Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/FB4BA9B0C4BD11EEA04E27C3775412E6.roa
File: FB4BA9B0C4BD11EEA04E27C3775412E6.roa (raw, json)
Hash identifier: VAg82L744Op3vc/3wAsrINyLozkiMYHrH3GWLaI9tQ4=
Subject key identifier: ED:64:CD:23:EA:B0:EA:25:6F:BC:F7:51:07:85:05:A8:B7:4B:81:DD
Certificate issuer: /CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Certificate serial: 0316
Authority key identifier: AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
Authority info access: rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/FB4BA9B0C4BD11EEA04E27C3775412E6.roa
Signing time: Tue 06 Feb 2024 07:04:34 +0000
ROA not before: Tue 06 Feb 2024 07:04:30 +0000
ROA not after: Fri 28 Feb 2025 07:04:30 +0000
asID: 37154
IP address blocks: 165.56.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 May 2024 00:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Validity
Not Before: Feb 6 07:04:30 2024 GMT
Not After : Feb 28 07:04:30 2025 GMT
Subject: CN=65c1da02-feaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:83:81:96:78:f3:6d:3d:d7:c1:c0:24:2d:
b5:56:ad:86:44:ab:92:e7:23:e7:04:09:3a:bd:9e:
ec:f5:a5:1b:35:d7:c6:89:cd:d5:5e:5b:b9:fc:8f:
84:c0:5f:13:53:76:47:f8:14:48:b4:a9:7f:fa:1c:
73:79:6d:fd:3b:d8:36:c8:c0:e7:2a:a2:9c:b2:1e:
7e:51:2b:d5:a1:00:dd:e5:18:77:df:38:d3:b5:b7:
1e:b7:9c:9f:66:e2:22:33:3e:6c:5d:fa:c0:7e:4c:
dc:1e:9d:17:e3:b0:a3:8c:78:0b:82:30:0d:f4:bd:
22:8a:3b:03:2a:22:54:c2:85:5f:2a:d2:c3:87:ea:
13:65:81:1e:ec:92:16:9a:6b:60:3a:67:d0:e9:ce:
0a:94:18:d2:ca:24:ad:ba:56:f9:2d:b2:0e:5f:68:
9d:49:13:ca:6d:5c:ca:5f:25:90:7e:fd:5e:78:5b:
3b:a9:26:35:1e:b2:a5:16:ba:77:58:89:07:81:de:
6d:1a:2e:5c:ad:d6:c0:ae:3c:7c:0d:fd:71:b1:f7:
a5:dc:66:61:96:70:28:cb:d6:c6:c2:6c:1f:bb:11:
9e:93:2f:2d:8a:4c:f6:05:d7:2e:21:18:be:6f:4a:
22:1d:5b:11:4d:7e:38:1a:16:43:ac:c5:77:a2:49:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:CD:23:EA:B0:EA:25:6F:BC:F7:51:07:85:05:A8:B7:4B:81:DD
X509v3 Authority Key Identifier:
keyid:AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/FB4BA9B0C4BD11EEA04E27C3775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.56.19.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e3:7c:f7:93:55:1c:15:62:a2:29:02:74:bb:c0:fd:2a:16:
69:1a:6e:40:1d:f7:89:96:50:7c:db:49:de:41:31:5e:b4:45:
00:91:ad:8d:62:7e:12:07:82:7f:91:0a:aa:8e:a4:29:a6:af:
7a:36:80:46:21:29:8f:94:79:f5:17:41:23:30:c2:de:43:26:
40:2c:f1:b1:1f:32:f8:8b:01:a1:5d:98:1f:30:1c:8a:33:5b:
3c:d0:d9:90:0c:42:90:6b:fe:db:8a:1f:8f:0b:83:70:2d:26:
4c:ba:52:6e:18:43:57:48:9a:4a:d3:c2:a8:41:ce:e8:8d:da:
52:dd:ad:41:25:cf:3c:b3:a3:bd:1d:e3:33:1d:33:46:75:99:
1b:11:36:5b:73:c0:b8:b4:b3:7f:81:cb:cf:18:59:78:83:19:
b9:26:b1:9c:0c:4c:63:69:27:dd:cf:e4:2f:d1:84:36:a9:4c:
84:17:39:c9:49:db:ae:67:62:a2:db:39:68:f1:17:0a:26:1d:
61:ea:b8:75:2c:ef:f7:2d:ae:ec:d8:1e:f4:52:d8:be:f8:d5:
58:e6:8b:66:71:b8:0d:df:d3:5d:36:6a:73:ab:1d:67:12:65:
7a:2e:17:72:84:4a:33:dd:03:a8:90:1f:44:f7:23:bc:1a:9f:
ba:ed:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 02:56:25 2024 by rpki-client on console-ams.rpki-client.org