a:54:51:12:f8:56:b1:3e:eb:69:a5:e7:27:7b:fb:
4a:65:d7:22:f9:c3:fb:97:e3:93:e4:a4:3c:b4:f1:
78:f1:06:a5:1f:bc:9c:30:16:23:7e:bd:4b:cd:9f:
4d:26:b2:c4:1c:30:0d:0d:1c:77:6a:52:de:ee:37:
97:9c:d4:28:73:d4:d9:a5:44:fe:2f:ca:ca:a6:6b:
53:c2:bd:dc:14:7b:e7:22:b0:e9:f3:4f:96:eb:c3:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:04:4D:28:D9:C9:B8:49:9E:6A:79:7B:2B:08:85:77:B9:69:B7
X509v3 Authority Key Identifier:
keyid:6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/0C8DE5D04FC511EE980D7F164AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.16.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4a:03:c1:17:75:07:2f:2b:5c:93:2e:59:09:30:36:e5:96:31:
ea:ca:13:54:cc:81:25:bf:a5:cc:b5:b9:7b:9c:73:08:a1:9a:
c0:8a:e5:24:89:40:61:07:9f:fb:47:d7:69:7f:0a:03:e3:9e:
d0:85:d3:93:8f:14:99:e9:19:24:67:19:10:aa:34:08:e0:6d:
08:d3:de:64:a4:40:d4:38:9d:72:85:a0:1a:23:55:4f:ec:09:
7f:b6:80:dd:f7:0a:e8:c7:cc:0b:61:20:42:b7:1b:ac:25:ad:
e4:53:1e:89:3a:59:68:d0:03:6e:f1:f8:57:ff:67:ec:7f:26:
84:41:56:94:ab:a6:b9:81:7b:7a:a9:f3:dc:00:66:c2:1e:32:
fb:46:28:a7:39:f9:3f:3b:ee:42:1d:c6:5b:21:2d:dc:8b:ea:
51:a0:22:3a:a7:0d:b8:07:68:e6:b2:92:b5:ec:02:38:56:98:
8e:5a:73:51:3e:9e:0a:7b:c1:5f:01:da:50:aa:b4:06:ae:d0:
ea:c4:38:41:a7:d1:81:f8:dc:20:16:a0:cd:40:7c:09:80:c1:
92:54:1c:95:de:8d:90:3a:cf:11:a9:cc:34:97:71:a5:c4:1f:
79:7a:da:92:6f:32:2f:07:91:1e:59:92:34:12:54:55:bf:83:
23:47:b3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org