Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/B32A916634CB11EC91E8381FD8A014CE.roa
File: B32A916634CB11EC91E8381FD8A014CE.roa (raw, json)
Hash identifier: Ako58dvr9p2mu2R6lcC74fzMNZG9yTVmN+Tw72w4YR4=
Subject key identifier: 18:0F:D5:F6:24:CE:A7:38:25:8D:3B:3D:D5:6B:90:D7:75:47:E5:0E
Certificate issuer: /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial: 1A
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Authority info access: rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/B32A916634CB11EC91E8381FD8A014CE.roa
Signing time: Sun 24 Oct 2021 13:10:03 +0000
ROA not before: Sun 24 Oct 2021 13:09:58 +0000
ROA not after: Thu 24 Oct 2024 13:09:58 +0000
asID: 24691
IP address blocks: 160.242.192.0/18 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 May 2024 00:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Validity
Not Before: Oct 24 13:09:58 2021 GMT
Not After : Oct 24 13:09:58 2024 GMT
Subject: CN=61755b2b-3db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:e0:c5:f0:0c:47:4a:9c:d4:97:ca:ce:9b:
c8:20:cb:dd:16:32:7c:6e:18:93:e4:6e:d1:b2:94:
c2:1e:90:6c:5b:b2:12:7c:21:f2:23:a0:b1:af:a2:
97:f8:b2:eb:40:ba:3b:3f:c6:5e:d4:db:3f:77:76:
a9:70:cf:c2:78:13:3c:10:49:b5:e0:c9:24:86:56:
48:ac:45:7c:f6:af:fc:ec:1a:8c:a4:50:df:c4:d6:
12:db:b5:e5:87:b3:1e:79:24:f0:4a:d2:4c:00:92:
4e:a2:bc:30:76:f2:22:5b:ba:0e:1d:d9:72:ec:01:
34:36:b3:6b:aa:4b:d7:ac:62:0c:50:76:4a:6e:be:
6e:0b:c7:5e:96:b0:cf:35:87:27:2f:c4:d1:55:c5:
5a:43:83:fe:73:01:18:54:24:7a:69:fd:41:fb:aa:
49:10:ea:88:70:94:0e:6d:1b:94:fe:dc:5c:eb:26:
72:2d:ee:0a:15:eb:47:1b:26:d7:3e:72:1a:e1:2f:
44:94:33:70:4d:2c:ef:70:37:77:2d:bf:d4:83:d9:
85:9b:d4:2d:45:96:2d:bb:fa:21:01:bf:7d:7b:c4:
58:ca:56:be:79:e6:5f:b5:3b:7f:67:eb:a7:00:6d:
02:62:a7:02:b1:db:50:ed:20:c2:d6:b9:86:2b:88:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:D5:F6:24:CE:A7:38:25:8D:3B:3D:D5:6B:90:D7:75:47:E5:0E
X509v3 Authority Key Identifier:
keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/B32A916634CB11EC91E8381FD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.242.192.0/18
Signature Algorithm: sha256WithRSAEncryption
70:5c:b8:2c:73:1e:a7:a0:f7:06:2f:4c:7e:51:cf:8c:3d:74:
70:5b:8f:50:3f:f0:35:21:8c:aa:e3:eb:31:b5:02:f8:4f:70:
2a:70:bc:db:e6:9c:ee:7d:bc:cc:e7:c6:7d:97:da:a4:37:b4:
c9:2f:be:e6:28:8b:56:4b:9c:2f:e1:01:75:9b:d5:b6:17:6f:
25:e6:c8:f9:dd:37:7a:61:e5:14:fa:95:29:74:b1:f4:13:d5:
37:fa:50:d4:6e:75:e6:61:1f:44:f0:9f:30:b9:f2:38:31:1f:
b2:5b:33:1e:c0:43:6e:08:48:79:a5:57:0b:2d:e9:e0:e2:f4:
5c:2d:17:78:5a:34:a5:ea:c9:e2:db:a1:ce:c0:32:2b:59:f1:
0b:72:9f:01:26:a9:0f:ef:09:66:14:18:61:4d:68:a7:c1:23:
b5:cb:91:87:98:db:e1:be:38:23:d4:74:58:f3:ad:97:f9:25:
cf:7b:a3:e1:53:8b:6b:4c:1a:67:e3:b9:cb:96:6e:5d:bd:4c:
8e:b6:11:18:46:15:47:76:78:d5:c7:6d:2e:39:66:eb:e0:8b:
bb:58:6f:74:14:16:95:34:2b:19:1a:8a:24:a2:f1:3a:b0:e7:
18:e9:0c:5c:7d:9c:ed:a7:f7:29:c7:12:85:59:1c:37:33:e4:
84:0b:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 02:40:29 2024 by rpki-client on console-fra.rpki-client.org