Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/BDBEE206B90611EDA2D90EA2F1222468.roa
File: BDBEE206B90611EDA2D90EA2F1222468.roa (raw, json)
Hash identifier: RwYDsP8oUi5D60UunyJRJ4NBv+mub9g/n60P1c16VCc=
Subject key identifier: 28:01:2B:5F:8E:8C:95:60:A7:4F:70:E5:9F:8F:88:3A:EC:D1:40:E1
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 09
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/BDBEE206B90611EDA2D90EA2F1222468.roa
Signing time: Thu 02 Mar 2023 14:30:12 +0000
ROA not before: Thu 02 Mar 2023 14:30:09 +0000
ROA not after: Fri 01 Mar 2030 14:30:09 +0000
asID: 33763
IP address blocks: 160.242.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:30:09 2023 GMT
Not After : Mar 1 14:30:09 2030 GMT
Subject: CN=6400b2f4-e32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:c4:6a:4d:5f:6e:a3:93:66:46:64:ce:89:
3d:ba:f8:98:11:49:0d:17:d2:f9:4d:a9:46:b2:1e:
0b:82:ab:4c:e2:a1:19:37:e3:ec:27:c7:bb:38:39:
37:cf:b9:45:76:05:2e:90:10:6f:29:a1:08:2e:27:
31:a5:40:64:70:fc:1f:07:c1:aa:7d:e9:64:52:fc:
7e:0f:71:e5:32:02:46:5f:a4:d7:0d:c9:09:0c:56:
ba:31:89:23:d6:ba:4b:8b:50:3e:57:3b:87:81:02:
c9:ed:fd:42:ab:a8:74:15:4c:0d:5f:95:03:69:61:
33:3d:18:ed:c7:57:e3:f7:69:94:bd:f8:eb:90:07:
2f:b8:de:c9:6d:45:b4:b2:0c:dd:6b:dd:e1:69:91:
d0:f8:17:f3:26:f8:32:35:f0:87:2e:3a:81:e9:64:
47:6b:c0:3a:4d:70:68:48:b3:d5:da:47:92:b6:c6:
65:d2:b6:5c:2c:26:5e:6c:30:fd:4d:c7:e6:c5:4e:
d6:3e:1d:cb:f8:80:31:30:25:2e:bb:52:22:77:1b:
1d:92:1f:fa:4f:5a:fb:75:6a:60:77:fa:f9:2e:b4:
d5:41:ca:1a:97:d7:ca:5d:35:92:fc:d0:37:01:00:
36:25:bf:cd:94:b5:86:39:05:4b:64:57:a5:f6:fa:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:2B:5F:8E:8C:95:60:A7:4F:70:E5:9F:8F:88:3A:EC:D1:40:E1
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/BDBEE206B90611EDA2D90EA2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.16.0/21
Signature Algorithm: sha256WithRSAEncryption
06:8b:2e:8f:c0:b4:09:a0:d9:83:14:53:c0:26:62:66:2d:d3:
d3:41:59:f2:f8:55:63:a4:b9:5e:87:46:a3:1e:75:c3:fa:84:
91:29:de:17:ee:b7:27:47:d0:52:7d:40:40:86:0f:a4:55:b3:
51:f3:e8:a8:db:cd:8c:55:8e:32:af:83:70:a9:da:02:61:e1:
ae:f5:c1:3a:b7:9f:a8:05:97:8f:5d:a1:6a:4e:cc:f6:2e:9c:
f0:d9:57:da:a2:24:0a:26:95:9d:99:dd:ea:66:69:7f:6f:22:
e7:98:eb:9f:d3:70:84:a3:a7:52:59:08:25:60:ee:9b:51:b5:
bb:51:07:de:71:c1:23:9c:c6:94:70:bb:06:9d:e2:c8:5e:fb:
bb:72:c9:a5:bf:ec:f2:aa:32:d7:20:4b:e5:05:21:81:a4:ae:
20:e5:00:79:80:b2:1b:a2:d8:4f:91:69:b9:97:18:d2:63:ff:
26:05:a8:a5:c5:2a:fe:92:bb:b3:87:30:f0:60:4d:33:54:c9:
f5:ed:5d:d8:27:20:03:4e:7c:e4:9b:26:b8:1e:b2:b0:4f:a9:
01:99:fe:26:6b:04:95:05:92:ca:fa:77:51:a8:51:05:2d:44:
d5:1a:55:7d:71:aa:93:99:95:34:21:d6:95:0d:ab:bd:ce:4a:
67:40:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:32 2024 by rpki-client on console-fra.rpki-client.org