Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/4A6670EE934511EDBFA0C596F1222468.roa
File: 4A6670EE934511EDBFA0C596F1222468.roa (raw, json)
Hash identifier: 3Fi8yvyqEoIcLc/WagX39l0QelfRUJXkE6qRmzX/ij8=
Subject key identifier: 6B:03:2B:43:27:7F:16:AF:CD:D9:DB:52:C0:DE:38:50:DA:38:36:CE
Certificate issuer: /CN=F36E1EE5AR/serialNumber=53E07837A74E9F55C2B5C22FED9B3ACDBE56AD24
Certificate serial: 02
Authority key identifier: 53:E0:78:37:A7:4E:9F:55:C2:B5:C2:2F:ED:9B:3A:CD:BE:56:AD:24
Authority info access: rsync://rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/4A6670EE934511EDBFA0C596F1222468.roa
Signing time: Fri 13 Jan 2023 13:22:13 +0000
ROA not before: Fri 13 Jan 2023 13:22:02 +0000
ROA not after: Wed 12 Jan 2033 13:22:02 +0000
asID: 327982
IP address blocks: 169.239.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.mft
rsync://rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1EE5AR/serialNumber=53E07837A74E9F55C2B5C22FED9B3ACDBE56AD24
Validity
Not Before: Jan 13 13:22:02 2023 GMT
Not After : Jan 12 13:22:02 2033 GMT
Subject: CN=63c15b05-9ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:be:04:d8:7a:e1:cc:23:e4:aa:bd:57:b0:
02:44:92:66:70:99:8a:f0:92:db:2b:d6:45:7a:a6:
54:a8:07:3b:4f:7e:15:31:e2:10:d0:4a:4c:4a:b4:
0b:3f:36:c7:9b:ed:fb:3c:d8:ef:55:19:5e:05:04:
65:bb:f3:bf:54:f1:6c:bd:86:a9:dd:32:95:8b:7a:
76:82:ab:f2:00:b3:ed:6b:e6:b4:dc:39:f8:5e:59:
e3:5e:b2:b3:c1:af:b8:ad:0f:d2:ae:96:d6:c3:68:
9c:2f:a9:77:e0:e9:f0:a1:c9:16:ff:22:63:6a:03:
9b:5e:ce:5c:66:3f:54:cc:3e:5a:42:93:68:c3:60:
2b:59:03:45:10:a3:4e:cf:25:ac:86:fc:34:79:b7:
c3:a0:ff:e4:11:83:84:13:27:6e:5e:1e:fe:e6:53:
df:0a:c8:a5:8f:bf:00:ae:54:a3:b3:bc:54:c8:6e:
26:09:69:48:e2:5c:36:dc:a8:fa:4c:71:f9:1f:55:
3f:35:b9:16:67:db:af:b3:da:5f:30:85:37:71:11:
31:e7:88:00:d2:cb:71:01:4d:eb:6d:d5:69:ac:34:
4b:6c:37:fe:b7:01:11:6f:63:5d:1a:05:5a:eb:fd:
c3:4f:c1:b6:f0:12:c5:a8:85:b9:05:b2:34:5d:45:
0f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:2B:43:27:7F:16:AF:CD:D9:DB:52:C0:DE:38:50:DA:38:36:CE
X509v3 Authority Key Identifier:
keyid:53:E0:78:37:A7:4E:9F:55:C2:B5:C2:2F:ED:9B:3A:CD:BE:56:AD:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/U-B4N6dOn1XCtcIv7Zs6zb5WrSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/AF7EDA1A934111EDB722AE8CF1222468/4A6670EE934511EDBFA0C596F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.240.0/22
Signature Algorithm: sha256WithRSAEncryption
77:f6:9d:6b:f8:24:9e:ed:18:a2:b8:25:eb:68:61:49:43:b6:
a8:89:f9:de:18:e5:97:4d:c1:07:dc:d1:f6:a3:a4:d8:75:33:
9c:7d:10:b1:fb:f5:f9:6a:c3:16:6d:e6:22:14:87:db:fb:d7:
a3:3b:d2:6f:1c:9d:aa:66:b1:68:eb:00:6f:78:42:82:5d:24:
00:a5:e9:c8:6f:78:c9:cb:eb:36:81:8b:3e:fb:eb:7b:5b:cd:
8b:87:75:1d:c1:88:fc:87:51:68:da:21:47:a3:68:7e:c1:e4:
ab:64:51:ca:ac:ab:ea:e7:27:f4:36:f0:ca:8b:e8:69:ce:64:
49:8d:04:b3:84:0f:46:e5:16:aa:f6:1c:ca:b5:f0:cc:10:c3:
bc:3d:ab:fa:3f:5a:1c:3e:a5:7d:47:b3:17:cd:39:e1:50:3e:
57:8a:ab:31:50:62:d4:bf:a9:08:06:09:b8:ba:2a:60:0f:28:
0c:e8:4f:72:bc:1b:5a:f9:74:f9:72:74:a0:ae:c7:c9:58:c1:
97:1d:06:d3:d5:f0:25:dc:75:1a:2c:9c:45:f2:e9:94:79:f0:
20:26:c0:33:14:b1:73:76:80:db:2c:8a:6a:ea:e5:bc:68:18:
49:d7:ee:13:e2:c7:d2:c6:f5:06:77:35:50:ca:2a:87:86:fe:
0c:63:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:59:02 2024 by rpki-client on console-ams.rpki-client.org