Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/C5187DA6B90F11ED9E1D69BCF1222468.roa
File: C5187DA6B90F11ED9E1D69BCF1222468.roa (raw, json)
Hash identifier: Q/8/zDvHcN2wrHKQW8W02X9WyzRYnpfJIkvMItRNi4w=
Subject key identifier: B0:FF:E0:1C:FB:63:E7:F9:1E:12:9E:D6:E7:47:C5:13:4C:2A:7C:BD
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 2D
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/C5187DA6B90F11ED9E1D69BCF1222468.roa
Signing time: Thu 02 Mar 2023 15:34:50 +0000
ROA not before: Thu 02 Mar 2023 15:34:46 +0000
ROA not after: Mon 02 Mar 2026 15:34:46 +0000
asID: 29286
IP address blocks: 160.242.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45 (0x2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 15:34:46 2023 GMT
Not After : Mar 2 15:34:46 2026 GMT
Subject: CN=6400c21a-bb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:37:e2:8f:9f:9a:ea:00:fa:f4:17:44:68:
7d:e1:71:cd:40:33:f1:89:1f:f9:e6:7f:2d:07:dc:
90:5b:24:e3:6f:84:e5:32:20:8f:ad:b1:50:8f:86:
84:a1:c9:d4:69:e5:5f:71:2f:86:b1:8b:d6:b6:99:
2c:e7:36:43:41:a0:3a:62:e1:82:ec:f8:c6:5d:a3:
10:74:a7:bf:71:d2:9e:47:dd:ba:d2:90:a5:72:73:
26:de:38:f3:5f:59:3d:d7:4a:9e:d6:74:5c:f0:01:
26:8e:21:59:a3:01:69:9a:e6:1c:f8:8f:ae:40:0f:
74:de:d4:ad:ce:81:70:64:e7:ac:7e:f4:4d:0e:52:
90:19:5c:62:e7:8c:13:94:1a:46:4f:10:c4:a9:5c:
73:cc:b5:67:ef:07:1e:a2:21:52:55:aa:b4:ae:53:
94:f6:94:d5:72:80:65:83:e8:cd:90:4e:74:79:6c:
c1:3e:e8:86:51:28:e5:f9:f3:44:67:a1:43:4b:3c:
5a:46:e0:7e:fc:47:6f:01:be:32:a1:87:4d:36:54:
2c:8b:bc:57:f9:0c:d1:3c:51:62:b8:f6:be:62:ac:
37:1c:32:63:89:ae:bb:21:1b:26:cb:05:27:80:12:
23:d1:88:37:7e:d8:ac:24:cc:56:cf:53:ef:5e:23:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:E0:1C:FB:63:E7:F9:1E:12:9E:D6:E7:47:C5:13:4C:2A:7C:BD
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/C5187DA6B90F11ED9E1D69BCF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c9:1c:ab:fd:ef:4a:d1:45:82:95:95:c4:30:02:99:c0:81:
8f:13:23:65:4f:b0:70:d5:a0:f1:26:8e:2f:e9:03:28:6e:42:
32:4e:15:ea:a6:b2:67:d9:b5:5e:b2:e6:63:be:ce:f6:54:14:
76:c9:13:6b:2b:26:24:7a:2b:d1:1d:fd:65:4d:9c:39:82:be:
94:ff:10:e3:29:4d:96:2a:82:1b:d7:c9:d7:b3:20:c7:fd:3a:
35:ab:6c:5f:c7:10:fa:1f:40:82:5f:0b:b2:f3:3b:be:61:47:
f9:94:ec:54:71:4b:70:eb:61:68:c7:26:b7:fe:13:db:42:70:
cc:5d:70:85:d6:11:f7:b1:f6:a9:da:c1:ea:43:05:75:c7:6a:
a1:d8:e1:73:08:eb:9f:e5:be:a9:0b:78:eb:6e:a6:41:65:dc:
b8:dc:4d:00:d4:a7:27:30:f6:0b:0e:52:7c:56:c4:73:57:52:
61:1d:a2:fa:ff:74:79:5a:ae:33:e1:20:5a:01:29:25:9b:d3:
71:16:0e:e6:55:c3:3d:37:06:86:95:e4:1a:e0:06:f5:b7:3f:
f1:6f:25:27:82:be:34:72:10:7b:85:7f:4c:92:a7:5e:c9:d5:
08:0c:f2:57:a3:63:6b:35:fb:7d:10:8d:ba:7a:95:9c:f5:fa:
a5:30:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:09:49 2024 by rpki-client on console-ams.rpki-client.org