Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/7F9AB1CC98F711E9BABB4B76F8AEA228.roa
File: 7F9AB1CC98F711E9BABB4B76F8AEA228.roa (raw, json)
Hash identifier: jzZ3XEm/0+bQmIh4jXGZex7PIgjtpornzaVmedGVKeA=
Subject key identifier: 58:4C:96:DC:93:88:05:9F:52:F8:36:3E:29:A7:F2:CF:3A:05:CC:73
Certificate issuer: /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial: 0D
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Authority info access: rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/7F9AB1CC98F711E9BABB4B76F8AEA228.roa
Signing time: Thu 27 Jun 2019 16:20:38 +0000
ROA not before: Thu 27 Jun 2019 16:20:33 +0000
ROA not after: Wed 27 Jun 2029 16:20:33 +0000
asID: 37049
IP address blocks: 165.16.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Validity
Not Before: Jun 27 16:20:33 2019 GMT
Not After : Jun 27 16:20:33 2029 GMT
Subject: CN=5d14ecd6-b724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:bb:87:39:5a:e4:31:d5:f3:cd:29:2e:d0:
4d:eb:09:cc:2c:75:2a:fe:67:d4:0f:ba:60:fe:4d:
3d:d5:9c:54:c7:da:99:8a:f9:c4:e9:95:19:c3:c0:
05:0d:52:d9:1e:b5:35:24:ce:32:2b:a4:e3:20:17:
ba:1a:cc:b6:4d:23:43:08:9e:8b:ea:75:27:89:58:
ad:21:1a:15:a3:44:6a:86:13:9a:13:7f:b7:f1:31:
b2:9b:0c:bc:bc:da:fe:f1:36:f5:e9:65:d1:59:ac:
b0:67:06:62:12:ac:a2:45:15:06:36:79:ac:42:88:
37:12:7d:95:32:15:ad:aa:4f:17:a6:24:88:c7:86:
ee:60:1b:51:fa:62:36:d7:84:32:f0:da:f8:ae:3f:
b1:43:a1:80:db:a3:a1:c3:5c:a1:61:ea:81:41:b7:
bd:1e:ba:f9:c8:5c:d9:17:47:0a:7c:71:39:28:21:
06:ce:d3:6b:3a:48:e0:38:f9:39:da:43:ac:fd:3d:
ce:59:79:5a:d9:bf:d5:9d:83:94:e4:33:d4:2b:fe:
97:33:17:5f:b2:64:b3:9e:c3:cc:8c:65:7a:4c:7b:
ea:58:fc:cd:39:38:4c:35:f1:5c:e9:ba:2b:3a:5f:
06:cd:57:ed:2d:b8:c9:16:f0:23:22:bb:e4:9e:64:
59:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4C:96:DC:93:88:05:9F:52:F8:36:3E:29:A7:F2:CF:3A:05:CC:73
X509v3 Authority Key Identifier:
keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/7F9AB1CC98F711E9BABB4B76F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
165.16.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:fb:19:e6:56:d7:af:91:bf:e0:90:40:47:ac:08:57:fe:4a:
4a:d3:2a:a3:90:ad:aa:2a:6f:e4:32:64:6b:22:b1:10:65:15:
61:1b:ea:76:2d:7f:77:d7:c2:17:cf:c9:a6:16:20:b7:d9:07:
f8:ee:58:11:61:6c:75:b3:c1:44:22:b0:6e:53:6d:04:53:39:
6d:ff:9e:51:b2:d3:42:b6:47:e2:93:c3:26:91:70:d8:ad:59:
b3:42:58:8e:4c:52:28:8a:42:4b:1b:9c:b6:1a:63:39:a0:47:
03:3d:8a:b6:bb:b9:d5:48:4e:58:2f:52:65:28:da:00:25:4d:
db:89:a8:83:dd:bc:28:ac:2a:ef:a6:bc:1b:ee:9d:4e:f3:b6:
13:dc:ad:70:dc:d8:a5:04:36:e0:77:62:43:b9:c7:fd:b6:6b:
68:e8:c9:b3:11:d5:c0:c6:9e:7b:83:69:4e:9c:7a:79:a3:01:
77:a2:9b:c9:75:af:3a:ca:0c:49:e9:76:da:de:df:74:5a:2d:
0e:d9:c9:03:84:d1:02:0b:33:9e:9b:e1:1d:78:44:17:83:86:
e9:86:1e:bc:4f:95:be:7b:5f:98:95:8a:cf:ca:f8:f9:4e:32:
41:71:91:c4:27:f2:07:b2:73:57:ae:02:1c:21:c3:d6:b7:0c:
d0:90:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:24:10 2024 by rpki-client on console-fra.rpki-client.org