Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/6D16A902345111EA83C8F660F8AEA228.roa
File: 6D16A902345111EA83C8F660F8AEA228.roa (raw, json)
Hash identifier: CEsf8aJnIGJmX6uZlMZKivmaxNidagXwOjPfOH6lI4A=
Subject key identifier: 2D:9C:57:C7:27:17:64:6C:38:88:59:12:41:F6:E9:0B:2A:5F:BA:AE
Certificate issuer: /CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Certificate serial: 80
Authority key identifier: BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
Authority info access: rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/6D16A902345111EA83C8F660F8AEA228.roa
Signing time: Sat 11 Jan 2020 09:04:52 +0000
ROA not before: Sat 11 Jan 2020 09:04:45 +0000
ROA not after: Fri 11 Jan 2030 09:04:45 +0000
asID: 328209
IP address blocks: 160.119.96.0/22 maxlen: 23
160.119.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Validity
Not Before: Jan 11 09:04:45 2020 GMT
Not After : Jan 11 09:04:45 2030 GMT
Subject: CN=5e198fb4-e2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6f:99:fe:8f:43:09:d7:a5:4a:12:16:f1:e8:
53:69:09:0e:db:13:ee:af:e4:e9:1e:14:9a:ef:8f:
92:88:3a:20:05:e4:63:6d:ef:fa:75:61:f9:15:2a:
ca:5b:f3:a8:fe:1f:d1:5e:ec:24:d3:a7:b6:13:26:
1b:dd:66:cc:23:8e:9e:7e:e3:7a:6f:06:ec:55:bb:
a8:4b:65:2b:e3:72:0c:48:7d:c2:3f:e4:b9:89:d5:
a0:51:d1:c5:d4:d6:c0:12:0b:e7:f3:ba:a4:13:2f:
03:c6:7d:3c:84:a3:35:8f:85:91:b9:51:13:53:de:
60:b8:96:5d:38:f4:b3:54:74:82:45:dd:38:9e:c2:
0b:32:2f:ad:d5:d3:90:c8:1f:15:67:20:68:ed:cb:
a2:79:7c:60:35:c0:de:fe:f5:60:cd:b9:a0:3f:cc:
bb:44:79:9a:b1:15:2c:25:9e:8c:00:86:88:7a:84:
bb:c7:4c:5b:e5:67:ee:73:6d:d1:90:9a:e0:41:8f:
68:98:f1:d8:37:71:0a:a4:42:60:7f:e5:cc:42:0d:
f4:d5:15:c2:99:d7:ca:20:3c:08:d1:04:61:ff:6d:
ef:01:4b:12:da:3d:d7:e7:c2:67:f0:8d:93:a9:f0:
f5:b4:49:fb:84:c2:29:d5:21:81:9f:3b:f3:77:a4:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9C:57:C7:27:17:64:6C:38:88:59:12:41:F6:E9:0B:2A:5F:BA:AE
X509v3 Authority Key Identifier:
keyid:BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/6D16A902345111EA83C8F660F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
160.119.96.0/22
Signature Algorithm: sha256WithRSAEncryption
af:60:d1:c6:a0:ad:df:91:ba:46:cf:84:2d:92:3d:ec:c8:b4:
c8:ed:3e:58:59:a6:2c:3e:e7:d9:de:d1:85:48:34:e3:36:79:
a5:4f:5f:bc:f4:3b:3f:cd:87:3e:a0:cf:60:31:a5:ab:09:3b:
e0:98:09:7d:6e:12:83:a5:a9:04:c1:44:1c:b2:00:25:07:78:
51:fe:f0:a7:9e:4a:05:a0:88:fa:bd:78:be:6f:24:43:61:93:
31:79:88:ba:1c:38:93:67:37:13:4b:cf:be:d4:b4:24:4a:2a:
e1:ac:a0:ff:55:c4:bb:4f:b7:bb:ab:a0:7f:8a:df:ed:8f:b0:
5c:e4:21:1a:b9:72:3e:b4:b8:9f:ab:3f:1b:31:2a:04:67:64:
50:fd:52:0a:b9:76:e1:08:fd:88:cf:0f:64:7a:c0:c7:15:82:
83:d3:cb:31:ea:77:6d:12:1d:c2:82:19:3d:82:b1:c7:9e:b4:
f3:9f:6e:ab:ee:1d:b9:1b:64:e2:ca:57:9b:17:a5:0f:2d:6d:
7b:35:50:59:a8:30:2d:e9:21:4d:a8:5a:f8:a7:ba:81:d7:f3:
b1:d8:f3:21:ef:4a:16:f3:27:47:bc:c9:17:5d:bc:36:27:6b:
2b:ac:bd:65:2d:20:63:02:a0:82:43:cd:4c:34:0a:86:cb:1c:
21:f8:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 02:25:06 2024 by rpki-client on console-ams.rpki-client.org