Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/B811D43ECF1811EE808B8C5E775412E6.roa
File: B811D43ECF1811EE808B8C5E775412E6.roa (raw, json)
Hash identifier: QrAGxe4oVruW39R4XPjd+XQJmsbP5F1obpV9HSARoLQ=
Subject key identifier: 4E:B5:ED:9A:81:8B:5A:2B:6C:E6:E4:E6:9F:FE:7A:2B:E1:48:3A:D7
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: 0173
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/B811D43ECF1811EE808B8C5E775412E6.roa
Signing time: Mon 19 Feb 2024 11:19:17 +0000
ROA not before: Mon 19 Feb 2024 11:19:14 +0000
ROA not after: Thu 19 Feb 2026 11:19:14 +0000
asID: 15964
IP address blocks: 165.211.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Feb 19 11:19:14 2024 GMT
Not After : Feb 19 11:19:14 2026 GMT
Subject: CN=65d33935-fa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:ff:dd:22:8e:a8:28:35:30:15:94:bc:3b:
6e:5f:28:8c:79:4c:59:50:51:01:f5:4c:a9:d4:74:
3a:2c:d9:1c:41:52:37:18:71:0f:88:8f:69:a9:17:
ca:2a:46:14:fd:ec:9c:5d:4d:86:98:e1:50:7d:e6:
66:50:d8:d1:c1:53:2b:12:47:3a:41:95:c6:38:e1:
f3:8d:ca:3e:d1:40:f9:57:55:d1:19:aa:ad:8e:09:
df:ca:7d:76:8c:e9:7f:b5:55:c3:bf:3d:64:aa:89:
3f:9d:3d:2c:94:dd:20:35:fc:ac:03:5d:7a:16:a9:
7b:8f:d9:74:60:66:e1:a0:3a:c2:d2:5d:01:0c:dd:
53:fb:71:48:e8:ac:3a:09:c7:4e:c1:5e:a4:35:c9:
67:21:d3:c9:19:1b:20:08:8e:57:57:81:e7:c5:55:
a6:59:0f:b5:49:7f:42:93:fe:f8:ac:e6:66:60:68:
9c:25:8e:04:4a:ab:5e:7f:6d:9a:00:07:fd:91:6f:
c5:02:09:cf:9a:9b:9c:3b:3d:32:39:92:86:84:86:
18:3f:0a:89:67:bd:2c:16:f9:60:c1:a4:8f:cd:00:
67:23:85:a4:d9:2d:c9:47:97:35:a1:51:25:94:0a:
ee:ec:13:8f:ce:a8:2c:28:24:86:94:70:a7:97:d9:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B5:ED:9A:81:8B:5A:2B:6C:E6:E4:E6:9F:FE:7A:2B:E1:48:3A:D7
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/B811D43ECF1811EE808B8C5E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.211.28.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:44:98:c8:19:80:19:70:c0:1e:b9:cb:8d:ee:1f:21:33:a0:
19:a7:5f:66:16:ec:1a:fb:00:57:10:e9:42:9c:50:b6:a1:d4:
b8:a9:3e:7a:82:9d:f3:e4:78:c1:c5:24:3b:0e:47:2a:06:89:
f0:69:1f:10:4a:7d:47:04:89:aa:1c:17:e0:01:ef:77:f3:22:
1d:4e:1e:3c:f5:fb:65:b5:c0:04:d7:43:a4:2c:f1:b5:90:a4:
9b:28:81:5d:d2:d6:8c:49:3d:8d:87:05:43:74:d9:02:38:67:
c3:54:94:8c:6e:c3:a0:36:88:e1:48:da:49:cc:2a:b3:63:f0:
47:05:57:6a:54:66:94:0a:69:be:0c:92:f3:bf:37:3a:b7:78:
8c:cc:39:40:2f:8b:35:b0:14:e9:59:00:f6:7c:e6:4b:3c:8e:
25:89:ec:0d:ca:c8:85:80:c6:44:b5:c2:ed:07:86:ba:58:eb:
75:81:1d:d6:45:21:a1:c2:1a:71:35:79:44:16:a1:59:b7:a1:
48:d0:3e:5a:e7:a7:81:72:c0:95:ff:bb:5e:62:5b:1e:d5:8a:
de:3c:00:fb:4b:90:61:4b:37:38:68:43:df:28:0d:b9:03:6b:
bf:72:8d:51:70:81:9e:62:79:3c:5a:61:6a:c6:ae:67:7a:3b:
22:44:62:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org