Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/12D945AE311311EEAFAB622D4AD9E6FC.roa
File: 12D945AE311311EEAFAB622D4AD9E6FC.roa (raw, json)
Hash identifier: 1y9sdDMI5w0HwUMIMsTMrTkhx4nO8g3B7LIIf0j6KVA=
Subject key identifier: 8E:91:5C:A8:69:2B:6B:C0:1C:16:B5:1D:AF:4A:6B:50:1C:57:01:AA
Certificate issuer: /CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Certificate serial: 04
Authority key identifier: 28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
Authority info access: rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/12D945AE311311EEAFAB622D4AD9E6FC.roa
Signing time: Wed 02 Aug 2023 09:00:49 +0000
ROA not before: Wed 02 Aug 2023 09:00:44 +0000
ROA not after: Sat 01 Aug 2043 09:00:44 +0000
asID: 37110
IP address blocks: 165.90.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.mft
rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E201DAR/serialNumber=28806BC33AFA0106FB6F8C7429EAB78C1201A259
Validity
Not Before: Aug 2 09:00:44 2023 GMT
Not After : Aug 1 09:00:44 2043 GMT
Subject: CN=64ca1b41-1425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:58:a4:53:1f:1f:3e:f4:5b:50:be:68:34:
4e:a8:43:34:10:02:41:54:b1:94:fd:ab:16:01:f2:
16:0b:f2:3e:5d:48:8d:ce:42:4a:73:e1:52:e3:a2:
2d:57:b9:3a:13:c3:75:2e:ba:67:fe:7a:e2:f4:9a:
d2:3a:ec:77:fa:f7:4c:37:13:4f:0d:14:6e:f2:8a:
01:57:3c:42:fd:ef:2f:24:62:df:53:9f:0b:2d:ea:
f1:cb:ba:3b:7c:02:fd:68:b0:92:34:b4:5e:f3:af:
43:8c:6e:49:2f:a3:00:1b:56:7d:af:72:f1:9e:2c:
0f:81:4b:0f:fe:24:9d:72:a9:28:78:39:77:59:9f:
66:bf:e5:d3:47:f9:f3:5f:61:e4:f8:7f:f4:25:d2:
2f:18:c5:55:92:ee:05:94:83:44:87:98:be:fe:7a:
3c:42:bc:c3:53:9a:0f:d6:3b:4d:b2:07:cb:e5:3b:
8b:13:2f:d8:65:b4:82:09:6d:ca:10:6a:8c:03:29:
d2:53:ee:e5:7e:4b:26:47:89:4d:93:55:aa:fa:59:
8d:3c:16:94:70:5a:26:ea:13:af:a4:f3:a6:38:b0:
b7:22:0d:8b:a0:4c:c6:31:ec:33:7a:14:ec:fa:0e:
e3:db:6b:dc:db:3d:bb:f8:8c:58:60:56:1e:c2:4b:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:91:5C:A8:69:2B:6B:C0:1C:16:B5:1D:AF:4A:6B:50:1C:57:01:AA
X509v3 Authority Key Identifier:
keyid:28:80:6B:C3:3A:FA:01:06:FB:6F:8C:74:29:EA:B7:8C:12:01:A2:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/KIBrwzr6AQb7b4x0Keq3jBIBolk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KIBrwzr6AQb7b4x0Keq3jBIBolk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/ABFC15BE2FCD11EEBAFEA0484AD9E6FC/12D945AE311311EEAFAB622D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.90.64.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:99:07:d1:93:90:b8:3b:8b:27:4e:7e:8f:dc:37:5b:07:80:
e7:78:4c:0d:0e:b9:48:13:6e:df:86:f7:4c:26:33:a0:08:6a:
e9:b0:c8:c0:4a:18:f2:e5:0d:09:1a:b4:19:86:c3:43:1e:b1:
89:ca:34:a3:d2:95:8d:5c:a0:54:eb:04:b4:d8:1f:03:52:99:
9d:43:c2:75:7d:86:f8:f6:42:96:4b:70:36:aa:fc:f9:6e:7f:
8f:aa:a4:81:93:04:5c:2d:e2:9e:a3:b0:27:7a:03:55:e2:a2:
51:70:fe:d8:92:64:39:fc:9e:58:01:73:00:ab:f8:42:13:1e:
f9:43:39:46:29:33:15:8c:61:22:51:c6:5a:af:c7:88:e7:e9:
e6:12:e7:20:d2:bf:b2:8a:bb:91:46:09:b0:43:d6:32:d2:77:
61:31:ee:7b:53:7a:e7:17:ba:d7:f5:d9:58:64:79:ee:b4:4b:
c0:9e:94:e8:19:df:4e:e4:0e:75:4a:25:28:20:60:86:bb:4f:
55:40:01:cd:45:43:28:28:6f:bc:ee:41:d2:6b:b0:cd:e2:a2:
7c:ad:e0:04:2a:7c:d0:3c:58:23:b9:3c:d8:08:e8:48:d9:df:
29:a3:51:30:23:d1:7d:05:20:3b:91:9f:3e:ea:98:a3:ca:04:
fa:52:46:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:27 2024 by rpki-client on console-fra.rpki-client.org