Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/9965A5A606AE11EA96066744F8AEA228.roa
File: 9965A5A606AE11EA96066744F8AEA228.roa (raw, json)
Hash identifier: wIbFP7nt0VapeRtyrT6a4GxS47/3LZ5/NRY7qSwEjUk=
Subject key identifier: 9C:DD:67:F9:A9:F9:13:3D:A6:97:AD:33:58:A8:A4:CA:12:4E:C5:74
Certificate issuer: /CN=F36A15D5AR/serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
Certificate serial: 5C
Authority key identifier: A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
Authority info access: rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/9965A5A606AE11EA96066744F8AEA228.roa
Signing time: Thu 14 Nov 2019 07:15:56 +0000
ROA not before: Thu 14 Nov 2019 07:15:41 +0000
ROA not after: Mon 31 Dec 2029 07:15:41 +0000
asID: 37722
IP address blocks: 169.255.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A15D5AR/serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
Validity
Not Before: Nov 14 07:15:41 2019 GMT
Not After : Dec 31 07:15:41 2029 GMT
Subject: CN=5dccff2c-e1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:14:87:11:45:72:99:b4:55:6e:54:62:f5:
7e:41:73:a7:96:42:73:f3:42:92:cd:7a:8b:b2:e1:
bc:a0:30:02:b5:75:15:15:d8:5a:a1:2f:ba:9c:47:
15:8c:ce:d5:a5:cf:22:c0:c9:c4:ec:f6:b5:4f:5d:
47:04:f5:da:32:c7:3d:18:b5:91:e4:ec:7b:43:77:
5e:69:26:42:14:94:8e:1d:32:bc:a0:2a:2c:0b:a4:
4d:7a:77:50:27:14:83:b9:3a:96:2c:f5:e6:fc:36:
3f:7f:3a:1f:29:70:96:bf:8f:49:a9:c4:8c:3b:47:
b3:c1:55:43:4e:7b:37:4e:fc:c9:60:61:04:85:f5:
e1:43:c2:98:83:f7:fb:d2:bd:83:ec:cf:b9:63:db:
95:ef:57:a5:00:18:5c:8f:e1:2f:37:b0:15:6b:3a:
81:93:cc:39:de:70:91:6e:f5:7a:9a:7b:c7:13:17:
d3:66:cb:c7:ba:02:a8:22:ee:0f:e7:32:0c:e2:ff:
42:5a:42:b2:15:81:9b:45:4c:49:ed:fb:39:21:58:
60:6b:2b:1a:d4:25:cb:13:20:82:4c:3e:f8:07:52:
7f:37:fc:3c:66:2d:f9:43:ca:aa:ad:73:21:09:48:
e7:96:f5:fb:00:72:6a:6d:89:80:62:2a:c8:cf:ba:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DD:67:F9:A9:F9:13:3D:A6:97:AD:33:58:A8:A4:CA:12:4E:C5:74
X509v3 Authority Key Identifier:
keyid:A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/9965A5A606AE11EA96066744F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
169.255.160.0/22
Signature Algorithm: sha256WithRSAEncryption
67:e2:bf:a2:63:10:f0:22:af:6e:2f:f0:aa:8c:3d:1e:76:8a:
2d:52:d1:f5:a8:04:d6:ed:2d:c2:bb:97:89:76:8c:e2:f7:d9:
08:ba:b6:da:d4:18:10:1e:1c:e4:ff:b4:34:4a:13:18:f7:ff:
9c:ae:12:ec:5b:db:2b:a0:12:7f:d6:bd:ed:81:c5:a3:7e:58:
82:71:30:ed:dc:2a:60:ad:50:22:6b:87:21:42:96:b9:59:54:
a6:14:62:24:a9:0c:fc:51:ed:46:8a:52:53:61:c0:45:f1:96:
0a:16:a3:cb:d8:d5:0d:b1:31:2b:aa:14:d3:a6:c6:f7:71:2b:
41:7a:a3:58:2d:de:e9:aa:50:10:f4:cb:20:ff:90:57:90:67:
f1:12:dd:ae:be:d3:a1:ac:65:84:72:d4:3d:b9:4a:2a:34:53:
8b:c7:c2:12:35:c5:ce:07:ba:14:1a:3a:04:13:c0:23:23:38:
75:b1:c8:01:2a:98:da:2e:d7:87:6e:9f:88:5f:bb:e4:ed:36:
1f:a1:c9:0e:aa:9a:ca:ca:20:9e:b5:7b:f7:dc:9b:21:49:42:
cd:7f:08:3e:ca:44:4e:aa:7f:7a:15:13:97:1b:85:f6:be:dd:
22:09:fb:30:60:c4:61:91:e3:e2:8b:c3:94:cd:1b:e3:75:64:
fa:a2:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org