Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/CFB27832B90711ED9BD407A5F1222468.roa
File: CFB27832B90711ED9BD407A5F1222468.roa (raw, json)
Hash identifier: Fc+yb6vnJZ72A2kr3CBvN+GPLPr4BeE+HzXozlQerQI=
Subject key identifier: A6:CB:1F:11:37:FF:AD:47:14:1B:CE:9D:29:B6:82:5F:42:D1:39:81
Certificate issuer: /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial: 15
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Authority info access: rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/CFB27832B90711ED9BD407A5F1222468.roa
Signing time: Thu 02 Mar 2023 14:37:52 +0000
ROA not before: Thu 02 Mar 2023 14:37:48 +0000
ROA not after: Mon 02 Mar 2026 14:37:48 +0000
asID: 33763
IP address blocks: 160.242.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Validity
Not Before: Mar 2 14:37:48 2023 GMT
Not After : Mar 2 14:37:48 2026 GMT
Subject: CN=6400b4c0-59e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:b8:28:5a:8a:eb:75:c9:d9:f7:78:ff:29:
33:20:10:8d:b6:d0:71:0b:fe:88:b5:ac:4d:8a:3f:
dc:4f:06:9c:a6:a0:d1:77:9f:08:96:4c:40:05:09:
49:0f:11:64:45:f4:5b:b7:24:a3:6c:64:9d:e1:e9:
aa:a9:f9:64:96:6e:ae:30:cb:80:e1:86:89:35:5a:
26:53:60:28:e4:c8:f0:b3:ff:a6:c4:88:0a:e7:e2:
48:9b:7a:c6:1d:88:87:cf:1b:a4:2e:d8:4e:35:e8:
84:f1:13:c8:8a:52:a6:0a:a0:22:79:52:de:ec:50:
98:12:bb:fc:81:b9:6f:bf:e2:55:23:8f:e3:be:af:
71:f6:0f:db:8c:05:d4:4a:ae:60:41:33:83:50:73:
43:0b:25:b8:01:8e:cb:a1:77:b0:dd:2e:65:22:d4:
ab:4f:6b:fc:60:71:8a:17:31:20:ec:3b:00:cf:d9:
e2:f2:e7:21:3f:17:cc:bd:4d:8d:88:88:96:7c:41:
32:9f:88:a3:95:dc:d3:54:67:7d:02:0b:d8:19:4e:
04:25:0d:e0:5e:11:6a:e4:57:87:ff:a6:7a:21:de:
9c:b7:bd:7f:26:b0:fa:e4:3f:c9:8c:1d:53:29:44:
77:31:3e:b6:96:de:2d:00:e1:fc:71:a3:31:4b:e2:
68:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:1F:11:37:FF:AD:47:14:1B:CE:9D:29:B6:82:5F:42:D1:39:81
X509v3 Authority Key Identifier:
keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/CFB27832B90711ED9BD407A5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.40.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:c2:53:d5:51:93:f9:9c:10:93:2a:88:f4:e5:2d:42:5a:c5:
f7:57:36:11:1b:26:d2:88:bc:f9:78:97:9c:8d:6f:f2:d2:f1:
52:9d:99:a5:58:42:61:b0:96:cd:1f:9f:c2:fd:e6:58:00:10:
c8:f6:d1:44:09:91:6d:af:c0:73:f3:d9:15:a3:91:aa:95:6b:
95:9d:bb:aa:72:29:46:cc:b2:85:28:48:b6:45:cf:3c:56:35:
d2:56:bb:0f:ea:ec:ef:3b:2b:ba:cc:bb:49:63:c5:4e:1b:04:
6a:42:26:ca:1c:24:da:e6:ed:e2:ae:c2:e5:a0:02:66:0a:63:
2e:13:ba:81:a8:06:2d:a8:6c:e1:fb:f9:1f:b0:4b:35:63:a0:
c4:8e:49:b3:ef:c2:7e:26:e0:4c:9c:95:d7:c1:87:57:c9:d8:
73:74:af:5b:f0:71:0a:38:e6:13:e9:b7:8a:93:03:a1:39:68:
eb:b0:55:94:e8:c6:65:4f:a5:bf:85:aa:63:bd:a2:51:ce:9a:
74:80:8a:52:3e:23:ab:5a:0e:62:7b:ea:00:68:06:94:19:98:
f6:de:91:6e:f6:5f:88:11:c3:1a:58:1d:7b:39:5e:37:18:e0:
da:f3:c7:94:31:69:53:11:80:fa:17:4c:db:8b:21:cd:3c:04:
33:03:a8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:03:40 2024 by rpki-client on console-ams.rpki-client.org