Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/93BA6A5CB91011EDB8B1D6BEF1222468.roa
File: 93BA6A5CB91011EDB8B1D6BEF1222468.roa (raw, json)
Hash identifier: YGRgzaAb/YnXWVOOBNYrhEjo30QCRb8Fkzjl0qt2wDc=
Subject key identifier: 13:46:E4:17:B7:93:33:09:87:07:B4:47:70:DC:4F:7D:D7:C0:43:2C
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 33
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/93BA6A5CB91011EDB8B1D6BEF1222468.roa
Signing time: Thu 02 Mar 2023 15:40:37 +0000
ROA not before: Thu 02 Mar 2023 15:40:33 +0000
ROA not after: Mon 02 Mar 2026 15:40:33 +0000
asID: 29286
IP address blocks: 160.242.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 15:40:33 2023 GMT
Not After : Mar 2 15:40:33 2026 GMT
Subject: CN=6400c375-c6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:a1:5f:03:59:0e:0b:7a:b9:0a:a7:d4:26:
07:31:63:28:1a:16:ce:20:a6:47:fe:c8:b7:46:76:
40:13:f0:a6:49:71:33:1c:92:5a:2f:59:47:64:6e:
b7:1d:fa:c3:38:b6:b5:5e:eb:bc:c9:b2:e5:05:59:
4c:70:c9:89:ef:97:0d:77:8b:1f:60:92:1e:0a:d8:
3d:b7:72:a0:90:7d:71:27:36:b3:7d:80:ce:ad:bd:
1d:c5:0d:95:c4:58:a0:2c:38:7b:36:bb:fd:92:e4:
e2:a6:9f:f7:87:02:4a:18:97:67:d8:8d:61:2f:95:
23:88:e7:81:c1:36:55:0e:ff:d3:24:04:2a:c7:8b:
e7:2e:77:d4:51:9d:ba:70:d7:5e:6d:5b:62:9d:42:
99:1e:6f:ad:89:85:22:e1:49:eb:12:a6:2f:20:2d:
f5:02:de:29:1a:90:b7:e3:de:a3:56:03:25:9e:e1:
ed:c5:63:6e:2c:d9:45:8c:71:07:65:a1:21:d8:f0:
23:3d:9b:48:73:36:98:0e:24:d1:69:18:00:2f:e4:
b0:af:79:c0:24:4b:53:c0:2e:19:3a:59:fb:e1:ab:
20:18:93:d9:57:1b:09:be:8e:40:3e:a2:7b:19:92:
70:2b:e6:46:e7:ad:92:1f:4a:44:b2:5b:9a:ec:ea:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:E4:17:B7:93:33:09:87:07:B4:47:70:DC:4F:7D:D7:C0:43:2C
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/93BA6A5CB91011EDB8B1D6BEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.111.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ea:66:34:a5:0f:b5:e0:b9:fc:d6:96:6b:57:50:c2:c1:6d:
ee:40:97:69:02:01:5a:91:01:07:b5:c2:18:e2:d6:c2:23:b9:
ac:ea:05:aa:b3:54:a5:cc:ae:53:65:a6:6f:94:e7:bf:2b:2a:
75:a9:08:ee:ed:ce:49:eb:14:6f:7a:95:df:c8:14:9b:ff:28:
e7:6e:5e:15:25:40:9d:9f:bc:bb:ca:27:ff:3e:40:ec:28:0b:
a0:a6:5f:7c:85:aa:68:c6:fa:63:99:97:10:a0:63:9b:21:ea:
ef:0f:73:0f:54:c4:d7:36:4f:eb:22:6f:e9:69:a3:05:ca:c4:
c2:57:f4:19:8f:98:f6:dd:15:d0:97:bd:7e:fb:6a:de:3a:b4:
0e:7e:b9:1b:92:6f:1b:f1:1f:88:63:00:09:ae:4c:ee:a2:2e:
d3:ed:7d:a8:e9:00:ae:51:17:59:44:ad:09:2f:c7:24:43:67:
d7:62:6a:f2:73:03:48:d2:c0:15:33:28:0e:18:17:aa:d8:31:
61:d7:b9:0a:44:09:39:29:12:91:04:3f:99:8b:6d:98:80:40:
5c:17:a2:27:05:2b:27:8d:56:8d:69:72:5b:39:48:4c:84:53:
07:fe:67:85:3a:11:07:b0:69:09:98:20:14:31:ce:8e:01:83:
5a:6e:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:47:38 2024 by rpki-client on console-fra.rpki-client.org