Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/0865B3AAB90911ED97A2A4A8F1222468.roa
File: 0865B3AAB90911ED97A2A4A8F1222468.roa (raw, json)
Hash identifier: pdcXV4eLH/kKSfrIo7tx7o4UGrO2CmzeLDzg/+WYsSU=
Subject key identifier: 52:F2:12:64:25:87:F8:9F:08:C6:00:14:B0:C3:78:6E:14:97:49:6B
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 1B
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/0865B3AAB90911ED97A2A4A8F1222468.roa
Signing time: Thu 02 Mar 2023 14:46:37 +0000
ROA not before: Thu 02 Mar 2023 14:46:33 +0000
ROA not after: Fri 01 Mar 2030 14:46:33 +0000
asID: 33763
IP address blocks: 160.242.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:46:33 2023 GMT
Not After : Mar 1 14:46:33 2030 GMT
Subject: CN=6400b6cd-ba84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:08:ac:93:3b:fd:52:ea:35:8b:43:92:79:
b2:64:bb:5d:c3:90:db:57:8c:df:83:36:70:e1:10:
76:7d:83:b4:d1:68:50:4a:6d:b1:a7:a9:5d:1d:1c:
3c:2e:8f:fd:12:c3:04:ea:4b:7c:35:e3:35:87:d8:
77:5d:82:19:42:03:9f:45:8f:2b:45:91:0c:36:e0:
57:c6:1f:b2:96:14:11:00:b2:c4:24:16:8f:37:a4:
3c:15:8e:27:70:c7:c9:d0:d6:ff:21:f5:cd:e1:e9:
86:87:cb:b8:be:b0:f7:af:e8:d9:6f:c6:72:2f:f5:
6e:40:6e:4e:5e:3c:e9:06:68:a0:da:f3:4b:8d:3f:
df:72:0d:51:b2:5c:b3:81:20:e2:4d:34:d0:ef:e3:
9c:d6:e0:63:33:1b:10:03:4a:9e:b1:98:ea:9a:38:
24:79:48:d5:a0:f5:54:ac:43:6b:83:91:1e:81:ed:
ad:55:2f:fb:50:d2:1b:d0:07:d8:4f:df:9f:e2:a7:
09:95:79:65:2c:fd:a5:ab:bc:21:2c:a6:ed:37:ad:
1f:61:0e:a3:f7:4c:bf:9a:f6:7c:96:d0:69:6e:54:
89:ed:cd:c7:79:ea:3f:54:1c:3d:f4:cd:ee:9a:d2:
35:19:4a:46:b6:29:6f:d9:cb:4c:68:67:dc:b4:9c:
0a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F2:12:64:25:87:F8:9F:08:C6:00:14:B0:C3:78:6E:14:97:49:6B
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/0865B3AAB90911ED97A2A4A8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.64.0/20
Signature Algorithm: sha256WithRSAEncryption
90:51:2a:c2:af:22:77:45:db:2a:12:04:b0:b5:bb:76:9d:29:
f8:91:6f:ab:7f:3a:e6:db:29:99:de:65:5d:2a:c0:b8:b2:ad:
d2:b1:50:bd:52:66:43:d7:8a:6d:a6:a1:2d:2e:63:4d:98:e0:
26:e9:7d:0e:68:9d:b4:da:eb:ce:86:78:04:24:99:91:ed:26:
f9:a7:92:15:02:83:42:c1:05:1a:d3:15:4e:a3:e2:a4:6c:69:
58:92:7e:af:03:a4:bc:13:12:d8:27:bb:57:f8:c3:d7:a2:f7:
c8:77:6c:45:4a:1e:6e:f6:5c:e3:f5:dd:ba:a1:42:38:fc:b2:
59:07:89:3a:da:0e:64:c7:53:48:e9:70:53:9b:3d:00:54:1d:
22:78:2e:66:be:c6:66:c4:2f:b9:66:f9:1b:43:f0:aa:17:c3:
13:e6:f2:30:c6:95:5e:52:41:47:11:d8:31:ff:fd:4e:02:cb:
40:ab:4d:aa:13:9a:24:43:c8:04:53:08:a3:09:38:c3:8f:9e:
1a:d4:41:04:2f:81:17:09:4b:27:97:ef:76:2a:4e:60:31:f0:
ee:de:44:87:9a:36:43:b2:82:ea:b4:3c:e4:c1:16:b9:8d:cb:
c4:15:8f:60:85:ac:c6:a3:f9:38:5a:68:89:e6:35:03:60:54:
c7:4e:f5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org