Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/C9EDC80E6D9111EEBBC4540D4AD9E6FC.roa
File: C9EDC80E6D9111EEBBC4540D4AD9E6FC.roa (raw, json)
Hash identifier: /aLKa+m3u4bbbNxxLb4yQplePbGqlVG3EB63Tc//Wr4=
Subject key identifier: 67:63:B7:53:3D:40:C9:67:F3:7B:F0:70:F8:71:D7:6B:5D:3C:B2:D0
Certificate issuer: /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial: EB
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/C9EDC80E6D9111EEBBC4540D4AD9E6FC.roa
Signing time: Wed 18 Oct 2023 08:39:02 +0000
ROA not before: Wed 18 Oct 2023 08:38:59 +0000
ROA not after: Sat 18 Oct 2025 08:38:59 +0000
asID: 15964
IP address blocks: 165.210.16.0/20 maxlen: 20
165.210.16.0/22 maxlen: 22
165.210.32.0/24 maxlen: 24
165.210.33.0/24 maxlen: 24
165.211.21.0/24 maxlen: 24
165.211.22.0/24 maxlen: 24
165.211.23.0/24 maxlen: 24
165.211.24.0/24 maxlen: 24
165.211.25.0/24 maxlen: 24
165.211.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 03 Jun 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Validity
Not Before: Oct 18 08:38:59 2023 GMT
Not After : Oct 18 08:38:59 2025 GMT
Subject: CN=652f99a6-fbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:2a:34:25:a9:da:98:8b:f4:60:c5:e7:51:
91:50:53:cd:e1:ba:67:a5:de:a7:60:69:02:31:68:
41:a1:30:82:13:c9:6e:fd:90:b4:e6:71:76:a6:b6:
f4:00:f0:a6:bf:87:77:d4:97:50:6b:f0:96:a6:03:
60:24:8b:b0:1c:dc:82:4c:4f:47:2f:fc:93:b5:be:
80:21:d8:c1:7b:83:5b:f3:e2:b5:c2:2f:c0:2e:5b:
e9:39:7a:46:40:e7:69:e2:66:e9:db:83:01:bf:68:
07:f8:ad:64:c2:e6:76:aa:1c:f7:97:6e:90:51:23:
6d:13:e7:33:0b:64:bf:2d:2e:64:77:54:fd:80:8a:
0f:ab:a8:eb:9b:56:c6:3e:39:58:d2:97:1b:7e:0c:
f0:96:78:d6:60:cf:0a:a6:ef:ed:3c:33:c9:e0:bf:
69:93:a5:dc:40:cf:32:62:6a:0c:3e:61:e3:ea:94:
a9:b5:83:de:bf:42:84:68:85:e9:76:a7:74:93:7b:
5b:4b:6f:a6:8f:fa:fc:d1:e1:a3:0d:b9:42:52:98:
65:c5:79:39:4a:d8:f8:54:1f:e1:bc:5c:7d:26:5b:
31:bb:d3:10:f8:e2:c1:ed:f0:56:1b:9f:20:f3:2a:
67:52:7d:ff:e3:47:f8:a2:f3:de:78:6c:d7:45:68:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:B7:53:3D:40:C9:67:F3:7B:F0:70:F8:71:D7:6B:5D:3C:B2:D0
X509v3 Authority Key Identifier:
keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/C9EDC80E6D9111EEBBC4540D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.210.16.0-165.210.33.255
165.211.21.0-165.211.26.255
Signature Algorithm: sha256WithRSAEncryption
98:a7:8b:00:9c:37:1d:8e:b9:39:51:4d:1e:7f:94:7c:ab:1a:
30:f7:4b:ac:23:eb:59:c8:df:b2:75:ea:dd:8c:52:c3:b5:ab:
bd:4d:b1:89:7c:15:e8:d0:77:e8:f1:a8:68:4b:5e:b5:ba:b1:
a0:1e:98:61:e6:a1:13:a1:83:26:3e:bc:d6:d4:29:c3:17:f3:
da:89:82:71:0f:fa:7e:63:6f:11:b2:3a:f8:45:66:7c:13:de:
c0:8b:5c:28:12:66:bf:e6:14:2f:eb:42:e0:b4:45:3f:1b:07:
a7:1e:eb:95:65:73:ce:fc:22:80:46:bc:3a:66:f0:a1:02:3e:
7c:f2:e3:57:b4:4a:b8:e1:62:74:01:a1:80:1d:b6:a3:02:ef:
9f:97:58:cd:a1:1c:50:f6:5a:1e:b1:f4:97:0d:70:4e:ce:48:
e3:2a:1b:c4:ca:53:dc:0c:80:ef:95:71:07:b4:04:9e:1b:7f:
ed:15:ae:6c:f4:d7:28:30:22:d8:0f:a0:31:a2:89:35:2e:b5:
bf:e8:79:2f:bc:df:75:9c:dc:72:a5:4c:f1:0c:34:56:e5:da:
dc:54:06:5f:b1:e5:df:20:36:33:be:f2:04:03:e9:27:30:92:
16:f5:87:cc:53:d5:ca:23:79:4b:07:8e:a6:be:78:b8:ad:ce:
d5:eb:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:16 2024 by rpki-client on console-ams.rpki-client.org