Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/97E367AE8E6611EB8103A46CF8AEA228.roa
File: 97E367AE8E6611EB8103A46CF8AEA228.roa (raw, json)
Hash identifier: e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=
Subject key identifier: 23:85:6D:01:07:BB:6E:1E:56:D1:26:BF:81:84:01:4F:61:9B:2A:6B
Certificate issuer: /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial: 025F
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Authority info access: rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/97E367AE8E6611EB8103A46CF8AEA228.roa
Signing time: Fri 26 Mar 2021 19:08:05 +0000
ROA not before: Fri 26 Mar 2021 19:08:01 +0000
ROA not after: Mon 31 Mar 2031 19:08:01 +0000
asID: 715
IP address blocks: 160.0.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Validity
Not Before: Mar 26 19:08:01 2021 GMT
Not After : Mar 31 19:08:01 2031 GMT
Subject: CN=605e3115-06a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:6c:6b:81:0d:e2:56:cc:14:af:45:25:38:
cc:d9:c1:13:eb:61:bd:7c:28:b4:79:f7:c1:ec:ea:
1b:14:0e:0c:5e:44:49:bb:53:6a:79:33:da:7c:e9:
b7:ae:75:f9:8d:e0:f1:3f:af:77:8a:a0:f5:5f:ac:
47:6c:ce:ea:6e:2b:61:3f:e4:d5:92:fe:f2:53:98:
fc:28:37:60:70:03:59:db:7f:72:71:74:04:58:c8:
32:03:dd:18:48:0a:2b:9f:ff:97:aa:99:76:1f:cf:
9f:1a:91:eb:4f:ef:ea:8c:2a:dc:d8:3d:1e:b3:3d:
4b:7f:31:74:6c:4e:7b:c6:ca:77:cf:01:b5:82:25:
94:16:3a:7a:61:34:cc:91:36:be:43:49:e0:e7:9d:
06:eb:ca:3b:af:4e:45:dc:ab:54:ac:5a:9d:dc:0b:
87:e4:4f:ca:d6:ac:66:d8:14:bd:52:06:31:02:f7:
85:d7:24:35:b7:6d:44:03:ec:b6:93:8b:d5:2e:e8:
e4:cb:b4:3a:1f:8b:7b:15:62:ec:99:d4:2a:d7:54:
49:c1:5b:35:a7:a4:8e:2a:bf:9c:71:9a:07:b8:13:
93:32:fb:5e:48:6a:4c:1e:7e:99:42:0e:c4:42:75:
4f:34:01:dc:0a:00:4b:a5:b0:33:0f:a4:bf:1c:e9:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:85:6D:01:07:BB:6E:1E:56:D1:26:BF:81:84:01:4F:61:9B:2A:6B
X509v3 Authority Key Identifier:
keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/97E367AE8E6611EB8103A46CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.0.0.0/17
Signature Algorithm: sha256WithRSAEncryption
44:30:31:bb:5a:34:af:bd:98:4f:d0:01:31:c7:fc:61:a5:d8:
a2:b8:d1:87:ca:d2:04:0a:60:33:30:be:92:de:ef:bc:26:54:
ab:50:22:b7:68:8a:c9:9d:68:25:1c:20:d8:86:9c:35:37:77:
95:2f:dd:c6:2e:e0:76:a5:b8:f8:67:c2:67:c2:17:81:3e:6f:
87:dc:1d:ac:cf:5e:8f:b7:60:1d:a7:a0:e4:dc:de:09:7a:da:
27:82:92:5e:ea:28:cf:38:df:13:dc:21:79:8b:26:f8:de:3d:
d4:f2:8f:84:22:9e:6e:9b:db:e4:9c:2d:79:db:34:09:ec:63:
aa:2f:7c:25:bb:f0:80:d1:3d:38:c4:f6:d2:32:11:9d:2a:3a:
86:0f:07:dd:e6:e0:59:e5:9b:d7:ef:02:44:83:f6:e9:3d:6c:
f9:cd:f4:a9:23:3e:79:d1:31:bf:0d:99:71:d5:3c:98:f3:da:
d1:27:24:9b:6e:2d:1f:18:88:f7:e9:ed:e3:d5:a7:4f:28:35:
94:ca:20:e1:79:9e:fd:7a:1d:b1:0d:8e:06:56:20:e6:ca:cb:
c5:e0:93:19:50:16:c4:a0:80:f3:29:f0:fc:58:d4:c7:7b:24:
c3:fc:e2:aa:c7:e3:8b:97:a0:db:ff:9f:48:ab:fd:29:36:69:
b0:ea:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:47 2024 by rpki-client on console-ams.rpki-client.org