Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/BF1A3F7CB90311ED89E10799F1222468.roa
File: BF1A3F7CB90311ED89E10799F1222468.roa (raw, json)
Hash identifier: rwAEgPmNu1oCkwCCMO8yD3xcFwvwFNOX5FgfPlQ3CKM=
Subject key identifier: 78:83:92:4C:06:4F:05:97:9E:A9:88:F1:E0:33:2C:64:B1:50:C0:15
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 05
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/BF1A3F7CB90311ED89E10799F1222468.roa
Signing time: Thu 02 Mar 2023 14:08:46 +0000
ROA not before: Thu 02 Mar 2023 14:08:42 +0000
ROA not after: Tue 03 Mar 2026 14:08:42 +0000
asID: 33763
IP address blocks: 160.242.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:08:42 2023 GMT
Not After : Mar 3 14:08:42 2026 GMT
Subject: CN=6400adee-9f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:91:40:fe:6d:4c:c0:5d:f5:7c:79:fe:0b:
07:6f:f0:e7:92:fb:33:0b:83:62:eb:1b:e9:89:3f:
35:45:3a:fa:6a:ec:0f:44:12:b4:2d:f2:7d:1c:58:
7b:de:03:33:58:6b:58:25:e8:48:76:b8:19:4d:42:
8f:a2:c0:71:b0:06:eb:79:2c:e3:a4:a9:3c:94:fd:
dd:c2:6e:a6:8f:66:5e:e7:2b:da:28:bc:79:5e:28:
31:78:f9:3c:28:ae:05:7b:33:3a:de:8d:6b:29:f0:
ab:38:9a:b1:16:15:c2:ef:9b:bf:3f:51:a5:77:6e:
59:9d:88:69:20:7d:f9:bf:8f:da:81:ad:3e:9b:e6:
19:bc:b5:2e:e5:6f:1f:1c:41:f5:86:00:8d:df:bc:
55:3b:5c:01:14:06:98:b6:fa:c1:cd:60:34:e6:34:
e7:de:65:f7:75:8e:b7:03:aa:4e:e3:ba:86:94:5c:
b4:72:15:29:43:a9:cf:c0:a7:68:bb:88:17:06:ac:
d3:c9:9a:64:5b:9c:98:4f:04:fa:88:98:d3:84:05:
ad:87:df:65:94:db:c0:ad:42:fb:3a:a1:e1:43:a7:
37:01:50:f0:42:11:27:81:fc:21:1f:9d:3e:f1:04:
97:18:bf:9a:b7:34:f8:c3:a3:a9:ba:0a:1a:6e:67:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:83:92:4C:06:4F:05:97:9E:A9:88:F1:E0:33:2C:64:B1:50:C0:15
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/BF1A3F7CB90311ED89E10799F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.30.0/24
Signature Algorithm: sha256WithRSAEncryption
41:67:e2:b7:ac:ff:cf:6f:14:e8:08:85:34:02:a8:90:a0:85:
c0:1e:92:32:27:2d:80:85:d1:76:1a:e6:c2:89:3f:22:d4:27:
8d:50:00:50:6b:b8:b3:82:f3:55:f7:2a:fc:92:a1:bb:27:47:
7a:9b:07:5a:2b:03:2a:86:7c:6b:cd:d0:64:4f:44:7e:04:2f:
c0:97:f5:00:ce:f4:ba:4c:9f:cc:6a:61:b9:94:8f:5f:e6:0f:
a9:6f:df:d2:7b:e0:59:23:27:e7:66:d1:97:4b:aa:f5:53:48:
80:8c:34:9c:69:96:b7:fc:ae:16:a1:8d:c6:84:dd:ac:17:7f:
6f:ef:60:a2:9e:ae:5e:2f:74:a5:2c:1c:96:3e:cf:ca:26:ee:
67:bb:58:91:17:6c:9d:c2:bd:5a:78:3a:89:e3:7f:44:65:f8:
fb:55:3d:ce:c4:91:e5:12:23:4a:79:2b:b3:ce:e8:0d:cc:d0:
fb:87:28:62:eb:a6:4e:ec:f5:8f:33:63:c5:bc:02:16:f9:aa:
51:31:1e:3e:41:7e:d6:9c:d4:65:19:82:59:03:0f:75:70:81:
cb:98:79:ca:90:42:17:7c:ff:d7:10:9c:1d:00:d3:19:da:51:
00:4e:11:26:ee:1d:17:f6:bb:53:4b:e3:72:07:a9:8d:23:79:
ca:33:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 03:21:16 2024 by rpki-client on console-ams.rpki-client.org