Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/0C9E5E4EFD6711ECAE7B6BE5F1222468.roa
File: 0C9E5E4EFD6711ECAE7B6BE5F1222468.roa (raw, json)
Hash identifier: EKTxFkaOzJxWzoumr8+teaKNzWisi2MX7n6RZKMU1q4=
Subject key identifier: 7E:21:21:2F:BF:40:22:5A:AB:1C:F1:F9:AD:8E:DC:EC:A9:DF:B3:30
Certificate issuer: /CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Certificate serial: 02
Authority key identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
Authority info access: rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/0C9E5E4EFD6711ECAE7B6BE5F1222468.roa
Signing time: Wed 06 Jul 2022 20:05:58 +0000
ROA not before: Wed 06 Jul 2022 20:05:53 +0000
ROA not after: Sat 06 Jul 2024 20:05:53 +0000
asID: 36982
IP address blocks: 137.158.0.0/16 maxlen: 16
192.48.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Validity
Not Before: Jul 6 20:05:53 2022 GMT
Not After : Jul 6 20:05:53 2024 GMT
Subject: CN=62c5eb26-da88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:53:8f:f2:4e:17:ce:32:21:d9:db:4d:fb:4f:
a1:36:a1:02:a8:19:ab:e4:2a:d1:c4:05:86:34:55:
d7:5d:2c:67:29:79:08:dc:36:a5:25:17:78:16:52:
6d:70:79:c8:b8:8a:f4:09:70:74:8e:a7:9b:19:42:
bf:8b:45:88:cf:0f:bc:60:06:1e:3d:d4:d2:ad:c9:
4f:4b:b9:f4:9a:03:52:8a:6a:d2:6a:70:e9:7a:57:
92:b7:44:9c:6a:45:1c:f0:ec:13:42:e7:2f:e9:75:
63:92:eb:65:8c:18:e7:d5:3f:31:87:00:6c:bb:0f:
4f:24:2f:02:ce:78:db:09:a5:84:95:9b:c9:81:4a:
a3:5d:0f:66:32:0e:35:c6:56:a7:82:20:fd:93:fe:
66:8f:0d:75:4a:ae:9d:b6:96:bb:99:22:60:1e:df:
9b:c7:74:56:19:15:48:e9:ae:50:71:d4:3d:1d:61:
fa:ef:87:5b:1f:de:a3:be:95:5d:eb:7b:ec:c2:6c:
70:fc:8b:5d:81:52:fe:74:73:4f:03:87:5d:20:f5:
2b:17:35:f9:d6:cb:f8:07:82:c5:d3:c2:69:1f:d3:
77:b9:01:a9:34:19:69:73:20:0f:16:cd:69:0b:b2:
de:2a:b8:ac:2b:35:0f:2e:b7:62:52:61:76:d7:34:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:21:21:2F:BF:40:22:5A:AB:1C:F1:F9:AD:8E:DC:EC:A9:DF:B3:30
X509v3 Authority Key Identifier:
keyid:62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/0C9E5E4EFD6711ECAE7B6BE5F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.158.0.0/16
192.48.253.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c8:a4:dc:49:79:dd:c8:25:9c:5e:aa:b9:d9:6c:f8:d1:f5:
af:ec:7f:b8:54:87:48:35:3d:95:ce:cb:cd:46:59:fa:5f:6f:
44:1f:b0:89:d4:fd:4c:5f:a0:92:f9:55:fd:cd:e5:11:d4:8b:
54:b0:70:93:57:a9:d7:8c:e9:f3:be:b4:57:39:16:b1:29:ee:
cb:5e:bc:8a:88:19:77:71:54:19:48:d4:5a:bf:bb:f6:b3:c6:
75:bb:1d:45:77:9f:52:30:d6:f8:e3:f1:b8:96:78:18:43:a0:
53:46:8e:5f:69:ed:8c:86:8f:04:05:16:72:c3:55:c4:a9:0c:
c8:b2:33:e0:5a:31:49:90:ab:40:1e:c5:a4:46:21:f7:c2:42:
3c:30:50:38:cc:cf:dd:bd:ca:65:00:22:e3:de:cf:87:2c:d1:
c7:d8:f8:88:67:7a:33:14:d3:67:7c:eb:7d:a5:28:2a:4a:5d:
8f:f7:dd:ae:53:de:9e:e7:68:46:70:7e:96:4e:6a:95:3b:79:
49:00:2d:39:a6:38:67:01:b1:b4:90:4f:eb:71:40:d5:19:f0:
4f:ac:f2:b3:ee:64:df:fb:bf:02:d5:8e:d2:55:1e:d5:b6:6b:
cf:8b:56:dc:62:fe:7a:e4:31:00:b1:54:d7:2a:3d:e8:1d:b1:
99:b7:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:28 2024 by rpki-client on console-ams.rpki-client.org