Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/D24E31E2DE7C11EBB05A5E63F8AEA228.roa
File: D24E31E2DE7C11EBB05A5E63F8AEA228.roa (raw, json)
Hash identifier: M2UxYeTNruKkNVITsjU6u+dRgieWPfDpSGMbsu/uKcE=
Subject key identifier: EB:F4:22:15:FB:1E:11:3A:71:94:0C:A5:89:41:E3:C5:A4:E1:8E:6D
Certificate issuer: /CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
Certificate serial: 0697
Authority key identifier: 83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
Authority info access: rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/D24E31E2DE7C11EBB05A5E63F8AEA228.roa
Signing time: Tue 06 Jul 2021 17:08:45 +0000
ROA not before: Tue 06 Jul 2021 17:08:41 +0000
ROA not after: Wed 31 Dec 2031 17:08:41 +0000
asID: 32653
IP address blocks: 45.220.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.mft
rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687 (0x697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9B5BAR/serialNumber=830F27A2558773F3168B883C04B0238EA57523B5
Validity
Not Before: Jul 6 17:08:41 2021 GMT
Not After : Dec 31 17:08:41 2031 GMT
Subject: CN=60e48e1d-544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:c2:3a:ca:60:b2:c7:6b:35:11:27:95:a4:
29:2b:1e:57:3d:f5:f5:d2:31:24:36:de:84:66:f9:
6c:ac:b1:6d:92:68:1d:d7:33:3d:b7:1d:65:94:b5:
8f:a7:98:11:57:bd:14:5d:86:a4:3b:5b:4f:06:61:
4f:b5:1a:db:07:ff:6f:e7:8b:95:87:20:80:2a:41:
64:48:8a:44:08:0c:9f:90:56:26:78:d2:95:8b:b4:
c5:f3:ad:b6:30:17:48:36:bd:95:ad:11:4e:28:06:
b8:2f:e8:72:d9:f8:5e:dc:f4:57:00:2a:b8:a3:76:
75:ed:a9:bf:8a:c7:65:24:36:56:24:7f:44:19:16:
cb:a3:c7:b7:83:d2:ee:1d:fa:11:4c:2d:b9:a6:ec:
6e:2d:42:a2:f5:05:d1:e7:e1:80:10:95:25:52:57:
16:d2:03:96:fa:98:95:a7:12:37:bc:cb:48:62:07:
bc:12:ee:8c:cc:e3:49:4c:2e:86:cb:4d:fd:d7:70:
72:4e:99:af:b8:0c:6b:54:b3:7f:0e:77:5b:f0:df:
9d:0b:44:b2:10:3d:0b:43:dc:ec:56:5f:5d:fb:f7:
45:8d:d6:08:17:cf:70:ba:b8:6a:26:e6:5c:bf:b0:
df:b3:94:b4:09:b6:eb:b1:9d:72:60:20:57:e8:a5:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F4:22:15:FB:1E:11:3A:71:94:0C:A5:89:41:E3:C5:A4:E1:8E:6D
X509v3 Authority Key Identifier:
keyid:83:0F:27:A2:55:87:73:F3:16:8B:88:3C:04:B0:23:8E:A5:75:23:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/gw8nolWHc_MWi4g8BLAjjqV1I7U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gw8nolWHc_MWi4g8BLAjjqV1I7U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9B5B/ECEAE276C86411E6994F5B75F8AEA228/D24E31E2DE7C11EBB05A5E63F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.220.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4f:7c:d3:40:98:6f:1d:c0:f9:7b:38:78:e4:ce:ce:e6:1a:80:
9a:f7:1e:99:5a:ca:44:fa:fc:41:a0:38:38:b4:1a:3b:4b:40:
70:fd:b6:4b:99:88:f7:9e:7a:54:c5:86:69:4d:94:f0:5b:50:
66:fc:92:31:e4:b5:8d:c3:29:b5:ee:27:1c:c8:12:32:49:0c:
db:12:0d:be:15:79:20:fe:19:a5:d0:a4:46:61:45:b4:b9:16:
31:c3:5b:9a:43:12:45:db:b3:37:12:fb:f8:bc:6c:9b:6e:62:
9c:e6:10:a5:2e:cc:90:d8:4f:1f:9a:53:e0:b1:80:53:77:ed:
d0:3b:dd:54:58:07:44:3a:cd:84:6e:23:05:25:b9:aa:4a:98:
72:04:f2:c9:eb:83:b0:ff:34:a2:99:a4:20:99:1c:ba:8a:01:
d8:2d:f1:ed:71:a3:e2:e2:20:d3:b0:1a:1b:eb:8e:ff:2c:c2:
8b:38:28:9d:80:f7:67:dd:bf:09:e1:ff:b7:a7:73:41:29:25:
f0:22:d3:93:e1:35:cb:1e:f3:19:a3:2d:d2:5d:49:64:7a:d5:
b7:f4:76:08:23:0c:6f:52:17:b5:44:6c:b1:cb:eb:dc:af:f9:
8c:b8:41:ba:69:f4:78:30:ad:9e:c4:54:0a:ae:be:1d:4f:85:
fb:d1:46:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:55 2024 by rpki-client on console-fra.rpki-client.org