Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/0082F736DC8711EE9B6F438D775412E6.roa
File: 0082F736DC8711EE9B6F438D775412E6.roa (raw, json)
Hash identifier: gPnQQXx70Y2ddIwRW0ObF7I18AodcTUvoGEmgpDrwUo=
Subject key identifier: C8:AF:EF:83:FC:C1:C6:E9:8B:A4:68:46:35:D2:82:84:A6:44:BD:CE
Certificate issuer: /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial: 06
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Authority info access: rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/0082F736DC8711EE9B6F438D775412E6.roa
Signing time: Thu 07 Mar 2024 13:31:28 +0000
ROA not before: Thu 07 Mar 2024 13:31:25 +0000
ROA not after: Fri 07 Mar 2025 13:31:25 +0000
asID: 37613
IP address blocks: 169.239.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 30 Jun 2024 00:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Validity
Not Before: Mar 7 13:31:25 2024 GMT
Not After : Mar 7 13:31:25 2025 GMT
Subject: CN=65e9c1b0-eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:58:95:e1:c5:e8:b7:38:46:5d:91:a0:b7:
d7:41:ac:e5:d0:7a:e0:19:5a:0d:74:0e:f5:6c:6e:
21:17:ea:32:09:a7:95:00:be:a2:1c:19:30:58:b0:
57:67:e5:f9:33:91:af:6a:d6:6e:7c:f4:7d:63:ed:
3a:c4:e1:21:2e:45:a3:0f:f4:8c:25:38:f0:3d:87:
80:a9:34:a4:7a:0c:33:91:f6:3e:5b:1f:71:c8:3d:
42:9c:73:34:91:66:bf:1a:b9:99:7c:dc:b4:3f:7c:
86:ce:ce:05:a5:7b:b8:d3:f2:f3:59:d2:0a:60:96:
aa:72:12:08:c2:b2:13:48:84:b7:e5:e9:34:3d:12:
9e:b0:55:5f:53:7b:cb:e2:43:14:00:23:cf:6a:1a:
a7:67:14:85:4e:bf:a5:44:8d:d3:7b:b1:79:93:0c:
e0:ff:f6:1b:01:d9:7b:27:54:e0:47:d5:a7:c9:5c:
7d:b1:58:ab:ec:2f:df:5a:30:cc:e3:87:ba:25:01:
02:46:f2:b6:9a:14:ac:65:00:c3:3b:0c:79:b6:62:
9f:cc:f0:b4:d9:66:54:e7:64:4b:90:a0:6e:13:2d:
6f:46:23:0b:5b:f7:0d:43:ff:70:26:79:d3:fc:73:
33:0d:15:be:18:16:52:57:ad:02:94:79:c3:ee:9a:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AF:EF:83:FC:C1:C6:E9:8B:A4:68:46:35:D2:82:84:A6:44:BD:CE
X509v3 Authority Key Identifier:
keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/0082F736DC8711EE9B6F438D775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2e:1d:eb:d6:6f:ff:c0:f8:70:23:99:f0:00:e2:88:9e:df:
3e:34:ff:e2:c1:84:ff:d8:29:10:73:0f:a2:da:ef:e5:5c:d2:
67:49:94:cb:5f:02:e9:12:3d:04:46:49:89:7e:98:2e:79:55:
8c:fd:0e:63:94:b4:0c:9c:61:c8:56:13:1f:f1:73:ea:6d:a6:
3b:29:73:af:31:a7:84:37:33:ba:77:8f:5f:4a:2f:a9:9d:4c:
4b:e4:3b:a7:d1:d1:d2:65:92:88:1d:dc:14:5e:8d:0f:50:a9:
f7:53:13:f2:0c:f6:ad:ee:8d:ef:bb:37:e9:7c:28:2b:dc:d5:
41:a3:32:0a:fa:38:ca:3c:eb:c6:27:ea:9a:c0:7a:cb:23:84:
09:5a:97:c6:76:b8:f0:36:0b:a2:87:bb:10:ea:90:d2:e3:f9:
2b:4a:ac:50:31:32:7b:59:b6:84:3a:11:2c:e8:cb:c2:56:2a:
a9:f7:b1:29:55:dd:1c:49:90:fb:3d:49:17:c9:78:47:89:50:
89:fb:5e:f3:29:46:56:02:5e:66:91:03:3a:9a:d8:00:06:27:
fc:cd:fd:f1:74:84:1f:52:9b:16:c5:9f:72:40:42:1d:53:d0:
66:e6:23:be:e0:31:45:3d:3b:30:b6:e3:cd:e0:d9:61:47:ea:
89:a7:1c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:56:03 2024 by rpki-client on console-fra.rpki-client.org