Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/A6E483ACF13D11EBB28E971FD8A014CE.roa
File: A6E483ACF13D11EBB28E971FD8A014CE.roa (raw, json)
Hash identifier: tXqfjeHuKCyrjlrfXizxneaHbdNneJ3cppKugGAFdHI=
Subject key identifier: 36:24:D0:F2:EE:29:4C:99:91:2E:BD:C8:3C:E6:2A:C3:D0:20:B8:61
Certificate issuer: /CN=F36A1CEFAR/serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Certificate serial: 05
Authority key identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
Authority info access: rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/A6E483ACF13D11EBB28E971FD8A014CE.roa
Signing time: Fri 30 Jul 2021 13:54:49 +0000
ROA not before: Fri 30 Jul 2021 13:54:38 +0000
ROA not after: Thu 31 Jul 2031 13:54:38 +0000
asID: 37645
IP address blocks: 129.122.128.0/17 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A1CEFAR/serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Validity
Not Before: Jul 30 13:54:38 2021 GMT
Not After : Jul 31 13:54:38 2031 GMT
Subject: CN=610404a9-644c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:4f:13:48:86:2a:89:16:84:31:e1:66:a8:
cc:1a:3d:dd:19:fb:eb:a1:11:5b:0a:80:47:c1:f0:
9e:e6:37:2b:b0:c8:98:06:91:3a:95:7a:65:c0:2c:
e2:bf:58:8c:87:b9:02:23:5c:b2:10:97:23:65:0c:
3a:8a:76:10:bd:d1:d1:42:03:ad:a1:ca:ca:9f:27:
a3:f7:5c:02:15:36:d2:5b:45:af:07:ad:e7:96:c4:
97:3d:16:9b:b9:7a:93:0f:bd:00:64:f5:f7:76:7d:
54:89:ff:4b:c6:d5:5f:d8:9e:a5:a2:5f:89:f3:e3:
2a:d5:22:81:f8:f8:fc:15:a9:f4:e9:ee:e4:d3:43:
03:ce:1e:dd:5f:b7:fc:b6:5b:18:36:b7:bc:aa:00:
af:de:e4:9c:1e:6c:82:69:52:2b:5b:8b:0b:90:9e:
a3:23:fd:d3:03:12:44:51:67:4d:69:9e:63:79:8f:
bd:52:47:f9:66:e2:c2:3c:07:4b:1f:52:81:22:90:
96:ad:0b:76:39:16:7f:e9:a8:3e:1d:b3:e1:5e:1d:
33:82:d1:92:41:c7:ed:68:17:6b:5e:61:0f:3d:54:
62:64:09:bc:15:ba:fa:75:7d:4b:cd:91:ee:0d:51:
a8:8e:c0:10:a9:70:89:9b:be:18:ee:00:28:dd:0c:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:24:D0:F2:EE:29:4C:99:91:2E:BD:C8:3C:E6:2A:C3:D0:20:B8:61
X509v3 Authority Key Identifier:
keyid:0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/A6E483ACF13D11EBB28E971FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
129.122.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8d:3c:82:72:f2:3a:85:5a:8d:ac:f2:82:f6:cd:aa:48:92:10:
82:4a:95:45:3e:66:9f:81:b1:c4:f0:d3:70:23:e4:d8:18:2f:
5e:2c:f9:d5:fc:d2:bb:b0:e6:53:d8:41:6e:df:66:ec:6f:76:
74:7c:2e:6b:47:9f:42:c1:fb:cb:4e:b3:76:25:6e:ba:1b:35:
40:7b:79:0f:63:50:6f:0e:81:94:31:f0:3b:34:ef:5d:1a:13:
ab:92:0f:a8:3b:a0:2e:f0:44:07:ce:10:c4:f7:69:5a:88:54:
8c:a0:09:a1:c4:50:f0:63:3b:ca:09:1b:d6:1c:9c:57:2c:db:
47:82:d4:cb:9b:3e:b4:6c:a5:32:a3:dd:61:8e:05:99:bc:a5:
da:b2:14:0f:70:48:97:8f:b6:00:3c:ca:e5:8c:e5:d2:90:5c:
65:42:e2:b1:a0:ba:e8:b0:0a:44:d3:bd:cc:43:02:c7:ca:3e:
fb:63:06:ad:b0:f6:f2:1f:25:e2:5a:9e:e1:a5:27:cb:09:fd:
4f:7d:34:a5:88:75:84:c0:cc:9c:83:c9:c4:74:ac:ab:23:ac:
8c:f9:d6:91:5a:73:d9:e2:34:17:a1:2a:ab:3a:f4:5e:dd:9f:
69:9f:ba:2b:e1:f4:15:87:a7:9e:2e:ee:73:29:68:c9:0d:00:
d3:59:14:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:35 2024 by rpki-client on console-fra.rpki-client.org