Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/A6FB4942C4BD11EEB812C7C2775412E6.roa
File: A6FB4942C4BD11EEB812C7C2775412E6.roa (raw, json)
Hash identifier: 1kSTAO2gxxnI4Ad0e3enBLfNhETDmue3r88+e+Twsmo=
Subject key identifier: 00:32:2D:0E:1D:1C:4C:F0:A2:6F:04:69:FB:AE:96:EA:41:E4:6E:8D
Certificate issuer: /CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Certificate serial: 0312
Authority key identifier: AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
Authority info access: rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/A6FB4942C4BD11EEB812C7C2775412E6.roa
Signing time: Tue 06 Feb 2024 07:02:13 +0000
ROA not before: Tue 06 Feb 2024 07:02:09 +0000
ROA not after: Fri 28 Feb 2025 07:02:09 +0000
asID: 37154
IP address blocks: 165.58.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 786 (0x312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Validity
Not Before: Feb 6 07:02:09 2024 GMT
Not After : Feb 28 07:02:09 2025 GMT
Subject: CN=65c1d974-9882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:cf:eb:c5:92:79:41:e0:99:eb:f8:5b:99:
ec:30:23:6f:3b:09:46:f4:3a:9c:65:1a:d7:a6:49:
2c:b7:58:39:86:87:c7:16:6d:49:4d:81:07:10:72:
0a:27:a9:8e:2f:b3:46:aa:d6:7d:95:7b:4d:8b:a7:
be:d9:5c:4c:81:08:4f:a4:65:69:a4:a1:52:6f:9c:
75:db:89:ae:14:1b:bf:2f:53:90:57:6c:34:d6:36:
ae:86:4f:69:39:6b:29:c8:5a:c4:1c:28:e2:44:14:
4b:55:f2:df:0f:ba:96:39:dd:a0:65:b5:1e:2b:df:
c0:df:20:2c:9d:82:33:ee:c3:7b:80:8d:5d:2f:23:
39:19:87:9c:1e:f1:96:73:ec:cc:e9:02:ed:11:62:
73:18:80:2f:95:2a:84:ee:3d:c5:4a:f8:69:5e:40:
d3:ee:e9:68:ff:63:a3:ff:56:b4:27:53:5b:10:ca:
ad:bb:04:eb:af:dd:34:3b:dc:02:21:9c:c5:57:81:
64:be:8f:15:53:6e:26:1a:63:88:94:31:ec:a3:4b:
e8:c0:24:88:66:87:f9:e4:52:4b:b0:f0:11:49:ec:
d7:9d:ab:67:8c:14:ba:7e:01:5d:e9:13:92:c4:b6:
a3:e9:87:05:20:b0:e7:55:1f:3e:46:f8:06:f6:8c:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:2D:0E:1D:1C:4C:F0:A2:6F:04:69:FB:AE:96:EA:41:E4:6E:8D
X509v3 Authority Key Identifier:
keyid:AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/A6FB4942C4BD11EEB812C7C2775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.58.128.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:8f:17:ea:32:28:72:28:24:4b:97:01:00:19:df:f2:ec:a0:
24:c4:71:63:f3:fd:57:dd:de:f7:98:08:2f:c1:d2:46:f5:58:
9e:25:ee:a6:90:c0:d8:89:76:82:26:7d:cb:b1:f0:63:83:77:
6a:10:23:0a:fb:17:de:af:e8:d7:d6:df:df:50:3e:68:83:c8:
99:28:9b:f7:34:a6:be:c8:3f:0b:d7:ec:af:0e:7d:05:73:71:
7c:8f:5e:f0:43:da:a0:c9:25:8c:c7:e3:a1:58:98:1a:da:28:
80:b1:cb:b2:3b:71:48:5b:e6:76:20:75:53:06:40:e2:fe:16:
7c:e5:51:c3:1c:38:a4:de:84:bb:ee:2b:a0:36:12:e0:28:53:
35:44:cc:65:09:f9:f7:a2:6a:b1:c5:b4:6b:0c:09:7b:87:31:
36:89:6c:7d:71:df:00:20:c5:88:9d:14:65:60:f3:d6:3b:07:
78:bf:33:43:98:a7:f6:3f:ca:ec:13:b6:83:65:26:68:22:7d:
b8:ae:45:9a:68:ba:a5:30:21:84:9e:44:3d:c6:1d:e8:c6:86:
fc:ab:b6:09:1c:35:40:24:ad:b8:ad:3a:a3:60:98:3a:5d:f4:
ec:0b:ff:ed:8c:f2:60:d2:b6:94:77:bc:f1:88:28:55:67:e7:
43:09:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:01 2024 by rpki-client on console-fra.rpki-client.org