Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/115C93BAE16111EB96804153F8AEA228.roa
File: 115C93BAE16111EB96804153F8AEA228.roa (raw, json)
Hash identifier: vVJYRPavoXyCLCs90IUxYtns4SSgNRSaXSbPs6FZN1c=
Subject key identifier: 32:64:8D:94:90:5F:36:92:10:BB:0F:D3:3A:21:70:93:7C:5E:26:58
Certificate issuer: /CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Certificate serial: 02
Authority key identifier: D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Authority info access: rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/115C93BAE16111EB96804153F8AEA228.roa
Signing time: Sat 10 Jul 2021 09:27:38 +0000
ROA not before: Sat 10 Jul 2021 09:27:34 +0000
ROA not after: Thu 10 Jul 2031 09:27:34 +0000
asID: 328041
IP address blocks: 45.222.104.0/21 maxlen: 24
45.222.104.0/24 maxlen: 24
45.222.105.0/24 maxlen: 24
45.222.106.0/24 maxlen: 24
45.222.107.0/24 maxlen: 24
45.222.108.0/24 maxlen: 24
45.222.109.0/24 maxlen: 24
45.222.110.0/24 maxlen: 24
45.222.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Validity
Not Before: Jul 10 09:27:34 2021 GMT
Not After : Jul 10 09:27:34 2031 GMT
Subject: CN=60e9680a-ecbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:af:0b:9c:1e:ed:20:36:4b:c4:ef:0e:58:
b0:08:2d:fc:bc:69:83:40:ea:df:85:a9:37:58:8b:
1f:9a:eb:a4:3b:f2:7d:78:f4:1b:a1:aa:55:ef:3a:
91:a2:2d:72:b6:4c:43:93:cd:13:27:c9:d5:bf:6e:
6a:52:de:60:8d:4d:59:cc:67:64:cb:fa:ca:de:8a:
c5:c7:c2:9d:03:6e:17:88:83:97:4c:2f:c0:e3:ef:
96:10:3c:c5:e3:2c:f3:ae:b6:4f:1c:0c:26:31:56:
1f:36:a5:42:7b:41:12:e4:d3:16:17:b1:52:a8:e7:
1d:f7:1a:a4:88:a4:a2:08:63:36:b3:0d:ad:c1:6a:
00:af:35:ba:eb:a3:e9:5e:37:84:37:69:e1:a0:99:
5c:6a:52:05:70:70:01:a8:84:71:13:fa:71:b4:4a:
e8:20:b7:51:62:d7:0a:44:b3:1b:51:92:59:9c:8b:
e3:46:2b:30:67:ab:98:ab:52:7d:60:61:bc:e3:03:
1d:27:9b:02:de:11:d3:da:1a:70:e0:cb:a6:e0:c4:
86:d3:d6:6b:b9:80:32:df:31:32:bd:bc:5e:e0:46:
7c:71:0a:5d:39:68:6e:b3:bc:ed:df:4b:36:48:9a:
e0:eb:f6:63:09:f0:89:4e:15:df:f8:ea:9b:a2:ea:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:64:8D:94:90:5F:36:92:10:BB:0F:D3:3A:21:70:93:7C:5E:26:58
X509v3 Authority Key Identifier:
keyid:D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/115C93BAE16111EB96804153F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.222.104.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:21:c8:5d:08:b3:2c:ab:c7:12:be:62:02:66:51:79:1e:44:
70:72:4b:b0:c2:fd:15:50:be:8c:1c:88:27:3f:54:bc:9a:fe:
e4:81:1e:09:59:30:06:2f:2a:1d:68:5e:dc:f1:39:34:e0:85:
21:a2:3c:91:ea:eb:c4:bc:de:34:ef:f5:3a:51:ed:cc:e9:d4:
11:20:9e:44:2c:c9:ed:f3:ab:88:5b:50:39:da:e0:ba:70:b2:
13:ec:f2:0a:cc:35:02:50:fa:54:5e:22:98:5e:15:65:f7:25:
70:47:c4:1b:9a:0b:06:8e:b1:cc:e0:5c:7d:9d:7d:f7:4d:21:
9b:e8:57:d5:da:b1:c7:cd:3e:c7:03:f1:91:05:79:d5:bb:a2:
cc:6a:8f:07:97:d1:b8:38:c7:98:aa:89:83:bb:b2:04:55:91:
4a:74:77:d2:39:5f:0d:5c:f6:0d:e9:f2:25:d0:b1:85:d3:e7:
70:89:73:e6:b5:44:93:8f:8d:86:84:6b:00:f6:f8:8b:e6:bb:
dc:b9:be:00:c1:90:3c:5c:27:19:21:be:81:3d:5e:0d:7a:6a:
a0:dd:cc:4e:ea:63:ab:1d:a4:f9:c5:28:e8:7c:92:e7:9c:80:
5e:d4:e8:a7:8c:2c:93:23:6c:32:fa:f7:42:3a:09:60:6a:4c:
ad:d2:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:06 2024 by rpki-client on console-fra.rpki-client.org