Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/6A068618782D11EFA6D4A078762E951A.roa
File: 6A068618782D11EFA6D4A078762E951A.roa (raw, json)
Hash identifier: chV4S9m3KoPgfqu5cP7sLILuVr+qgeQ1n/geuKlaFME=
Subject key identifier: C9:68:97:63:B2:C1:54:BB:29:70:67:AC:B3:3C:2B:7F:90:AB:B0:90
Certificate issuer: /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial: 0F
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority info access: rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/6A068618782D11EFA6D4A078762E951A.roa
Signing time: Sat 21 Sep 2024 15:23:12 +0000
ROA not before: Sat 21 Sep 2024 15:23:08 +0000
ROA not after: Wed 27 Sep 2028 15:23:08 +0000
asID: 140869
IP address blocks: 45.221.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Validity
Not Before: Sep 21 15:23:08 2024 GMT
Not After : Sep 27 15:23:08 2028 GMT
Subject: CN=66eee4e0-069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:cc:35:bb:2c:7d:f8:09:75:99:35:a5:29:
aa:37:2f:26:c7:b2:c7:20:2e:b5:37:e1:25:25:f7:
82:93:c1:c2:0d:ad:d9:84:ef:fb:c6:d0:bb:04:60:
32:df:ea:c6:1c:a3:54:03:9b:94:38:30:70:5f:1c:
03:6c:cc:06:f4:f9:1c:e0:5f:13:9b:03:17:e2:5c:
6e:86:bb:26:a9:e0:87:c8:49:38:52:83:f4:45:52:
d7:2a:3c:ec:ae:9c:be:8c:33:5c:01:2b:a8:bb:99:
a3:eb:e6:9e:82:10:e5:03:44:70:4d:b5:02:31:94:
b2:7c:03:e7:b8:6a:e1:08:46:2f:0e:43:b6:28:b8:
0f:f1:c4:4f:cf:6f:e7:76:79:39:82:d0:c5:5e:e5:
c6:3a:1d:5b:11:cb:fb:4b:93:01:93:15:51:4b:c6:
73:65:21:6b:48:bb:dc:ad:4c:5d:26:b0:af:02:ca:
8e:e7:9b:9b:dc:8e:44:1a:6f:1a:ab:56:7f:ff:16:
b4:ee:33:13:97:8b:b1:f2:e0:fe:47:ed:91:9a:fa:
f8:c1:3b:ff:20:ad:9f:ad:36:71:6f:51:40:ba:7d:
cf:8c:2c:2c:28:f4:b5:8a:5f:95:95:ba:64:c3:ed:
43:7c:45:33:3f:7f:ab:0d:05:f6:b6:2e:a7:6d:53:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:68:97:63:B2:C1:54:BB:29:70:67:AC:B3:3C:2B:7F:90:AB:B0:90
X509v3 Authority Key Identifier:
keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/6A068618782D11EFA6D4A078762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.96.0/22
Signature Algorithm: sha256WithRSAEncryption
19:c8:c5:6f:94:e5:85:06:4d:55:76:75:f0:c6:c0:38:b3:18:
76:9a:96:9b:a6:4c:a0:42:00:66:fe:e8:ac:83:e1:86:ad:90:
89:d0:45:df:0a:4f:ea:df:fe:fa:ed:d4:7c:82:07:de:3c:60:
c0:48:57:90:19:6b:a1:5b:80:72:d8:9d:ee:a0:2a:8f:23:1d:
7c:2b:b8:76:1e:68:14:53:8b:0b:9c:14:26:10:27:2e:ed:ff:
dd:e3:13:28:22:cb:fe:8d:69:12:40:4b:38:79:55:d4:d0:9e:
49:ac:65:8a:60:a7:7d:51:8f:bd:34:30:f6:6a:2e:95:80:d0:
a7:d2:17:43:86:9c:e2:ac:90:96:3c:88:83:8e:8e:39:2c:9c:
0d:2a:2e:d6:34:a0:66:01:1b:b4:a4:89:9c:3f:53:49:60:59:
64:6d:44:65:d7:01:2b:19:7a:6b:29:ac:c4:fe:aa:61:63:d5:
ad:54:c0:30:59:2f:56:6b:ea:b4:4c:b0:13:f2:d3:d2:d1:c7:
03:83:38:81:09:74:e8:00:a5:09:d8:56:9d:e6:e6:8b:0e:e1:
d5:0a:a6:ee:91:84:67:43:bb:3e:7b:cc:3e:a9:79:7d:53:64:
00:05:82:a6:16:9a:7a:69:9f:5a:af:c0:ff:ed:37:4e:9b:1c:
ca:af:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org