Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/A98258D0404C11EFA55BD559762E951A.roa
File: A98258D0404C11EFA55BD559762E951A.roa (raw, json)
Hash identifier: FlBCIPwQ4YkejGviFEaWQJchhPbjvvwNsjpap4nCAeQ=
Subject key identifier: 0C:6F:6B:C0:01:D8:AB:AA:E6:10:90:89:9C:7F:D1:25:70:3D:FC:34
Certificate issuer: /CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Certificate serial: A4
Authority key identifier: C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
Authority info access: rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/A98258D0404C11EFA55BD559762E951A.roa
Signing time: Fri 12 Jul 2024 12:45:48 +0000
ROA not before: Fri 12 Jul 2024 12:45:44 +0000
ROA not after: Sun 12 Jul 2026 12:45:44 +0000
asID: 328733
IP address blocks: 160.19.96.0/21 maxlen: 21
160.19.97.0/24 maxlen: 24
160.19.98.0/24 maxlen: 24
160.19.99.0/24 maxlen: 24
160.19.100.0/24 maxlen: 24
160.19.101.0/24 maxlen: 24
160.19.102.0/24 maxlen: 24
160.19.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.mft
rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695A2AAR/serialNumber=C676FFCB432C5B852415FC63B894C527052939A4
Validity
Not Before: Jul 12 12:45:44 2024 GMT
Not After : Jul 12 12:45:44 2026 GMT
Subject: CN=6691257c-d059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:5e:76:89:7e:45:39:c2:97:0e:81:bb:50:
91:12:e7:34:46:d9:5c:4c:02:e0:46:86:20:b2:d6:
e8:09:f0:1f:54:1a:06:ac:4c:2d:78:6b:b3:55:ce:
fb:8a:0c:5f:c9:35:7d:4b:39:39:c0:83:ac:ea:64:
d5:cc:20:18:e4:e3:a8:fa:10:3c:41:61:d5:53:0e:
74:0b:26:e2:1c:42:d0:ca:49:ed:0d:34:93:b2:de:
ac:d0:06:1f:66:60:ec:3e:11:aa:4b:d9:4e:5a:b0:
5e:85:cb:57:14:2f:dd:41:ff:6d:f2:69:75:7e:34:
5d:61:32:48:d9:02:98:f8:3d:19:37:d0:c0:7c:38:
86:42:57:05:63:54:9f:4d:8f:ef:30:00:6a:0c:df:
e0:43:87:f9:3a:ca:03:4c:2a:60:16:62:6b:d7:f2:
4b:03:7b:f3:f9:d5:7c:7f:d6:f7:72:8d:ce:9f:9d:
69:95:29:2b:df:c6:9e:ae:7d:10:7f:a5:20:72:93:
d2:2a:93:49:f0:b9:69:34:11:fc:5a:a6:c0:6f:12:
d4:7a:ed:71:df:87:79:65:f4:45:15:e8:8c:a0:79:
4f:cc:dd:ad:be:a3:fb:62:a2:fc:0e:31:4d:ca:bd:
ab:b4:d2:cc:5b:34:0d:18:5b:bb:0d:47:8b:8a:ed:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6F:6B:C0:01:D8:AB:AA:E6:10:90:89:9C:7F:D1:25:70:3D:FC:34
X509v3 Authority Key Identifier:
keyid:C6:76:FF:CB:43:2C:5B:85:24:15:FC:63:B8:94:C5:27:05:29:39:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xnb_y0MsW4UkFfxjuJTFJwUpOaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695A2A/8EF5357CC42E11EE997AFD4F775412E6/A98258D0404C11EFA55BD559762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.19.96.0/21
Signature Algorithm: sha256WithRSAEncryption
87:90:21:7a:dc:2e:ec:0c:f4:23:6f:0c:ad:eb:94:00:ba:01:
41:82:6f:7c:5a:62:b8:cc:8c:ea:f5:22:6a:c0:2d:c6:a4:6a:
42:ca:e9:ad:1e:87:a8:c0:f7:f5:52:06:8c:ba:0f:a3:f1:e7:
72:c1:61:3f:9a:f5:87:54:f7:f0:f1:59:08:7e:94:2a:af:85:
f9:e6:19:db:84:25:01:24:71:ba:f7:e4:9f:8d:89:a0:72:e0:
d2:b9:54:cb:08:2f:0f:0e:1b:c3:cb:91:63:fc:25:fb:df:86:
d0:7a:61:ff:4f:24:19:80:8c:aa:34:0a:37:e1:47:67:84:03:
44:af:e8:1b:6a:a6:50:4b:d2:a1:e4:b0:7a:a0:ff:ef:e9:31:
37:5a:ec:43:a8:f6:82:4b:e3:4a:52:62:a5:f2:83:48:b9:c3:
14:fd:05:92:62:f9:22:39:6c:07:fc:78:27:c4:0e:51:66:e9:
f6:72:35:3b:06:fb:50:6d:b1:e6:70:74:41:8b:d8:fe:4a:dd:
54:d2:80:fd:50:bf:12:0f:16:cd:03:a2:77:b0:48:08:c1:3e:
03:e8:d3:ad:94:59:c8:b0:bc:1e:76:ea:4b:cb:88:bc:fe:14:
8f:7f:b1:d7:31:f1:d1:08:46:aa:d9:47:5e:c4:bd:51:14:79:
06:98:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:14 2024 by rpki-client on console-ams.rpki-client.org