Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/55A993D69F8811EA97099D3BF8AEA228.roa
File: 55A993D69F8811EA97099D3BF8AEA228.roa (raw, json)
Hash identifier: +ElbU+52e+mg4AC3l85DIIIn/EFrafBGdzVbGsEBQHw=
Subject key identifier: A2:45:A1:22:3A:CE:06:6D:9B:23:B4:C0:A7:19:04:48:12:D2:02:DB
Certificate issuer: /CN=F36B1FB2AR/serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
Certificate serial: 04
Authority key identifier: 5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41
Authority info access: rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/55A993D69F8811EA97099D3BF8AEA228.roa
Signing time: Tue 26 May 2020 19:37:30 +0000
ROA not before: Tue 26 May 2020 19:37:25 +0000
ROA not after: Tue 31 Dec 2030 19:37:25 +0000
asID: 327981
IP address blocks: 169.239.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AR/serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
Validity
Not Before: May 26 19:37:25 2020 GMT
Not After : Dec 31 19:37:25 2030 GMT
Subject: CN=5ecd6ff9-353b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:43:1f:c9:82:8b:08:ef:8e:49:ec:d6:7a:
d5:fd:b4:f2:0e:20:6e:25:87:d2:00:af:ab:62:67:
e2:ac:4b:a4:8c:c5:57:65:88:9f:e7:f7:b6:a3:24:
42:30:07:eb:70:89:77:27:ec:60:ee:94:c6:31:3e:
01:2b:f0:9d:23:b8:11:19:5c:a7:91:3c:eb:c5:e3:
5b:11:bf:34:e2:c7:31:c6:bb:58:ac:78:39:74:a5:
48:c4:c4:25:4f:68:c8:f0:39:56:ef:5a:d6:3f:43:
a7:3f:12:5f:61:f1:ae:38:cc:ae:c4:18:95:27:22:
1b:a2:87:54:3e:8a:7b:43:0d:f4:5a:16:0c:7a:70:
b4:c6:be:70:0c:68:38:4a:f9:e6:ee:3d:b7:0b:4c:
3a:32:ee:c0:12:c8:ce:7e:1d:e3:e6:ab:b1:b7:08:
20:af:20:77:d7:91:06:9e:98:74:0b:cd:df:08:f4:
ca:cb:d8:40:97:65:ee:cc:f8:57:42:17:44:e4:90:
b8:9a:92:a2:6a:01:93:ca:8f:e3:29:17:f4:e3:7e:
61:1a:d6:04:06:c6:29:3e:c0:68:0e:69:1e:f5:e0:
cd:36:b5:55:59:8d:63:2b:b7:af:87:c5:95:60:20:
e2:0c:11:97:af:f2:ee:f9:8d:dc:09:2c:0d:a2:49:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:45:A1:22:3A:CE:06:6D:9B:23:B4:C0:A7:19:04:48:12:D2:02:DB
X509v3 Authority Key Identifier:
keyid:5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/55A993D69F8811EA97099D3BF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.16.0/22
Signature Algorithm: sha256WithRSAEncryption
06:3b:b1:3a:41:05:6f:44:11:61:81:1c:82:f6:2d:04:07:dd:
80:6a:ef:44:db:75:de:b9:49:1c:92:84:a3:fd:92:4b:0b:9b:
81:d9:1a:e6:ca:05:10:b2:f2:55:00:f0:20:f8:0d:cc:cf:d0:
07:b1:22:ad:07:cb:64:ef:c9:dc:52:67:41:bb:9d:ec:dc:09:
08:b6:dc:a1:40:92:37:f4:81:6c:88:9f:a4:63:8f:0a:90:46:
03:c3:b0:33:b4:2e:1f:b7:76:bf:00:e3:fc:fe:f1:7e:3d:fc:
a4:c9:a3:fa:eb:94:63:41:8d:10:24:75:80:09:84:3e:d8:69:
91:ea:d4:93:a7:ec:f4:1b:b8:d7:18:d3:ff:23:02:cc:6a:7c:
69:6c:7b:63:ad:6e:68:41:45:5e:36:36:c7:0d:43:bc:ba:22:
66:a7:27:4f:c0:c0:9e:ca:5b:aa:2e:df:67:b4:cf:84:ea:80:
1d:e4:60:e4:93:73:78:97:96:dc:a3:3c:e3:45:87:3c:b3:b9:
a6:2a:e8:24:0e:2e:7a:3e:ad:20:4b:52:3d:6a:0b:7f:aa:57:
1b:fa:44:3b:5e:0f:d3:8b:2e:16:b5:90:9a:e5:53:11:3b:8f:
81:63:a0:69:1f:a9:fd:33:c1:4f:a6:61:73:35:35:13:00:07:
1d:bc:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org