Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/256DF7EC042E11EB8295AC11F8AEA228.roa
File: 256DF7EC042E11EB8295AC11F8AEA228.roa (raw, json)
Hash identifier: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=
Subject key identifier: CE:AE:CF:3A:16:40:2F:20:43:17:C3:2D:81:16:DA:12:4C:F6:70:AA
Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial: 06E8
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/256DF7EC042E11EB8295AC11F8AEA228.roa
Signing time: Thu 01 Oct 2020 21:36:21 +0000
ROA not before: Fri 02 Oct 2020 21:36:16 +0000
ROA not after: Tue 01 Oct 2030 21:36:16 +0000
asID: 61138
IP address blocks: 169.239.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Apr 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1768 (0x6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Validity
Not Before: Oct 2 21:36:16 2020 GMT
Not After : Oct 1 21:36:16 2030 GMT
Subject: CN=5f764bd5-1553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:ab:b9:07:b6:38:0e:3b:1b:74:0f:52:b9:
be:1c:45:8a:ac:95:66:50:cc:98:f1:d7:0f:f7:75:
1e:46:c4:06:df:c2:e2:f5:86:f5:cb:80:d4:21:f2:
e7:49:15:60:5f:e4:b3:cb:f4:03:1d:fc:0d:a2:f8:
16:16:bb:4b:2e:26:49:e7:0d:2a:7a:aa:c4:bc:2c:
fb:ee:61:03:c7:12:87:96:c0:fe:e5:c3:4b:92:58:
28:9b:7d:cf:46:97:10:a9:fa:6f:53:c4:3c:2f:c7:
6e:2d:4d:9c:02:e6:0e:ae:5f:96:70:c7:47:1a:e8:
12:cf:af:36:c1:14:48:fc:6b:d1:59:34:12:f3:42:
d0:ab:75:6e:12:fa:cd:a0:45:3b:0a:c3:cb:79:1a:
0a:7b:1c:10:49:21:5d:e0:17:04:2b:31:7a:e3:6c:
53:4a:3d:c3:ad:f2:eb:9e:5c:61:2f:12:70:b3:c9:
44:9a:6c:65:ff:e0:d3:61:b9:b4:c1:59:af:bb:ed:
f9:9a:cf:a7:e3:e6:09:5b:13:2d:84:fb:17:52:63:
c5:30:13:19:19:c0:2a:ce:e5:5b:3f:1e:d9:ad:28:
18:31:fc:e2:0d:13:01:f6:c1:6d:be:99:4b:4c:7e:
11:38:bf:d3:6c:02:8c:9a:a4:d0:55:12:b3:c2:dd:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AE:CF:3A:16:40:2F:20:43:17:C3:2D:81:16:DA:12:4C:F6:70:AA
X509v3 Authority Key Identifier:
keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/256DF7EC042E11EB8295AC11F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.128.0/23
Signature Algorithm: sha256WithRSAEncryption
93:b4:fa:f0:d3:94:cd:fd:6c:07:d7:79:9d:de:21:cc:6f:92:
7a:31:30:b8:3a:1e:1d:fc:34:79:7f:40:8d:f2:8d:25:31:fa:
57:5a:ff:26:dd:83:52:16:ed:4c:d6:da:96:ac:c6:d3:b4:4e:
78:44:48:7d:9b:e6:1b:24:03:6c:0b:68:27:04:bd:34:81:e2:
99:77:fd:eb:bd:8c:b6:ce:83:4d:ac:68:81:cb:05:a3:a9:eb:
e5:8a:ad:eb:c9:66:11:7a:9f:6d:e8:54:23:14:00:8e:71:5b:
78:7e:51:59:13:65:fd:b5:6b:a3:2f:bd:13:50:7f:0b:27:2f:
a5:71:d8:88:14:fb:09:0a:d7:43:0e:b9:31:05:63:42:7b:07:
41:f3:04:ff:06:8f:81:24:ca:77:76:40:87:7e:80:8d:57:48:
de:21:05:e9:85:5d:d7:13:d7:f4:1e:88:69:05:1d:34:28:34:
2d:59:07:65:0b:75:91:71:85:bc:0e:89:75:c4:57:82:f3:43:
44:02:75:9a:27:4f:05:24:28:eb:0b:e8:86:ab:c7:df:f8:76:
06:7e:d3:66:67:8a:aa:45:c8:bf:05:2b:49:56:f8:fd:a7:74:
f3:9d:bf:1a:67:da:4c:5c:0e:1d:eb:de:46:41:a5:40:3a:4e:
5a:a0:ba:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:16:39 2024 by rpki-client on console-fra.rpki-client.org