Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/80FB063EB90A11EDAC5617ADF1222468.roa
File: 80FB063EB90A11EDAC5617ADF1222468.roa (raw, json)
Hash identifier: tcO5PBtvjVtzT9CotWVqRB4g/7fT/bhyCK302/ETGn4=
Subject key identifier: B3:A5:18:E1:EA:D8:17:7D:BC:40:7E:98:58:98:D4:B9:AA:BB:0B:1C
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 2B
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/80FB063EB90A11EDAC5617ADF1222468.roa
Signing time: Thu 02 Mar 2023 14:57:08 +0000
ROA not before: Thu 02 Mar 2023 14:57:05 +0000
ROA not after: Mon 02 Mar 2026 14:57:05 +0000
asID: 33763
IP address blocks: 160.242.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:57:05 2023 GMT
Not After : Mar 2 14:57:05 2026 GMT
Subject: CN=6400b944-388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:2d:82:a2:bc:39:3c:d2:0e:3b:28:fe:4e:cb:
24:58:d3:e6:69:19:0e:de:52:c4:1d:60:0d:8b:3f:
51:52:47:6a:e4:e5:ae:ed:f5:a2:07:8b:2c:80:f5:
53:81:8b:12:0b:c1:76:b1:a8:b1:7f:ac:bd:ae:ae:
16:04:3c:22:84:df:c4:d4:1d:aa:ef:fd:01:f8:b0:
2c:6c:14:8e:54:fe:d3:64:b3:2f:a5:81:33:8b:fe:
6d:f2:e9:59:c7:5e:3c:f1:6f:cc:a6:2c:18:fe:97:
01:84:25:14:b4:b1:55:d9:b4:38:28:ba:ee:07:c3:
d7:10:96:20:1e:1e:61:12:be:7e:b7:f4:0c:72:48:
ac:18:70:a6:4f:72:1b:66:ab:63:1b:bc:43:be:e6:
aa:36:d4:73:c1:94:2f:c0:c7:db:1f:13:e8:ed:9d:
1c:20:90:f3:f9:cc:3c:a1:74:c3:82:33:92:12:7d:
a9:3b:3f:a9:66:55:7f:8e:d2:3e:e7:83:a8:f1:62:
05:f1:6c:b3:68:db:09:72:bf:0e:65:58:45:74:0a:
43:8c:93:89:1d:5c:32:69:93:f7:e9:11:82:d1:8a:
55:4c:c3:1d:7a:56:36:cf:66:6f:41:1e:6f:24:57:
96:6c:70:24:ea:90:39:05:50:71:db:8c:cf:ed:54:
ad:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:18:E1:EA:D8:17:7D:BC:40:7E:98:58:98:D4:B9:AA:BB:0B:1C
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/80FB063EB90A11EDAC5617ADF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.120.0/21
Signature Algorithm: sha256WithRSAEncryption
79:37:14:d3:5c:5b:ab:44:2a:0b:f6:19:ab:c3:23:54:09:d3:
46:d6:62:37:89:5d:4e:c0:37:b1:83:c9:22:a6:c4:3f:c8:b4:
20:52:28:b6:46:ed:d7:6e:40:84:f1:56:57:a4:2a:99:27:07:
30:7b:96:ac:5d:39:84:42:8b:87:9e:fc:3f:51:0e:08:38:7e:
03:80:37:0b:14:d6:a1:e1:1e:32:5c:17:98:08:56:ba:51:18:
0f:75:65:4d:4a:6a:88:77:58:5d:e0:17:fe:e2:81:03:c4:7e:
95:98:01:77:4c:89:8f:c2:53:eb:a2:43:27:d4:81:24:cb:5a:
8f:1e:d7:14:e2:64:ff:e1:8c:b5:f1:94:cb:41:30:3d:7c:bd:
9a:ba:9b:ec:27:92:5f:79:1f:f1:e8:e0:da:78:a8:9e:d8:9f:
54:f3:f9:8b:f5:27:22:50:01:36:ac:65:51:b5:14:16:41:36:
01:05:4b:a1:a2:32:fe:d8:13:e2:99:ef:b3:60:a9:9c:78:a6:
4a:d4:5e:9b:c5:68:bb:1b:b6:eb:d5:96:1d:f0:32:fd:ef:b5:
2f:f6:f6:c3:a7:10:db:6c:88:cb:41:7a:2b:a3:f7:30:20:53:
87:a2:8a:15:3e:c9:07:1b:e6:9f:21:9c:ed:68:df:7a:4e:a4:
5d:07:da:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org