Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/167339ECB90711EDBA63E8A2F1222468.roa
File: 167339ECB90711EDBA63E8A2F1222468.roa (raw, json)
Hash identifier: P6GYbIzzDRnYG9vPerasAeKE8Sl8/Wi2snWy1lcXWII=
Subject key identifier: FC:11:98:6C:F8:D6:BC:94:A8:23:9E:84:02:59:CF:2A:FE:7E:06:7F
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 0D
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/167339ECB90711EDBA63E8A2F1222468.roa
Signing time: Thu 02 Mar 2023 14:32:41 +0000
ROA not before: Thu 02 Mar 2023 14:32:38 +0000
ROA not after: Mon 02 Mar 2026 14:32:38 +0000
asID: 33763
IP address blocks: 160.242.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:32:38 2023 GMT
Not After : Mar 2 14:32:38 2026 GMT
Subject: CN=6400b389-384c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:aa:b6:3e:a5:eb:4f:37:7b:24:ec:ac:ea:
d5:b7:99:db:ff:f6:b0:fe:29:a2:9f:be:69:e8:03:
a9:8f:49:08:9a:a4:1f:15:98:10:6a:62:df:b8:cb:
03:75:9e:c0:88:68:09:74:9d:7e:d1:ff:5d:8d:4f:
02:8a:69:90:30:3b:2b:1f:15:cc:40:17:ad:e5:2c:
07:34:46:ba:d1:6d:bc:a8:01:18:d7:7c:60:25:29:
0b:72:89:b5:1c:51:9a:b2:d0:d3:c2:83:e5:f3:98:
eb:e0:44:e0:57:34:ab:ff:d5:f2:de:89:a4:d4:7d:
2a:5b:fb:64:2d:f5:7a:6b:57:e3:3e:b5:23:3c:98:
a7:94:4e:6c:1c:c6:5c:db:a3:85:d0:87:b9:11:7d:
98:c6:9c:8d:3e:29:ba:20:dc:e7:e9:6e:ed:ee:21:
d4:7a:ee:64:17:fb:ca:ef:cf:32:42:80:81:b9:3f:
2b:75:be:97:3b:f2:51:57:41:0c:33:c3:c1:16:0d:
66:ed:f8:8e:11:6d:ff:5d:19:fa:f7:bc:e1:5e:13:
4b:d8:5d:aa:79:54:a8:67:bb:d2:3a:11:9b:58:7b:
10:95:3b:9f:a3:6b:52:22:97:ca:e8:04:0e:89:44:
04:53:3d:ca:4e:3b:75:83:27:af:37:2a:8b:6e:09:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:11:98:6C:F8:D6:BC:94:A8:23:9E:84:02:59:CF:2A:FE:7E:06:7F
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/167339ECB90711EDBA63E8A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.28.0/24
Signature Algorithm: sha256WithRSAEncryption
94:dd:b2:f4:7b:88:f0:b6:c9:6a:ae:18:b7:ab:1a:da:0b:35:
40:0b:69:05:a1:fd:53:77:c8:9a:95:fa:42:66:20:7f:b0:4b:
9e:1f:80:6c:66:95:f3:07:b6:7b:de:3e:f5:65:62:98:dd:8a:
25:a6:a4:19:d9:ae:a8:df:d8:c1:31:cf:51:5d:5e:5a:9e:78:
fb:21:e2:21:3b:78:91:f1:8f:0c:48:fd:30:65:97:89:d9:b7:
c3:7b:fc:f9:98:93:07:74:3e:62:0c:9a:94:5c:ba:2b:7c:9b:
a4:0d:38:f2:3d:0d:76:7c:ff:c5:e9:4c:55:12:e9:3f:48:2e:
94:63:c9:13:ef:e0:25:58:30:57:65:61:33:d9:47:f2:3a:08:
90:53:25:c1:f8:69:84:05:d2:cf:25:77:c9:3b:97:a9:ed:85:
d5:37:76:6b:a7:01:a7:63:0c:bd:30:de:6b:dd:e9:e7:2b:83:
21:c5:62:e3:ff:2f:9a:35:e8:96:3e:7b:bc:14:97:fc:8b:c3:
fa:82:10:57:19:3d:da:3b:b0:41:05:82:b9:3f:fa:4e:54:37:
e9:2e:2f:9d:58:0b:38:da:a2:c5:3d:62:58:43:27:dc:9e:5c:
48:c9:85:0d:f1:51:bc:0d:8a:47:ae:71:d8:85:7c:4b:6b:98:
9d:82:5a:b6
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBDTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzY4
ODZCM0FSMTEwLwYDVQQFEyhEOUMwQjIzM0FDQjA2MzU0MzU3NEQzRjVGMzI3QkVC
OEIyQjk5MTE4MB4XDTIzMDMwMjE0MzIzOFoXDTI2MDMwMjE0MzIzOFowGDEWMBQG
A1UEAwwNNjQwMGIzODktMzg0YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDRqrY+petPN3sk7Kzq1beZ2//2sP4pop++aegDqY9JCJqkHxWYEGpi37jL
A3WewIhoCXSdftH/XY1PAoppkDA7Kx8VzEAXreUsBzRGutFtvKgBGNd8YCUpC3KJ
tRxRmrLQ08KD5fOY6+BE4Fc0q//V8t6JpNR9Klv7ZC31emtX4z61IzyYp5RObBzG
XNujhdCHuRF9mMacjT4puiDc5+lu7e4h1HruZBf7yu/PMkKAgbk/K3W+lzvyUVdB
DDPDwRYNZu34jhFt/10Z+ve84V4TS9hdqnlUqGe70joRm1h7EJU7n6NrUiKXyugE
DolEBFM9yk47dYMnrzcqi24JGekCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBT8EZhs
+Na8lKgjnoQCWc8q/n4GfzAfBgNVHSMEGDAWgBTZwLIzrLBjVDV00/XzJ764srmR
GDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODg2QjMvNUE0MTFGOUVCOEVGMTFFREE1QjA5RERBRjEyMjI0NjgvMmNDeU02
eXdZMVExZE5QMTh5ZS11TEs1a1JnLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
MmNDeU02eXdZMVExZE5QMTh5ZS11TEs1a1JnLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODg2QjMvNUE0MTFGOUVCOEVGMTFFREE1QjA5RERBRjEyMjI0
NjgvMTY3MzM5RUNCOTA3MTFFREJBNjNFOEEyRjEyMjI0Njgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKDyHDANBgkqhkiG9w0BAQsFAAOC
AQEAlN2y9HuI8LbJaq4Yt6sa2gs1QAtpBaH9U3fImpX6QmYgf7BLnh+AbGaV8we2
e94+9WVimN2KJaakGdmuqN/YwTHPUV1eWp54+yHiITt4kfGPDEj9MGWXidm3w3v8
+ZiTB3Q+YgyalFy6K3ybpA048j0Ndnz/xelMVRLpP0gulGPJE+/gJVgwV2VhM9lH
8joIkFMlwfhphAXSzyV3yTuXqe2F1Td2a6cBp2MMvTDea93p5yuDIcVi4/8vmjXo
lj57vBSX/IvD+oIQVxk92juwQQWCuT/6TlQ36S4vnVgLONqixT1iWEMn3J5cSMmF
DfFRvA2KR65x2IV8S2uYnYJatg==
-----END CERTIFICATE-----
Generated at Sat May 18 04:03:40 2024 by rpki-client on console-ams.rpki-client.org