Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CC310B4E890C11E9A4E3BF61F8AEA228.roa
File: CC310B4E890C11E9A4E3BF61F8AEA228.roa (raw, json)
Hash identifier: ihADbR6U+GfVQt9LE7QygTkif7rJadS5w63IsgC6psc=
Subject key identifier: 20:82:68:A4:6A:76:49:F0:AB:A9:63:AD:35:21:B3:F5:2F:36:89:7E
Certificate issuer: /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial: 02
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CC310B4E890C11E9A4E3BF61F8AEA228.roa
Signing time: Fri 07 Jun 2019 10:12:47 +0000
ROA not before: Fri 07 Jun 2019 10:12:23 +0000
ROA not after: Thu 07 Jun 2029 10:12:23 +0000
asID: 37564
IP address blocks: 165.49.0.0/16 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 May 2024 00:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Validity
Not Before: Jun 7 10:12:23 2019 GMT
Not After : Jun 7 10:12:23 2029 GMT
Subject: CN=5cfa389f-133c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:e7:5d:3e:42:c0:ef:37:9a:fd:b5:44:b8:
8a:ef:1f:1e:4f:81:c6:9c:f1:05:52:43:a3:ea:c5:
4e:17:ff:86:aa:f3:8f:fe:b7:14:cb:cb:e4:84:2b:
c9:e4:f2:bc:48:c5:f7:94:66:54:4e:9a:b6:81:40:
75:ee:fb:2d:47:73:b6:85:31:05:cc:04:79:55:49:
cb:f0:59:58:0c:d3:00:79:58:4d:f0:d9:9b:12:12:
83:96:25:18:64:8f:f7:4f:f1:dd:90:33:46:d8:f4:
39:82:c4:e8:ad:9f:dc:46:ee:b6:fc:d0:ab:a1:0e:
ca:13:a6:a2:ff:4f:26:6e:e9:91:0c:a1:6e:f0:53:
8f:09:59:c5:c2:eb:b2:ef:67:ee:ec:6a:a9:f4:6c:
97:88:79:99:c2:21:5f:83:be:5d:77:97:3e:4a:59:
ea:45:bc:d8:f4:13:90:26:74:07:72:3f:e0:af:7d:
d2:92:dc:e4:98:a6:36:dd:69:45:b5:23:a7:d1:e6:
6a:00:c5:06:fe:a2:98:dd:71:07:d7:7a:7a:d5:8c:
de:14:80:2b:57:aa:7d:e3:8a:1f:0d:69:a9:23:23:
19:58:fe:a4:b9:76:5e:1d:11:39:89:26:4e:55:41:
76:bd:77:46:29:92:d5:41:65:92:32:d1:1e:48:aa:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:82:68:A4:6A:76:49:F0:AB:A9:63:AD:35:21:B3:F5:2F:36:89:7E
X509v3 Authority Key Identifier:
keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CC310B4E890C11E9A4E3BF61F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
165.49.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:bc:62:d8:1e:2e:18:21:f4:1e:32:5e:ac:59:8f:ef:36:0b:
56:3d:b7:cf:ab:19:58:5c:af:25:fd:20:9e:e5:da:e0:ac:10:
79:29:24:d4:dd:45:2f:d9:6e:3a:8d:40:27:1b:85:66:c5:2e:
23:7b:96:13:d5:36:17:25:c7:60:60:4a:7b:58:c6:02:59:b5:
e2:7c:a5:85:82:58:70:a6:b5:d0:a9:90:d4:bb:84:a9:d8:a0:
b7:18:fa:30:68:8c:ba:e1:79:8d:39:7d:08:25:5e:18:83:da:
dd:32:cf:b5:0c:bf:b7:18:8b:90:f1:17:65:1a:f8:0e:95:92:
3c:c1:78:c8:3d:a1:0f:af:b3:03:c7:53:3b:c7:c7:5b:47:4b:
d0:c0:8a:fa:6b:00:dd:ef:b8:86:6e:9c:a7:67:a6:6d:fc:b1:
26:de:91:e3:ad:ce:c8:a1:c4:66:a3:63:bd:e9:b0:0d:c2:10:
29:3c:11:5a:cc:47:f3:75:ec:bb:53:ae:1f:9d:13:1e:a9:6c:
3f:11:7a:86:7d:17:82:9b:7e:14:0c:9b:c2:d8:24:ac:cb:06:
ed:fd:14:55:86:29:e5:ee:6f:35:b0:35:d5:9f:ef:a5:ae:32:
a4:23:00:35:c0:d9:0b:77:9e:1c:9a:06:9f:9a:f9:44:60:17:
3c:3e:30:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 01:46:23 2024 by rpki-client on console-fra.rpki-client.org