Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/B13DE26C980F11EBBA26A90FF8AEA228.roa
File: B13DE26C980F11EBBA26A90FF8AEA228.roa (raw, json)
Hash identifier: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=
Subject key identifier: 33:55:D1:31:B9:C9:29:48:40:E4:F0:D0:3F:48:66:DA:D8:84:AD:CF
Certificate issuer: /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial: 07AB
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Authority info access: rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/B13DE26C980F11EBBA26A90FF8AEA228.roa
Signing time: Thu 08 Apr 2021 02:11:14 +0000
ROA not before: Thu 08 Apr 2021 02:11:08 +0000
ROA not after: Wed 30 Apr 2031 02:11:08 +0000
asID: 138995
IP address blocks: 169.239.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1963 (0x7ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Validity
Not Before: Apr 8 02:11:08 2021 GMT
Not After : Apr 30 02:11:08 2031 GMT
Subject: CN=606e6642-4010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:29:a5:bc:d3:6a:92:03:da:71:87:60:53:
b0:88:9a:3f:34:fd:c9:d8:e6:bd:32:97:64:9d:27:
98:75:0e:7e:d7:c6:dc:3d:40:c4:bf:d2:42:61:76:
b7:e6:ac:b8:0f:45:fb:55:c7:ad:c8:d2:41:1e:f4:
21:a9:56:c8:65:3f:de:0b:19:b4:8b:c3:d6:3b:97:
f2:9f:9f:b7:e2:ea:40:24:ef:87:21:97:2f:e2:6c:
b2:e0:55:09:16:ca:4d:34:69:59:8d:40:45:ad:3e:
8f:6b:a7:fa:a0:b2:4b:a1:58:f8:77:f5:81:b0:87:
42:a7:46:34:66:71:26:a5:9c:6f:bc:b9:77:01:54:
30:c0:be:38:45:35:af:81:18:64:12:5f:e3:26:37:
11:11:3c:cf:36:2d:2b:a1:fc:e7:94:9f:3d:e0:6f:
22:ea:67:03:e8:1b:85:0d:6c:c5:6b:d0:0c:e8:48:
6c:13:83:93:9b:8a:0b:0a:7c:39:16:7f:30:b9:e6:
64:ec:84:ca:0c:94:fa:c3:69:9e:3e:25:ed:c2:77:
51:53:54:16:c5:8b:53:f3:fd:ea:17:84:69:9b:f6:
8b:0b:00:ba:a1:50:68:dd:37:2b:1d:d1:d5:2d:2f:
92:af:d4:95:d4:c7:84:5f:4a:4d:3a:66:9b:c8:74:
51:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:D1:31:B9:C9:29:48:40:E4:F0:D0:3F:48:66:DA:D8:84:AD:CF
X509v3 Authority Key Identifier:
keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/B13DE26C980F11EBBA26A90FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.131.0/24
Signature Algorithm: sha256WithRSAEncryption
05:0d:60:e7:a1:20:2e:65:11:f6:c7:9a:9d:ea:e7:6d:f9:50:
6d:d8:45:00:57:59:ba:6d:dc:ec:87:c6:70:2b:bb:02:24:9c:
33:b3:09:5c:1e:60:95:05:64:1d:33:2e:84:55:98:9f:ae:21:
fd:84:b7:38:63:00:ad:b6:56:92:b7:e2:31:5d:dc:47:72:35:
5f:06:ae:46:45:82:58:22:f2:ae:e1:13:e1:2a:f8:8d:ac:4b:
d2:2f:85:b3:1d:33:97:4a:ce:97:ea:7d:24:1e:ea:6c:ea:05:
02:34:00:8c:44:77:54:fa:71:64:cf:04:76:f9:a1:68:6f:51:
e5:d8:de:e6:17:ee:b1:53:57:8c:37:a4:74:28:24:3b:c6:2f:
2b:d7:41:0e:95:b2:a3:84:99:68:c4:23:20:16:67:34:c4:31:
da:8e:44:86:c3:8b:0e:60:c4:95:3d:97:ae:7a:bd:2d:0a:d1:
9d:ab:70:75:1e:46:fe:aa:c7:1f:f5:99:37:55:0d:3a:26:f9:
89:b0:bb:13:fd:36:27:8f:58:81:d8:da:43:d5:ce:08:4f:ca:
45:13:86:54:ed:bc:64:42:e1:a3:d7:a2:04:e1:71:f6:ab:11:
83:ad:27:74:76:8e:60:be:f0:31:39:74:bb:d1:74:08:67:af:
6b:1d:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:17 2024 by rpki-client on console-ams.rpki-client.org