Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/A57640DC33EE11EEB6E5A2504AD9E6FC.roa
File: A57640DC33EE11EEB6E5A2504AD9E6FC.roa (raw, json)
Hash identifier: egztqgAwcmQLoG1XEKQ+hzt53tQtUP3Wqy8pVuKbqvw=
Subject key identifier: A9:49:A7:E2:5B:6E:CB:82:35:9D:0D:0A:C0:52:30:49:47:E3:E0:04
Certificate issuer: /CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Certificate serial: 05B9
Authority key identifier: BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
Authority info access: rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/A57640DC33EE11EEB6E5A2504AD9E6FC.roa
Signing time: Sun 06 Aug 2023 00:17:37 +0000
ROA not before: Sun 06 Aug 2023 00:00:33 +0000
ROA not after: Tue 06 Aug 2030 00:00:33 +0000
asID: 328209
IP address blocks: 160.119.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 12 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1465 (0x5b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Validity
Not Before: Aug 6 00:00:33 2023 GMT
Not After : Aug 6 00:00:33 2030 GMT
Subject: CN=64cee6a1-a874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:a7:71:b0:3d:38:58:8f:f5:42:94:29:9f:
ab:c3:a8:b6:a0:3f:01:c2:38:88:d1:a8:2f:24:c7:
fd:5c:7d:8f:44:84:79:14:c4:4b:43:58:41:7f:f4:
9f:d3:bf:4f:b4:c2:e8:39:32:44:82:f2:5e:15:9f:
d5:36:f4:97:65:a4:9b:04:bb:cc:76:53:0b:fd:cf:
9b:3c:e4:1e:c5:bd:33:07:a7:3b:fb:72:fc:65:f8:
24:95:d5:b4:40:d0:fb:1c:fe:c4:ae:78:2d:50:9d:
77:13:df:7f:4d:a5:a2:fb:43:10:a0:59:d5:6a:41:
10:8f:03:32:de:5e:5c:25:c2:66:46:15:7f:19:14:
1d:e3:f8:53:73:3a:76:fc:c7:8e:d5:ad:5d:67:c3:
04:54:bc:5f:96:7c:c7:f6:de:be:1e:04:c7:f6:51:
e4:ec:8b:cd:f4:92:c9:6f:90:f7:e7:70:1f:03:d1:
ad:1b:15:43:0d:8f:b7:de:f6:1e:2b:db:9b:40:67:
cb:a2:be:bc:d0:8f:e2:74:d6:e2:07:b5:05:6a:b4:
0b:b9:fc:56:7b:a0:c4:a6:de:f3:61:43:a5:dd:68:
b8:db:e0:d7:02:b6:db:9a:ee:f2:9b:ae:7e:5b:82:
26:a0:dd:9e:28:68:18:b5:95:c1:87:f6:35:99:0b:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:49:A7:E2:5B:6E:CB:82:35:9D:0D:0A:C0:52:30:49:47:E3:E0:04
X509v3 Authority Key Identifier:
keyid:BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/A57640DC33EE11EEB6E5A2504AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.119.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ae:4c:39:d4:5b:02:cb:53:aa:ae:14:75:77:f5:7a:54:7b:
c7:23:9d:2a:dd:d5:07:c8:41:ff:1e:6d:4e:06:12:e5:3a:90:
b4:cc:8d:c8:79:38:f8:fb:63:bc:14:08:14:57:e7:48:5c:40:
50:90:d0:00:a0:c9:cd:e3:19:70:d7:81:ba:0a:8e:9e:55:f4:
59:49:a2:54:cf:4a:bc:21:16:c1:d9:30:bb:80:4f:ca:ad:e8:
2a:53:e7:6d:eb:1c:a8:b8:9c:4f:23:95:6a:d6:2c:80:b3:40:
56:94:c2:aa:e5:b7:df:88:1b:a2:78:5b:78:dd:0b:e2:f6:b9:
ea:08:51:94:7e:b3:e1:06:cd:36:84:2f:51:22:12:53:e8:39:
0c:44:7b:fa:0e:35:12:b4:f4:f5:bb:31:e9:2b:ae:98:ac:c4:
f2:a3:a5:3f:4b:8c:9f:7c:99:e6:ab:ec:f1:f7:7c:b8:0f:aa:
73:95:a3:19:b2:18:a4:13:e2:7e:b3:74:77:71:66:6c:cd:2f:
35:bf:26:ca:ae:ae:50:86:f5:64:46:43:71:67:c2:95:4e:e6:
b4:73:4e:70:43:50:36:4c:f7:b3:bd:f8:3d:b6:23:19:c5:a6:
1c:cc:80:05:d6:70:05:32:47:7b:e6:da:23:8b:f5:69:8b:ef:
92:9f:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 02:54:00 2024 by rpki-client on console-ams.rpki-client.org