Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/1347AC5CF39811EB9A15AC4AD8A014CE.roa
File: 1347AC5CF39811EB9A15AC4AD8A014CE.roa (raw, json)
Hash identifier: ELdoPCpH4/Jlr8Ic0qQsz8AnRp2cpHaa9g5JTK9vKSg=
Subject key identifier: 78:C2:2C:05:C1:97:D4:B9:11:CA:B2:6A:39:FB:BB:E9:3B:9A:85:0F
Certificate issuer: /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial: 06
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/1347AC5CF39811EB9A15AC4AD8A014CE.roa
Signing time: Mon 02 Aug 2021 13:47:12 +0000
ROA not before: Mon 02 Aug 2021 13:47:07 +0000
ROA not after: Sat 03 Aug 2024 13:47:07 +0000
asID: 328154
IP address blocks: 160.119.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Validity
Not Before: Aug 2 13:47:07 2021 GMT
Not After : Aug 3 13:47:07 2024 GMT
Subject: CN=6107f760-887d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:3e:ae:a5:a9:6b:33:41:18:d9:fa:e5:aa:
3e:e1:99:8c:8d:e2:6c:14:0d:fd:a4:dd:b0:67:f5:
f2:48:4a:aa:fd:1c:d2:02:a2:d3:25:98:97:a7:d0:
05:a9:12:0f:46:74:01:ba:95:de:51:d2:e0:1a:be:
67:22:a4:82:4f:9f:67:db:0f:04:ae:80:57:f9:79:
14:d5:d7:0a:e3:7f:18:c1:8c:c1:1c:82:58:d3:87:
92:84:ae:e7:7d:06:6c:7a:2f:d0:55:bd:e0:6e:e5:
24:6b:c9:5a:cb:00:39:ac:f8:e4:a5:43:7e:76:13:
dc:93:63:ad:ba:80:f3:35:a2:67:75:c6:42:94:52:
7e:a8:9e:9f:e9:65:dc:9d:10:52:ff:32:bb:68:dd:
89:23:c9:1d:5a:cc:94:24:87:df:a8:28:df:0b:5b:
05:b9:6f:60:d0:6d:b9:ef:6b:ae:b7:26:76:aa:23:
bf:36:c3:13:24:ad:90:3c:bd:c2:e6:21:46:f0:91:
c3:d8:a3:5c:70:bd:c4:99:06:6c:b2:07:7b:85:05:
5a:5e:6a:dd:96:d2:17:6a:c9:2f:5f:b7:92:56:57:
f7:46:56:c2:1a:cf:94:9c:79:69:15:4e:f2:c9:2a:
c4:19:c2:ad:c0:b0:95:26:7c:fe:20:8a:c0:a3:3a:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:2C:05:C1:97:D4:B9:11:CA:B2:6A:39:FB:BB:E9:3B:9A:85:0F
X509v3 Authority Key Identifier:
keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/1347AC5CF39811EB9A15AC4AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:24:d8:5d:37:4d:72:a4:a3:79:ab:a2:91:dd:75:95:5e:94:
5f:b9:61:58:7a:75:5f:87:3a:e5:96:08:69:5a:3c:a7:04:7c:
e3:55:1a:88:68:68:24:05:f1:cc:0d:20:4f:b3:0c:cf:7e:c6:
13:02:a7:10:12:e5:cf:c6:c2:50:c6:e0:c3:b9:98:b5:3a:c2:
37:e1:ac:a3:1d:9f:2f:14:cb:9b:32:f0:0b:3b:a3:4e:91:c7:
86:2c:fd:e8:1c:d9:98:3f:9d:32:4d:87:05:b8:92:bb:43:75:
60:03:6a:58:31:49:35:a1:a6:30:bf:0f:1a:97:9d:b9:dc:5b:
90:0f:3d:d5:9a:df:20:88:ba:04:a4:79:c6:11:b6:84:13:f8:
ef:fc:7f:6a:46:e2:9f:14:c9:1d:91:24:b4:06:9f:fa:6a:30:
78:91:41:ba:48:0a:a4:a2:f0:4c:8d:a0:9d:c2:4c:57:65:b7:
21:46:74:3a:25:1e:15:79:e5:18:2f:9b:2e:fa:b1:c0:59:fa:
dd:39:15:10:f4:30:63:1c:75:a8:df:0f:37:31:83:5b:9a:1c:
e6:98:31:3b:fb:1d:b5:7e:c3:01:5e:bf:cc:8f:ea:92:81:ca:
43:65:54:c4:1a:40:bd:3e:4a:27:1b:87:8b:80:f1:07:c0:07:
a4:38:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:09:11 2024 by rpki-client on console-ams.rpki-client.org