Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/3CFE37A4132311EDB9E986F7F1222468.roa
File: 3CFE37A4132311EDB9E986F7F1222468.roa (raw, json)
Hash identifier: IOGE8BC0yOI0vrslrBgUOPLd6Qyb61EQfYKNBTnamFg=
Subject key identifier: 12:5D:40:1A:47:9E:D2:CC:B6:95:1B:94:3C:9B:87:CD:17:08:B9:23
Certificate issuer: /CN=F36EADB7AR/serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
Certificate serial: 02
Authority key identifier: 20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
Authority info access: rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/3CFE37A4132311EDB9E986F7F1222468.roa
Signing time: Wed 03 Aug 2022 11:55:59 +0000
ROA not before: Wed 03 Aug 2022 11:55:46 +0000
ROA not after: Tue 31 Aug 2032 11:55:46 +0000
asID: 328257
IP address blocks: 165.73.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.mft
rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EADB7AR/serialNumber=206F3A8954C06D7F8FD6DB679B836696CC67417F
Validity
Not Before: Aug 3 11:55:46 2022 GMT
Not After : Aug 31 11:55:46 2032 GMT
Subject: CN=62ea624f-26dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:e3:16:03:f6:58:7d:aa:20:b3:33:39:12:
62:ad:9e:2b:a2:2f:98:d4:e9:6f:a7:d5:3a:0d:ab:
44:e8:df:a4:eb:c1:72:7d:be:ca:f7:2c:74:d9:e4:
d9:86:58:c4:09:d8:62:76:40:68:1b:c7:00:e3:b0:
a0:8c:9a:be:5f:7d:cb:ae:02:5c:84:32:6c:b6:dd:
e6:6d:f0:0f:0d:c7:ea:09:3d:80:e4:ba:69:01:c9:
3a:4f:b1:40:96:28:a4:3c:6c:4d:af:c6:d2:28:78:
d7:e1:81:bb:5b:05:b2:9c:c8:0a:eb:7c:d0:11:80:
4b:e9:23:e9:58:25:7c:22:11:bf:f5:d8:a8:6c:5f:
fd:48:22:0a:3d:89:0b:91:d7:91:f3:a1:14:db:78:
e1:a1:ad:dc:98:56:94:63:72:e8:9b:64:a3:f9:42:
70:73:e7:6b:e6:f8:97:db:64:be:35:fa:78:ae:c3:
e8:85:61:4e:55:0a:d9:45:92:fb:5d:18:48:a6:d3:
9e:d8:74:d9:9d:68:e0:bf:e5:e3:29:03:c4:d2:b4:
9e:55:38:56:7b:63:3e:e0:31:ef:37:3d:fe:65:62:
a7:76:c1:e5:cf:5f:76:bc:59:ea:9d:c0:3d:28:3e:
3b:2e:df:79:8d:65:28:37:06:e5:1d:a2:46:fb:23:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5D:40:1A:47:9E:D2:CC:B6:95:1B:94:3C:9B:87:CD:17:08:B9:23
X509v3 Authority Key Identifier:
keyid:20:6F:3A:89:54:C0:6D:7F:8F:D6:DB:67:9B:83:66:96:CC:67:41:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/IG86iVTAbX-P1ttnm4NmlsxnQX8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IG86iVTAbX-P1ttnm4NmlsxnQX8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/270CEFC4132011ED810BF0EDF1222468/3CFE37A4132311EDB9E986F7F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.73.136.0/22
Signature Algorithm: sha256WithRSAEncryption
32:33:57:7d:c4:e3:06:e1:a5:2c:77:19:be:df:e1:22:0e:58:
e9:48:9b:94:19:70:83:c9:16:be:f4:1a:ce:14:fe:5e:0e:45:
36:2b:a4:de:69:d5:d8:ad:9c:e1:55:30:61:34:c5:a5:16:7b:
50:6a:9e:6f:47:4e:31:05:45:5d:d5:1b:f4:6a:e6:f5:9d:8a:
98:ec:71:30:48:cd:6e:90:d1:17:eb:83:fb:85:54:28:c1:2f:
fa:a6:a6:fd:e3:54:c2:6f:b7:16:f9:4d:ba:cd:84:47:2c:36:
8f:3c:8f:f2:ff:5d:a7:26:fa:a9:fd:fc:c4:d2:37:6a:8e:36:
08:c8:26:7b:dd:56:d5:07:a7:90:41:ec:40:aa:92:02:2c:f1:
0b:f3:2d:3b:d7:f4:28:94:24:a6:23:07:b1:e7:5d:de:5e:c9:
f7:fa:43:3b:7b:78:ca:0e:6f:77:87:5b:a4:07:6f:da:ee:e5:
27:29:f1:88:1a:5f:43:fb:71:91:47:0f:30:54:c0:8f:16:cc:
70:a1:ec:dc:f8:ef:1c:19:5d:26:fd:5a:ae:1b:ae:33:f2:bf:
94:a4:ef:15:42:28:75:da:42:e0:94:7d:fd:fa:85:2b:d3:f2:
d2:f8:6b:e6:1a:0e:c1:36:a1:31:09:b7:c8:46:10:23:3a:a5:
81:1d:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:28 2024 by rpki-client on console-ams.rpki-client.org