Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/2A4B5C8AC04811EEBF620CAE775412E6.roa
File: 2A4B5C8AC04811EEBF620CAE775412E6.roa (raw, json)
Hash identifier: qOKZ7r/XlgkdhQ2Gid1ONQnLJXBiFlSZ0/goXN+vBjM=
Subject key identifier: 95:1D:2C:0E:D5:21:90:97:DB:7C:3B:CD:26:26:7F:01:20:A4:32:74
Certificate issuer: /CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Certificate serial: 030A
Authority key identifier: AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
Authority info access: rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/2A4B5C8AC04811EEBF620CAE775412E6.roa
Signing time: Wed 31 Jan 2024 14:51:07 +0000
ROA not before: Wed 31 Jan 2024 14:51:03 +0000
ROA not after: Tue 31 Dec 2024 14:51:03 +0000
asID: 37154
IP address blocks: 165.56.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Validity
Not Before: Jan 31 14:51:03 2024 GMT
Not After : Dec 31 14:51:03 2024 GMT
Subject: CN=65ba5e5b-9be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:17:3c:2b:73:62:11:ad:2c:26:e1:a3:2c:
03:e6:3a:0e:2e:e0:47:5e:1e:26:e0:17:11:92:08:
6f:59:27:26:b4:c0:19:da:a5:14:a0:22:d3:6b:e7:
23:31:5e:32:23:34:99:34:7a:7c:b8:05:37:a7:10:
f3:5d:e6:f5:ed:66:98:b4:53:9a:12:13:00:9e:57:
34:4b:0b:9f:c9:f8:e6:03:31:7a:74:09:03:16:ef:
5e:64:64:8b:da:8d:28:35:69:d2:a7:35:72:07:9e:
99:3b:bf:bc:f7:41:f8:12:8b:0c:27:fe:51:28:7c:
53:6a:86:51:fa:c9:1e:ba:61:ba:d3:5b:b5:85:16:
38:4f:6a:28:79:57:aa:eb:9a:bf:66:37:52:bf:88:
ea:04:7d:58:56:22:c1:56:a9:a8:f9:ea:c8:cf:0b:
40:14:0f:6a:75:77:ce:ae:9c:2e:57:60:08:9c:86:
02:09:94:e4:35:22:aa:71:b9:24:1f:1b:e1:df:3c:
95:86:c9:07:a2:f1:59:b4:72:69:29:ea:50:e9:62:
5b:19:8e:41:00:21:4e:dc:34:4d:09:ae:7a:28:41:
f7:f1:99:44:89:19:59:4d:8c:74:f0:8d:58:f3:a2:
0d:b4:44:66:af:a7:64:5c:76:ee:66:96:42:68:97:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:2C:0E:D5:21:90:97:DB:7C:3B:CD:26:26:7F:01:20:A4:32:74
X509v3 Authority Key Identifier:
keyid:AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/2A4B5C8AC04811EEBF620CAE775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.56.0.0/13
Signature Algorithm: sha256WithRSAEncryption
7b:ae:57:c8:86:b1:3e:03:79:27:76:b9:d7:14:5b:8a:76:00:
20:7d:71:75:f4:11:1c:54:c3:cb:c2:6d:99:ee:bb:d0:32:fa:
37:7d:89:85:d1:72:4f:32:ec:1d:ba:52:6e:66:88:e4:c9:75:
83:37:27:0a:46:cf:f2:e4:28:ae:61:06:d5:03:2e:b6:98:2e:
7b:e6:bf:b9:f9:41:6b:a3:79:3b:0f:a6:a7:a0:2e:3e:8b:64:
b2:08:20:36:94:7a:18:f0:09:d9:3c:bb:e2:be:b1:85:4b:04:
c8:24:c2:7f:31:2c:d5:b1:5b:6e:30:b6:99:51:b9:8a:e0:ed:
d5:73:aa:a1:2a:43:32:30:d9:9f:dd:d4:89:ae:e3:4b:ab:a9:
43:f2:9c:c0:8c:62:c8:20:54:7d:5a:56:90:fa:51:d7:07:fe:
c9:86:a1:b8:58:25:34:c2:3d:82:94:a4:12:fc:f1:75:45:63:
5e:e7:5b:0d:a1:cb:f8:5e:51:ee:1b:b9:07:fb:36:f8:51:7f:
e6:2d:77:ad:b5:a9:86:35:aa:bb:ba:34:34:25:da:ff:bf:4e:
df:69:bc:da:82:fd:08:2b:e9:97:e1:76:58:68:7f:df:08:38:
aa:cc:59:1b:93:fe:0f:74:74:de:40:8b:ca:a0:46:ea:fd:b1:
c0:d5:ef:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:40:02 2024 by rpki-client on console-ams.rpki-client.org