Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/3F18B4E0E05B11E984349E67F8AEA228.roa
File: 3F18B4E0E05B11E984349E67F8AEA228.roa (raw, json)
Hash identifier: A3h1jvIiffMyyYM7oTFwOntQusq5M0Eo+s2FIvhhGVY=
Subject key identifier: CA:27:7C:B3:51:A1:17:43:5C:B6:4D:D4:89:75:66:B1:A8:8E:28:8E
Certificate issuer: /CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Certificate serial: 8C
Authority key identifier: 15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
Authority info access: rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/3F18B4E0E05B11E984349E67F8AEA228.roa
Signing time: Thu 26 Sep 2019 12:43:32 +0000
ROA not before: Thu 26 Sep 2019 12:43:27 +0000
ROA not after: Thu 26 Sep 2024 12:43:27 +0000
asID: 327804
IP address blocks: 160.119.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140 (0x8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Validity
Not Before: Sep 26 12:43:27 2019 GMT
Not After : Sep 26 12:43:27 2024 GMT
Subject: CN=5d8cb274-3efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:bb:2c:2e:6b:50:d4:6c:ae:f2:38:2e:7f:
91:22:f5:64:63:85:e5:a2:7b:ab:12:2f:1a:fc:46:
cd:72:a3:52:84:52:e5:d6:8e:73:ff:f0:57:5d:9e:
33:df:1e:0b:80:19:c3:0c:6f:96:51:07:00:58:2b:
53:7b:b4:a6:ef:a4:0b:58:4b:1b:2f:55:b9:29:5c:
e7:41:bc:37:36:93:61:ac:9b:4b:78:f2:e6:0e:50:
30:f2:e5:6e:c0:93:20:d6:9e:e3:c4:5a:ca:c9:eb:
3d:37:82:42:9e:d2:1c:04:37:1c:42:f9:58:f5:23:
08:7d:54:70:d3:0d:5b:82:5c:7c:11:54:ee:7b:1a:
52:de:71:51:5e:fa:75:82:50:97:5d:a3:e1:39:f6:
f7:d7:cf:5b:d5:6e:1b:c0:6f:b9:dd:8e:03:f8:37:
83:b9:be:09:a2:0a:93:fd:94:02:2f:15:88:a6:71:
e3:4b:fb:84:da:4a:b0:5b:44:ed:3f:95:8d:3d:1a:
57:43:d5:33:bd:58:cd:db:55:5e:0a:6a:0f:c2:45:
e1:d4:80:d6:62:8c:8b:96:6d:45:59:ac:fe:6f:a8:
66:bb:82:45:02:97:f6:5e:75:2c:de:f0:af:cf:30:
7d:93:01:11:6f:8c:fa:d1:eb:57:b8:86:b5:f8:e7:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:27:7C:B3:51:A1:17:43:5C:B6:4D:D4:89:75:66:B1:A8:8E:28:8E
X509v3 Authority Key Identifier:
keyid:15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/3F18B4E0E05B11E984349E67F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
160.119.48.0/20
Signature Algorithm: sha256WithRSAEncryption
06:6f:d3:f9:dd:2c:65:0a:d3:6b:17:d5:2e:d1:7c:0d:26:68:
a5:39:fc:35:08:ca:ca:1f:71:0e:9a:ae:8a:2f:9f:75:ba:7d:
3c:9d:6a:62:14:73:e7:03:27:ac:fc:d3:f9:be:8f:06:73:a5:
2a:20:71:05:ce:23:57:12:62:66:29:49:12:9b:9c:f6:13:7b:
9e:d7:98:1b:1b:de:35:4a:c2:33:24:ac:a2:e2:2f:67:df:d0:
27:59:d4:9f:24:3f:32:70:89:4f:86:9f:a8:71:1b:46:9f:07:
37:ec:c9:06:4d:b7:71:97:57:2e:95:11:a9:02:33:b8:56:f6:
04:1f:11:5d:74:d7:4b:d5:b8:82:f0:14:3d:9f:ab:bb:7a:75:
9d:64:f6:fb:2d:29:31:c6:08:c0:a5:5b:d3:4a:d8:8a:eb:ef:
32:62:f9:68:2c:5b:86:a4:02:79:58:d1:83:c6:4b:c8:d8:ce:
a9:25:09:54:96:eb:96:c3:64:8a:23:81:be:9c:1d:79:61:3d:
67:f0:5e:11:ba:3e:4a:2a:69:fb:9b:64:de:51:95:18:4c:c9:
9b:44:b8:e2:9d:43:9c:2b:10:f5:f7:92:1f:c8:c0:85:01:ef:
6e:3f:1f:16:af:e8:2e:7f:d6:5d:d4:ed:d8:75:90:f7:fd:9b:
02:4f:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:11 2024 by rpki-client on console-fra.rpki-client.org