Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/159996B2082511ED8BA38C86F1222468.roa
File: 159996B2082511ED8BA38C86F1222468.roa (raw, json)
Hash identifier: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=
Subject key identifier: EC:62:86:5E:C5:95:9C:E2:CC:D6:C4:9C:BB:63:D1:E4:06:0B:D1:17
Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial: 098C
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/159996B2082511ED8BA38C86F1222468.roa
Signing time: Wed 20 Jul 2022 12:11:29 +0000
ROA not before: Wed 20 Jul 2022 12:11:24 +0000
ROA not after: Mon 01 Jul 2030 12:11:24 +0000
asID: 203061
IP address blocks: 169.239.200.0/24 maxlen: 24
169.239.201.0/24 maxlen: 24
169.239.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:16:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Validity
Not Before: Jul 20 12:11:24 2022 GMT
Not After : Jul 1 12:11:24 2030 GMT
Subject: CN=62d7f0f1-cac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:5f:d6:b5:bd:8a:3e:94:0a:4f:37:35:cb:
d6:13:e5:ec:a4:3c:28:6c:66:7c:df:36:08:a4:0f:
7b:1c:24:bd:f4:8f:b7:96:0c:fb:c3:b3:fe:7d:72:
de:5d:c6:cc:e7:e6:09:f3:57:d8:1a:48:06:2d:2b:
24:cc:df:4a:d8:1e:a8:36:1a:27:6f:5b:08:d5:29:
36:0b:bf:06:a9:fd:0a:d0:f9:f6:e6:4d:7b:18:92:
3f:f5:91:fd:ea:51:8d:49:b3:02:6d:1a:41:6a:20:
7c:33:a2:d3:f0:dc:bd:46:cf:20:8f:ee:f8:9d:5b:
6d:c7:f8:74:3e:66:71:f0:5e:61:cd:b1:59:65:8b:
0b:ec:be:c6:e4:2c:6d:58:73:0b:b0:95:31:a6:20:
37:ec:73:dd:da:2a:a5:97:5d:a2:8b:29:b6:b7:eb:
c4:8d:e0:f8:3d:28:3a:e5:eb:6a:e3:d7:88:af:a9:
87:1d:7b:65:e7:65:eb:72:46:d8:e1:92:e9:a5:66:
c0:73:8b:cf:b3:ff:4e:94:96:72:03:4a:f3:a5:16:
3e:0f:68:3f:75:06:27:05:1b:86:ad:13:6b:1f:05:
ef:0d:81:0b:63:3d:a8:2a:46:42:83:48:1b:c4:93:
4e:8f:c8:6b:e4:43:8a:5a:c8:8d:f5:a4:e2:b6:ab:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:62:86:5E:C5:95:9C:E2:CC:D6:C4:9C:BB:63:D1:E4:06:0B:D1:17
X509v3 Authority Key Identifier:
keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/159996B2082511ED8BA38C86F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.200.0/23
169.239.203.0/24
Signature Algorithm: sha256WithRSAEncryption
25:71:2f:44:45:b4:93:b4:49:c2:5c:d1:98:74:cc:06:16:29:
e4:02:71:21:07:97:62:e4:48:f3:aa:42:ba:73:74:1d:d4:44:
39:a0:d0:0d:cf:06:a0:60:fd:75:3e:89:91:3d:ec:fe:b3:fa:
b0:0f:f4:15:7d:56:50:6c:5f:a6:18:2e:54:32:55:e5:3c:bd:
54:02:2f:1b:77:4e:87:62:e0:f6:aa:cc:df:5b:e3:05:27:d7:
2a:62:d7:04:d4:ce:7a:9f:28:6c:ae:9d:95:fe:cc:6e:7e:a0:
10:1d:6c:b0:c1:1a:bc:87:2e:ac:cd:49:56:6f:c9:fc:90:1d:
90:ae:cb:9c:02:02:34:ac:12:48:aa:82:29:ba:e9:3d:82:a0:
43:9a:6b:28:bb:77:76:e3:a6:03:02:34:5c:49:c2:23:06:8c:
b5:5c:41:c7:38:92:16:6d:cf:bc:79:a4:44:69:58:10:b7:5f:
5b:29:9f:a8:32:81:f1:b8:ac:38:cc:ef:88:86:f1:95:99:2f:
aa:5e:3f:82:0a:d9:9a:6e:ce:d6:c8:3f:b0:82:eb:7e:6a:dd:
fc:44:bb:74:69:1f:46:14:24:56:1c:ca:5e:18:f1:c7:00:43:
ca:0e:bc:25:5f:23:14:d3:20:1e:8d:54:ad:b3:bc:38:3e:0d:
64:b9:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:25 2024 by rpki-client on console-ams.rpki-client.org