Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/C560F066782811EF85A3AB5B762E951A.roa
File: C560F066782811EF85A3AB5B762E951A.roa (raw, json)
Hash identifier: XNr7AGnPwbQE/D3xP8IY8aKue4URy6+4l1rKO9IzQu8=
Subject key identifier: 47:65:B9:3B:B7:B7:DA:8D:27:CB:A9:B0:D9:D1:BC:A2:09:9B:E6:26
Certificate issuer: /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial: 06
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority info access: rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/C560F066782811EF85A3AB5B762E951A.roa
Signing time: Sat 21 Sep 2024 14:49:58 +0000
ROA not before: Sat 21 Sep 2024 14:49:54 +0000
ROA not after: Fri 25 Sep 2026 14:49:54 +0000
asID: 55933
IP address blocks: 45.221.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Validity
Not Before: Sep 21 14:49:54 2024 GMT
Not After : Sep 25 14:49:54 2026 GMT
Subject: CN=66eedd16-6266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:7c:cd:86:9d:97:0f:84:17:5c:67:f4:84:
ba:75:94:68:3b:33:11:ab:2f:35:bb:96:d7:a2:57:
bb:da:21:93:9e:39:6f:2d:ec:ea:61:e2:93:e2:74:
fa:c7:f1:4d:b0:d2:ff:8d:f9:db:c8:0e:04:dd:2d:
d5:52:cf:92:95:38:a9:33:db:e3:50:53:9e:1a:82:
af:5f:90:e5:10:16:2e:18:4f:98:45:64:78:7c:14:
0d:63:c8:9e:2a:48:92:fc:4f:c2:76:98:54:17:a7:
ef:c2:3f:fc:fc:32:71:4a:39:a0:7e:5b:ad:de:94:
34:24:44:b0:0f:9c:4d:e4:6b:4d:d7:af:65:d1:3c:
3d:cf:bf:bd:6b:2c:7b:fe:e1:c8:84:2b:4e:86:26:
d8:95:fb:2d:8a:7b:d0:73:b4:7e:b2:e6:65:be:23:
0f:43:9e:21:d3:01:8c:21:cf:d0:66:10:17:bd:ec:
44:e7:6a:05:08:4e:a3:06:9a:19:52:ec:af:e6:3d:
bd:5f:44:f0:2b:61:19:16:1e:d1:05:1b:7a:17:40:
75:1c:0c:ae:1d:fd:9f:93:dd:a3:95:05:1c:d4:f2:
d0:63:e7:0e:65:34:0e:77:35:75:ba:74:b3:e9:d6:
b4:41:41:2e:e2:7a:57:b5:d2:53:7b:83:df:88:ed:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:65:B9:3B:B7:B7:DA:8D:27:CB:A9:B0:D9:D1:BC:A2:09:9B:E6:26
X509v3 Authority Key Identifier:
keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/C560F066782811EF85A3AB5B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.116.0/22
Signature Algorithm: sha256WithRSAEncryption
02:4e:22:55:46:42:52:9b:81:4f:ec:aa:8a:f8:6c:ad:4e:41:
2f:a5:ec:81:95:1d:77:87:1a:22:ff:62:c4:cb:fc:52:f8:b3:
4e:21:40:2d:9c:0f:08:7b:13:09:3d:f8:e0:61:61:53:e1:57:
e1:57:6c:e4:96:b9:1e:b4:eb:86:4f:38:f2:4a:cd:aa:51:76:
41:ab:e3:92:0d:86:d4:00:2c:18:73:d5:d3:66:2b:e0:ac:0e:
15:71:fc:0c:e2:38:ee:7d:3d:23:b3:6d:61:0b:48:ac:ea:aa:
9d:6e:40:9f:6f:58:34:6a:37:ed:b8:95:e0:0e:60:69:35:ae:
e0:4d:a8:fd:93:80:fb:91:c6:fb:f4:cd:05:fc:95:68:e8:c2:
73:c0:b2:fc:d6:8c:b7:f8:b5:24:5d:08:a3:0c:f0:d3:c3:f2:
d3:3a:dc:63:99:80:0f:f0:b4:0c:c7:cf:db:fb:42:cb:dd:8b:
a3:e9:3d:c7:8f:f9:b5:dd:1a:42:60:d1:a9:a7:86:04:b8:99:
7a:ae:24:01:b8:04:e1:c5:8b:4f:90:0e:fc:26:df:a4:df:f3:
15:ee:7f:5f:05:44:10:ff:8d:91:98:9c:69:ee:20:97:6e:3e:
cf:81:62:50:0c:36:cb:19:55:1f:d5:7d:d9:a4:10:37:de:d0:
99:e0:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org