Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/DD207954846E11EF979821A8762E951A.roa
File: DD207954846E11EF979821A8762E951A.roa (raw, json)
Hash identifier: AI9si2nhZz8J2jqDAtjUn0vG9ddLMKUEmZw4wMIEDpg=
Subject key identifier: 81:61:8D:03:BB:8D:0A:FD:5B:35:C2:51:53:E8:88:3E:FA:7C:5E:41
Certificate issuer: /CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Certificate serial: 07F6
Authority key identifier: 15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
Authority info access: rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/DD207954846E11EF979821A8762E951A.roa
Signing time: Mon 07 Oct 2024 05:41:56 +0000
ROA not before: Mon 07 Oct 2024 05:41:53 +0000
ROA not after: Sun 07 Oct 2029 05:41:53 +0000
asID: 327804
IP address blocks: 160.119.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Validity
Not Before: Oct 7 05:41:53 2024 GMT
Not After : Oct 7 05:41:53 2029 GMT
Subject: CN=670374a4-b95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:f7:15:cc:3b:9d:20:ec:65:c9:c3:0f:a7:
31:da:bb:65:5c:a8:1a:ac:11:cf:7c:b2:1d:4d:8a:
80:ce:92:21:7a:ee:c0:ee:81:a2:65:0a:00:d0:f3:
29:7b:59:b5:20:39:dd:24:63:8c:25:1b:5d:35:5a:
44:fa:8c:50:92:0d:80:74:e7:a4:9d:37:b5:6f:3a:
50:91:3c:38:d0:d0:1e:ab:28:a5:fb:b9:18:48:c4:
bd:6a:56:67:4c:44:f5:b0:61:c0:c6:21:21:b7:0e:
00:1c:c4:5c:a4:b6:fd:41:46:63:ed:39:01:c3:a1:
28:8a:0a:4c:7d:ea:a5:15:35:64:d3:44:42:5d:54:
b0:b4:66:84:93:56:41:13:b4:4f:5d:cf:67:f1:43:
2a:3a:cb:09:8b:5f:66:b4:24:e0:e3:7a:13:38:0e:
c7:61:4e:57:3b:f6:ec:bb:1d:65:80:5f:e7:72:ae:
74:9e:22:97:bb:1e:da:09:86:e0:e4:ce:9c:70:c7:
b5:32:e5:dd:4d:fe:10:9f:65:ab:5f:ad:8c:0f:44:
bf:6f:cb:b8:94:76:fa:eb:bd:9c:c3:2f:08:48:37:
89:84:dd:51:6b:32:ab:f2:9d:ce:b2:02:9f:d2:b0:
9b:80:64:9e:71:b3:9e:59:1e:74:7e:28:28:33:dc:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:61:8D:03:BB:8D:0A:FD:5B:35:C2:51:53:E8:88:3E:FA:7C:5E:41
X509v3 Authority Key Identifier:
keyid:15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/DD207954846E11EF979821A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.48.0/20
Signature Algorithm: sha256WithRSAEncryption
46:f3:f9:e9:87:bf:0b:fa:82:71:d1:a2:31:a3:d0:3e:58:e1:
a3:ef:34:9e:70:ee:c6:c0:38:ff:f6:64:1f:54:26:ee:dc:f6:
a4:fa:48:99:c8:f7:3e:dc:a7:b1:f7:f7:b1:36:68:39:79:f4:
be:87:da:33:15:73:f6:38:d3:1c:4d:8c:e5:f5:97:61:40:20:
16:ca:62:12:b7:cf:b8:05:f8:33:32:8b:1b:9c:9c:e9:e0:c8:
65:f4:a4:64:5c:da:f0:1a:07:c5:56:bc:af:d9:d3:67:c7:11:
fb:35:c8:3f:71:94:43:d5:fd:93:3e:2e:6f:ae:2a:16:79:04:
19:b2:4d:bc:14:b7:79:7e:d8:fa:e7:b3:7e:fe:fb:0e:4c:3a:
2c:e5:0f:f4:fe:cf:ce:01:4d:92:9d:e8:e3:46:b4:b3:62:7e:
ff:9d:4b:ce:9e:09:83:b0:5c:2b:68:fd:6e:9d:67:24:4b:e9:
e0:57:e9:70:11:0c:6f:49:f3:71:d9:85:4e:1c:da:06:d2:d3:
66:69:d4:36:3d:95:a8:f2:e6:b1:fd:6b:9d:7b:5b:5f:43:7d:
2a:e9:f8:e4:b8:99:b9:6b:0f:e7:2c:fc:a3:0a:50:6b:2f:55:
13:f2:0f:05:1a:e8:ff:cf:94:c5:a2:0d:12:4d:20:85:37:d1:
67:d3:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:17 2024 by rpki-client on console-fra.rpki-client.org