Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/219DD314D6D311EEB90E4199775412E6.roa
File: 219DD314D6D311EEB90E4199775412E6.roa (raw, json)
Hash identifier: ma6pwemz7R0BRkqrdUQIGdjzYbB9f9tRhXx3930ePjo=
Subject key identifier: A8:A6:B3:83:7A:F3:0D:43:84:0A:1D:C6:CC:D9:27:86:56:17:73:73
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04EA
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/219DD314D6D311EEB90E4199775412E6.roa
Signing time: Thu 29 Feb 2024 07:21:19 +0000
ROA not before: Thu 29 Feb 2024 07:21:14 +0000
ROA not after: Tue 28 Feb 2034 07:21:14 +0000
asID: 20011
IP address blocks: 168.210.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1258 (0x4ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:21:14 2024 GMT
Not After : Feb 28 07:21:14 2034 GMT
Subject: CN=65e0306e-fc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:de:b6:b8:2c:94:69:a1:4a:5b:ff:bf:da:
d9:d8:86:10:d5:31:fd:b2:4a:09:ad:89:12:71:fd:
39:83:af:3a:cb:3d:aa:5e:91:82:d5:c9:c2:3f:2d:
e5:cb:65:e5:d0:ae:92:f7:d2:8d:16:f3:53:24:62:
6c:2d:0d:f9:a4:fb:29:55:7f:44:3c:7c:5a:ba:34:
0e:68:bf:e3:52:7f:f4:ed:d7:ed:16:bf:e7:56:ec:
a5:88:50:3b:d0:a7:d5:df:37:d3:35:53:5d:8c:ac:
57:6c:89:2d:ac:fe:09:8f:dc:63:e2:e5:e9:02:2e:
9e:ef:de:43:ef:2c:83:12:7e:d7:56:30:ad:59:0f:
65:16:8e:aa:4b:20:05:28:53:4f:99:85:af:f6:06:
b2:7f:8d:f7:bf:ed:e3:92:ba:2c:14:a6:19:6a:ff:
41:af:5a:5a:80:01:c2:a2:bd:58:71:94:8c:9c:b3:
af:aa:a8:cd:d3:91:40:88:aa:d0:53:61:2b:07:1f:
a3:73:24:87:e9:d1:c8:59:13:e7:b7:f3:86:06:94:
7c:4c:22:d3:d1:77:00:b7:9b:51:7e:81:48:c0:3d:
a5:e3:93:0a:ee:43:d2:c6:55:af:6e:5c:81:7e:a1:
05:8a:db:79:68:cd:08:a9:15:46:ca:1c:da:9f:85:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:B3:83:7A:F3:0D:43:84:0A:1D:C6:CC:D9:27:86:56:17:73:73
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/219DD314D6D311EEB90E4199775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.128.0/18
Signature Algorithm: sha256WithRSAEncryption
40:5a:a9:af:23:eb:b3:48:e3:7f:79:49:56:03:40:7c:b2:54:
a2:97:30:3e:df:d9:b4:6d:c1:35:17:90:64:e5:8b:b2:7e:a0:
60:bb:41:36:c9:52:d5:b6:19:da:1c:a0:d7:ae:98:36:92:7a:
69:f8:e9:d6:67:d1:01:61:10:81:4a:56:32:9b:1c:66:32:38:
36:c5:40:a3:f5:d8:b2:a4:7e:0c:ad:e8:85:ac:ec:55:66:3f:
4c:8f:bc:74:4d:16:85:79:d5:0e:a1:5d:97:0a:66:1d:49:1b:
b5:04:45:48:9a:f9:ae:51:34:86:ea:e9:1a:3c:8f:b0:79:01:
68:d0:55:77:fa:9c:38:8e:13:ae:fb:30:2f:d2:d9:58:d6:a8:
d3:db:08:0f:54:d0:a8:93:0a:e6:10:6b:b6:c8:61:5f:b4:3c:
8b:f0:c6:cd:1e:e5:1c:45:95:2b:5b:32:57:b1:aa:36:ad:bd:
90:41:3d:36:88:7a:6a:4c:d4:8a:9d:8c:c0:d2:8d:3e:a1:ef:
d8:fd:b8:c1:5b:19:7c:29:d4:dd:11:a8:d8:d2:aa:88:1a:3d:
0e:bb:1d:84:2c:e2:b6:1f:c6:12:41:fe:36:54:f9:88:cb:6b:
18:31:83:ad:8e:3b:7f:dc:15:9b:f5:dc:de:b5:83:b7:b5:2c:
92:a4:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:22 2024 by rpki-client on console-ams.rpki-client.org