Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/0D036F94D33B11EF941C0BBC762E951A.roa
File: 0D036F94D33B11EF941C0BBC762E951A.roa (raw, json)
Hash identifier: EIHN0q7Gf2yEMmUmQTz3WgcUrSDB0YHCZOvy1CApRc0=
Subject key identifier: 8A:05:0B:23:05:32:E8:11:2D:7E:45:2B:4C:FB:E9:60:5F:60:2C:4B
Certificate issuer: /CN=F36A413FAR/serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
Certificate serial: 02
Authority key identifier: 27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
Authority info access: rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/0D036F94D33B11EF941C0BBC762E951A.roa
Signing time: Wed 15 Jan 2025 12:20:05 +0000
ROA not before: Wed 15 Jan 2025 12:20:01 +0000
ROA not after: Tue 26 Jan 2027 12:20:01 +0000
asID: 41095
IP address blocks: 169.239.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A413FAR
Validity
Not Before: Jan 15 12:20:01 2025 GMT
Not After : Jan 26 12:20:01 2027 GMT
Subject: CN=6787a7f5-9a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:80:44:1b:07:d4:fd:16:22:f0:ec:e9:ac:63:
fc:fe:a9:93:67:b9:e9:37:c8:f8:b9:03:a7:6a:93:
bf:85:cd:0c:82:58:dd:3e:37:10:ce:d1:90:ed:1b:
50:a7:23:16:9d:d0:ed:a3:57:9a:fc:38:64:2e:7a:
9f:a1:c7:28:ec:d2:67:97:6f:aa:2f:4e:f9:5e:b8:
7e:00:03:4b:fe:3c:57:53:48:ba:6d:a6:28:09:bf:
e9:97:48:1f:e7:fa:28:3e:c9:ba:5e:ce:2b:5e:7c:
47:fc:27:b7:3e:33:a5:6a:98:3b:01:87:6f:b3:22:
cc:13:4e:09:11:dc:41:29:2a:e7:da:14:5b:3d:8e:
2d:b4:66:9e:7b:0f:35:8c:74:0b:1b:5a:f8:b6:c4:
26:f3:5e:8e:ad:63:8e:80:0d:dd:15:15:27:45:2d:
58:89:69:45:05:4b:0a:86:cb:64:b5:5f:7f:7b:cc:
65:27:d5:a6:54:ba:a8:b8:70:ef:e5:e8:59:d5:21:
dc:da:ea:81:c7:21:ee:74:f7:a6:9f:4a:ab:de:15:
be:5f:21:25:d3:72:e5:db:3f:5a:c8:36:a7:c8:91:
09:ae:95:a6:39:49:40:c2:cb:2c:9b:0c:31:02:48:
cc:ac:57:47:22:1e:26:70:03:22:3d:e6:d9:dd:a1:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:05:0B:23:05:32:E8:11:2D:7E:45:2B:4C:FB:E9:60:5F:60:2C:4B
X509v3 Authority Key Identifier:
keyid:27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/0D036F94D33B11EF941C0BBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:8a:62:f7:bc:7e:1d:86:f9:c5:55:2f:a3:28:56:39:7b:84:
c9:58:bf:1d:2d:7e:e4:27:a8:69:9e:11:f9:ee:00:cd:99:23:
c0:e6:0f:64:16:f3:a4:5d:32:4a:ae:bd:5b:57:7c:e9:00:1b:
5c:e7:d7:de:9d:2e:8c:ac:05:ec:0a:a2:2d:f2:65:54:96:72:
4c:f5:dd:77:c1:6e:44:70:46:0c:20:cc:e0:44:f0:07:15:6c:
6e:38:e0:7c:ea:06:3f:e6:33:9b:1d:4a:a6:5b:5e:3f:7e:38:
43:24:6a:3b:fd:5e:d5:ae:80:59:4a:cf:c5:a4:50:b3:77:d0:
46:88:af:e0:80:52:91:3c:8f:35:a6:72:c5:a2:ec:dc:24:a4:
b3:04:f0:a0:ed:43:8a:62:8f:6c:42:b1:d8:e2:1c:85:ec:04:
e3:e0:65:3d:37:65:8d:ff:c4:b2:78:c2:59:54:67:fb:f8:d8:
b4:1d:be:0e:6a:fd:18:bc:f8:67:3f:5d:6b:29:48:af:3e:a8:
2c:ba:67:71:b1:ff:45:91:c5:7e:26:40:09:85:1e:2a:0e:bc:
d8:b6:db:85:a1:92:1b:c6:9b:fb:43:b9:a2:62:6f:50:8c:dc:
1f:cd:d8:9c:a9:e2:2a:ba:62:04:45:53:e5:5d:52:cc:12:3d:
b5:f1:a6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 20:34:04 2025 by rpki-client