Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/FBB32E86FC8111E9BB7F292CF8AEA228.roa
File: FBB32E86FC8111E9BB7F292CF8AEA228.roa (raw, json)
Hash identifier: HuM3BwkpOIpwBJ+xYmwrtHtu6kY28m4Q/SLVfLjrjjs=
Subject key identifier: 9D:A8:EA:3A:C9:EC:A8:51:7C:D2:5E:C4:AC:82:B1:46:67:DE:DB:CB
Certificate issuer: /CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
Certificate serial: 03
Authority key identifier: F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
Authority info access: rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/FBB32E86FC8111E9BB7F292CF8AEA228.roa
Signing time: Fri 01 Nov 2019 08:31:22 +0000
ROA not before: Fri 01 Nov 2019 08:31:06 +0000
ROA not after: Fri 01 Nov 2030 08:31:06 +0000
asID: 37567
IP address blocks: 156.0.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
Validity
Not Before: Nov 1 08:31:06 2019 GMT
Not After : Nov 1 08:31:06 2030 GMT
Subject: CN=5dbbed5a-68f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:74:bc:d8:a1:ac:ff:32:c3:0c:d0:e1:93:
bc:4e:5f:98:c8:46:79:0a:8f:6a:bb:cd:0c:c6:41:
ce:54:08:52:d7:e4:ee:da:14:5c:07:cf:cd:75:95:
d5:7b:25:83:7a:38:c6:7b:86:da:b6:fd:e1:c6:c5:
c7:18:a0:23:e8:be:b7:fe:34:c9:2a:2e:8b:de:0c:
77:f6:02:77:fd:46:93:39:b0:15:24:c9:15:42:f8:
f7:b1:78:3d:0f:64:00:a1:bf:8d:fb:14:f6:9d:2d:
91:20:5b:95:a5:33:87:80:b6:9f:61:1f:c0:c4:74:
33:79:2e:35:81:34:30:e8:ea:30:45:c1:fc:03:cb:
78:6b:55:84:a0:3b:e7:94:7f:41:33:ea:ac:45:3f:
d0:11:c3:ba:1e:65:4e:3c:60:55:08:16:3b:e7:fc:
58:32:c2:bd:f8:0d:9e:10:da:51:d7:d3:5e:17:ac:
dd:70:aa:df:60:60:b5:62:29:ab:e2:14:2b:02:48:
3b:d6:1b:b7:39:83:ef:0e:67:ea:24:06:7b:53:93:
f6:ed:26:de:3a:1a:50:2d:42:de:cd:4d:06:7c:16:
b9:49:4d:53:b7:76:76:96:ae:da:fe:64:17:a2:ad:
a7:4f:db:31:71:35:6f:63:2c:16:ac:96:7a:b6:aa:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:EA:3A:C9:EC:A8:51:7C:D2:5E:C4:AC:82:B1:46:67:DE:DB:CB
X509v3 Authority Key Identifier:
keyid:F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/FBB32E86FC8111E9BB7F292CF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
156.0.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:1f:f6:80:6a:8a:97:ef:6f:ef:4f:d7:d1:b2:bb:d7:0a:80:
ce:c5:dd:ca:cd:2f:fc:f4:29:35:5a:92:1b:6f:0f:2c:ee:0d:
b1:f5:2b:87:64:3f:48:ee:7a:76:d6:4f:47:a1:b0:2b:06:85:
c6:99:6d:56:f6:57:97:52:93:2d:3b:d1:b4:8e:7f:21:fe:60:
cf:a9:9c:4f:43:eb:87:ba:5c:00:c4:f0:8d:6f:be:96:fc:05:
39:b1:ab:8e:ac:5f:18:3d:87:54:b0:8c:f6:5d:a0:03:8a:bc:
89:aa:97:ae:6d:1e:e8:48:8c:bb:2d:2c:9f:27:4f:1c:0d:b9:
bf:e6:d9:73:66:48:bf:e9:38:28:fb:44:90:81:5b:a4:c0:19:
1a:72:a3:a5:56:e4:3a:f0:73:f4:e6:cb:f5:43:e7:62:08:48:
92:c2:1a:8e:8c:45:8b:c9:26:ad:f6:88:0e:47:2a:04:5d:1d:
c3:04:7e:c2:92:2b:16:af:bb:b1:6f:f8:86:9a:be:6d:2e:27:
87:81:30:24:57:2e:8f:26:89:bf:30:37:da:1d:1e:b9:cf:d5:
95:d2:1f:df:b8:ce:7c:0a:a2:1a:0f:49:8f:87:01:3a:84:fc:
bd:c8:82:2e:49:42:c6:c5:04:de:07:9a:6d:e6:1a:aa:aa:6f:
a3:07:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:13 2024 by rpki-client on console-fra.rpki-client.org