Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/D68FB06AEEC011EB8A6E3C44D8A014CE.roa
File: D68FB06AEEC011EB8A6E3C44D8A014CE.roa (raw, json)
Hash identifier: FZohHGP60efclGdlHNaaNbxSbBTri6OJhgg/NinDFR0=
Subject key identifier: F8:00:90:EE:46:DA:95:1F:31:F5:FC:FB:E0:97:B5:72:98:EC:38:15
Certificate issuer: /CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
Certificate serial: 05
Authority key identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1
Authority info access: rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/D68FB06AEEC011EB8A6E3C44D8A014CE.roa
Signing time: Tue 27 Jul 2021 09:56:15 +0000
ROA not before: Tue 27 Jul 2021 09:56:06 +0000
ROA not after: Thu 27 Jul 2028 09:56:06 +0000
asID: 328252
IP address blocks: 156.0.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 May 2024 00:16:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
Validity
Not Before: Jul 27 09:56:06 2021 GMT
Not After : Jul 27 09:56:06 2028 GMT
Subject: CN=60ffd83f-d45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:8d:63:fa:29:59:0b:66:16:39:9d:0f:6a:
30:f9:b5:c3:8c:37:db:0f:59:a6:a6:9e:6c:dd:ea:
2c:46:04:5f:97:73:2d:0b:03:ac:00:0d:9d:7d:f2:
a3:6a:9f:ab:1a:17:26:66:ec:1c:e4:a8:31:39:90:
ea:58:51:50:ee:03:1a:1e:88:33:a7:cc:d6:56:18:
bd:4f:48:4d:d2:48:4a:5e:51:e8:91:b5:1a:8a:dc:
07:be:e1:75:fe:a1:21:17:a0:4a:76:5d:ae:37:54:
5b:c4:66:cb:71:48:20:8c:a8:50:fe:19:b9:b7:70:
97:88:60:60:a5:98:d9:c9:93:25:98:80:a2:2c:3d:
f3:17:6e:13:67:97:b0:76:47:c7:7e:82:4a:cf:36:
ff:56:09:0f:6e:7c:ac:bc:e8:5f:4b:59:8b:2e:8b:
de:d1:fe:68:e6:32:66:e7:c5:41:99:f1:de:a6:d2:
77:b4:db:02:18:54:b5:49:c7:b4:bd:4b:9d:ea:3a:
a4:09:28:ae:14:d2:12:7a:5a:06:81:77:b3:77:cf:
d4:94:a8:a6:62:e7:df:f7:dd:72:78:48:aa:44:b4:
8f:e3:46:46:db:75:ba:d0:c5:aa:0b:3b:50:36:48:
28:ec:a4:85:c7:0a:27:f0:ab:75:20:d4:ac:a2:3b:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:90:EE:46:DA:95:1F:31:F5:FC:FB:E0:97:B5:72:98:EC:38:15
X509v3 Authority Key Identifier:
keyid:DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/D68FB06AEEC011EB8A6E3C44D8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.0.80.0/22
Signature Algorithm: sha256WithRSAEncryption
75:59:51:8c:f4:a2:31:46:42:3d:f0:b3:29:85:f9:89:65:c1:
b8:7c:50:a4:64:fc:ad:61:d2:2f:2c:f3:ef:bb:de:90:a8:a9:
b2:06:cb:d7:76:cd:ae:66:6e:0c:b6:96:c6:88:6d:ed:7e:66:
6a:d6:b5:26:9f:de:a8:2b:c5:3b:b8:c3:16:6d:0d:61:93:f9:
3b:61:7b:69:73:8a:9d:dd:59:e2:9b:01:64:53:a7:82:e9:ae:
f9:f2:c4:cd:b1:4e:1e:0f:38:40:27:e8:84:cd:56:5d:f8:ca:
6a:f7:94:ea:e8:8f:1c:6c:d3:68:c7:1c:99:39:cb:af:91:af:
5f:53:71:dc:89:8b:eb:b3:96:e9:dd:22:34:d3:83:75:d1:77:
64:79:d2:a6:bd:c2:ea:0e:dd:23:89:58:34:60:b5:a1:3f:a3:
8c:e1:c6:e0:bd:1e:ad:e8:d7:28:bc:d5:e2:53:a6:72:b4:d5:
2a:c0:cd:3d:c0:3a:a5:a5:78:5d:78:8b:57:68:89:88:e8:fb:
7a:80:b9:38:6b:09:39:28:6e:12:46:a8:53:81:35:22:5a:52:
b9:71:2e:c2:96:ca:37:f4:cb:e1:44:7c:65:73:89:80:57:5c:
0a:f4:9e:18:db:ee:19:8e:bd:b3:8b:54:8d:bc:ab:f9:4f:dd:
b3:da:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 04:38:21 2024 by rpki-client on console-ams.rpki-client.org