Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/8D279298846E11EF894DF2A5762E951A.roa
File: 8D279298846E11EF894DF2A5762E951A.roa (raw, json)
Hash identifier: P3/1kTpK5odvmu/RTvEUq0JDe9HQ56ZEmrC5mYeivrk=
Subject key identifier: 7E:2D:C8:D6:09:4C:E4:26:33:6E:AE:1D:5A:C9:6D:62:06:06:21:6B
Certificate issuer: /CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Certificate serial: 07F2
Authority key identifier: 15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
Authority info access: rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/8D279298846E11EF894DF2A5762E951A.roa
Signing time: Mon 07 Oct 2024 05:39:42 +0000
ROA not before: Mon 07 Oct 2024 05:39:38 +0000
ROA not after: Sun 07 Oct 2029 05:39:38 +0000
asID: 327804
IP address blocks: 160.119.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2034 (0x7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Validity
Not Before: Oct 7 05:39:38 2024 GMT
Not After : Oct 7 05:39:38 2029 GMT
Subject: CN=6703741e-0f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:f9:4b:62:0e:35:0f:3b:fa:62:8c:89:e0:
da:6f:94:02:19:11:42:67:46:54:47:65:5e:e3:bb:
b6:f5:4d:86:46:3d:fd:73:23:9d:c9:48:30:fb:e8:
22:8f:b5:95:86:b6:4b:e8:8a:e0:f1:b2:b0:89:ad:
f1:1f:59:01:ca:c9:f0:c8:e2:eb:8b:05:b5:29:88:
57:31:44:c5:96:36:24:7c:0c:f6:41:5f:9c:d2:da:
fe:98:43:ce:ef:52:35:ac:68:1c:12:de:da:cf:12:
f0:7a:8f:88:c7:c2:04:d2:27:e2:d6:06:f8:d0:dc:
eb:d4:6f:5e:46:be:aa:a1:3f:b7:c2:a9:e5:47:e9:
9c:7f:08:94:95:a3:81:71:e3:20:37:32:e6:e0:f6:
80:3e:10:75:62:ee:4c:e4:38:bb:1d:00:88:ba:ee:
61:81:c7:ee:91:8b:9e:e5:22:dd:42:9c:8d:df:eb:
69:5e:ad:86:fb:62:3e:ad:f0:36:a5:cf:25:07:31:
70:5d:49:a6:5d:fe:96:b3:d9:27:41:1f:8d:f0:4e:
c6:c6:65:12:46:b3:39:27:20:02:7f:53:bc:7c:96:
18:6b:b2:61:ba:f3:3a:1f:9f:6c:e9:fb:68:52:5d:
5e:ac:67:dd:2f:29:ff:a9:a9:fa:11:c7:61:7d:23:
d5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:C8:D6:09:4C:E4:26:33:6E:AE:1D:5A:C9:6D:62:06:06:21:6B
X509v3 Authority Key Identifier:
keyid:15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/8D279298846E11EF894DF2A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.32.0/19
Signature Algorithm: sha256WithRSAEncryption
11:89:3d:1c:9b:4d:a5:7e:8e:c7:27:49:b8:1a:4e:1f:40:09:
de:57:f5:d0:4f:c6:eb:75:5b:41:e4:1e:5d:0d:d8:70:3a:a8:
9e:4f:65:42:48:f7:e6:d4:8b:d0:26:17:33:8b:e4:9e:46:2f:
3a:ca:86:cc:b8:58:0f:d0:61:6d:c4:a5:80:dc:09:df:46:d2:
47:76:ae:e0:0e:f1:aa:be:fa:70:61:cd:c7:a8:82:13:17:5f:
b8:c2:94:3a:ba:12:17:e7:c2:dc:86:d7:69:34:f2:20:f9:2d:
92:e1:86:9e:ac:cb:0d:27:e3:5e:a6:85:df:19:76:a6:c5:47:
6b:0f:22:3a:30:9f:89:7e:7d:d4:ad:8e:9b:35:b7:58:95:d1:
54:6f:c6:d8:be:81:b4:48:9f:35:56:2d:ff:8d:bc:d3:c4:cd:
5e:d4:bb:11:32:36:c6:6b:74:93:cf:e5:43:7c:6d:1c:97:2a:
ab:2d:6d:6e:5b:2d:31:d6:9d:b0:05:51:3b:89:1d:77:f3:27:
45:8e:0f:65:ee:b0:02:36:ee:5a:89:c1:d7:bd:20:d4:d9:69:
a2:c0:b2:e9:b4:12:d2:2e:b8:91:7b:32:66:25:79:b7:11:92:
06:a6:8a:8d:7f:ec:9c:6f:95:c2:81:83:2f:14:4b:15:e9:68:
14:3a:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:26 2024 by rpki-client on console-ams.rpki-client.org