Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/FF59C6FE920711EB9764327EF8AEA228.roa
File: FF59C6FE920711EB9764327EF8AEA228.roa (raw, json)
Hash identifier: m00VuV/UGo/Jyjht1M+fRJLYF5Gu/BqwUDYsWsaEQIQ=
Subject key identifier: C9:53:D6:74:66:F2:9F:17:62:DE:6F:D9:CD:A0:C3:C8:20:E9:EB:6D
Certificate issuer: /CN=F367D68CAR/serialNumber=598DA01DE4E9CD5474AD0A6826625BE6B808F0AB
Certificate serial: 04
Authority key identifier: 59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/FF59C6FE920711EB9764327EF8AEA228.roa
Signing time: Wed 31 Mar 2021 10:01:01 +0000
ROA not before: Wed 31 Mar 2021 10:00:57 +0000
ROA not after: Tue 31 Mar 2026 10:00:57 +0000
asID: 327859
IP address blocks: 169.255.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl
rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367D68CAR/serialNumber=598DA01DE4E9CD5474AD0A6826625BE6B808F0AB
Validity
Not Before: Mar 31 10:00:57 2021 GMT
Not After : Mar 31 10:00:57 2026 GMT
Subject: CN=6064485d-bafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:13:42:c4:d0:e7:5b:bd:25:a3:bc:4d:c1:
80:3e:c4:68:59:3c:d4:50:6f:8d:1c:8b:35:b5:86:
65:2f:8f:f0:2b:4b:c6:2a:56:3f:73:c2:4e:62:3c:
09:b8:9a:7f:d2:aa:ad:fa:00:30:13:ee:31:5b:16:
da:cf:f7:f4:2b:8d:14:9d:c3:49:dc:ed:eb:e2:97:
7b:6f:46:21:8b:2f:d1:09:4c:36:5e:c2:38:f6:b8:
e4:2f:18:30:30:1a:55:e7:3a:67:d8:a8:19:07:7b:
48:cb:69:b1:df:95:bb:81:49:36:1d:7e:55:dd:a6:
ec:39:db:7f:9c:84:2d:29:6b:2b:46:5f:3f:d4:4f:
97:85:4c:09:ae:72:f2:dc:14:f0:e1:4f:68:49:58:
10:2c:ce:42:19:49:89:54:f5:00:14:83:f7:a5:c8:
34:6b:50:be:e1:90:d3:01:24:52:13:b9:6f:15:35:
ad:0e:85:f9:2f:1c:0e:58:b4:70:da:a7:23:2e:43:
d0:a0:c9:97:f4:24:27:c5:1f:ed:35:6d:b1:ce:0f:
91:01:34:61:a4:5a:ca:29:8e:da:f5:6f:55:08:10:
83:e2:d0:af:17:18:d3:b1:1e:4f:79:b8:86:58:cd:
3d:1a:1e:37:5c:c9:c5:26:7d:f4:00:31:3a:5d:5c:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:53:D6:74:66:F2:9F:17:62:DE:6F:D9:CD:A0:C3:C8:20:E9:EB:6D
X509v3 Authority Key Identifier:
keyid:59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/FF59C6FE920711EB9764327EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:d7:55:4a:a4:4a:ad:7a:29:38:78:11:ad:71:7c:0e:57:91:
e7:22:7a:da:69:63:3a:13:16:40:ca:83:b5:f7:7c:8c:17:c3:
94:16:e9:f0:dd:85:c8:91:f3:9d:94:ca:f3:3b:51:f9:a4:49:
63:7d:ee:c7:70:0f:26:22:03:60:d8:7f:16:fe:18:a0:23:ae:
fc:e2:fc:96:bc:51:7d:e0:38:a1:96:8a:66:f1:ab:e9:29:db:
77:ed:06:12:8e:57:7f:db:97:fd:24:1e:0f:c4:b0:b3:06:20:
84:48:0c:79:67:44:b8:25:44:f6:0c:7d:46:a1:59:fb:08:0d:
25:f2:f1:25:d5:34:0a:95:7a:c2:1d:94:ac:ad:5e:ba:2d:20:
10:18:0b:9f:41:53:43:8d:fb:4b:9f:c0:10:5c:6c:d7:df:cb:
8b:52:f1:a0:61:b6:42:b9:f3:88:ea:56:be:63:22:53:75:2e:
e9:08:e1:b1:04:38:a0:99:11:3d:9d:ed:41:89:9e:d6:c4:71:
0b:61:aa:50:3f:ca:88:44:10:bd:b1:47:82:2c:40:da:fb:c5:
2a:de:35:1a:5e:bc:a7:5f:4b:ec:ac:cd:08:1e:44:e6:aa:8b:
88:ee:07:8d:bb:da:f6:bb:c8:f2:0e:10:6b:b1:20:8d:84:bf:
e7:af:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:34 2024 by rpki-client on console-fra.rpki-client.org