Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/22699E462D1D11EE810366254AD9E6FC.roa
File: 22699E462D1D11EE810366254AD9E6FC.roa (raw, json)
Hash identifier: WDlEgW8uuiGj/xbpni+CZTSbDgkz5iaUlRLz3RsBc9U=
Subject key identifier: EB:A3:04:02:9D:27:2D:CC:24:5B:0A:08:CF:F9:DB:50:07:74:9D:28
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 03CD
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/22699E462D1D11EE810366254AD9E6FC.roa
Signing time: Fri 28 Jul 2023 08:02:45 +0000
ROA not before: Fri 28 Jul 2023 08:02:41 +0000
ROA not after: Sun 31 Jul 2033 08:02:41 +0000
asID: 3741
IP address blocks: 168.209.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973 (0x3cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 28 08:02:41 2023 GMT
Not After : Jul 31 08:02:41 2033 GMT
Subject: CN=64c37625-c8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:3a:84:91:e6:8d:74:90:79:9f:ff:7e:15:
cf:b4:a9:fc:53:bf:26:70:d3:b9:87:62:a2:1a:31:
eb:a9:1e:2f:72:65:fe:98:a6:13:cd:3f:53:46:22:
61:ff:31:ed:e0:be:16:e7:51:75:1b:a4:b0:ab:f6:
bf:97:ff:ad:3c:a1:94:b5:b2:84:0a:80:59:9d:b6:
bf:82:52:36:e0:5b:7b:ff:c9:a1:fd:1f:c5:a0:50:
82:48:21:02:bc:80:e4:a4:a4:d4:22:fa:89:44:05:
fa:86:d8:e1:4d:a0:96:e3:d6:d5:64:31:d0:23:a5:
5c:95:ce:b1:41:26:01:fc:0b:62:80:70:e7:60:91:
c9:28:47:4c:cc:49:e6:33:57:58:74:8c:00:9b:2e:
df:09:bb:73:bd:6a:ed:e2:fe:7f:82:dc:67:06:82:
d7:d0:03:84:84:0b:99:2d:59:45:7d:f3:38:20:4c:
4d:d6:2c:e2:20:20:b5:b4:5c:bb:f8:68:03:ef:6e:
05:9c:1c:63:9d:8d:68:f5:f6:30:8f:a4:18:0b:71:
22:ba:85:48:73:1c:1f:56:36:f9:51:fd:a1:01:eb:
66:ed:1f:28:72:45:ff:c4:1a:c9:4e:af:37:d3:5e:
93:59:e9:4f:7e:42:c3:4c:b2:88:b3:ff:17:c6:f6:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:04:02:9D:27:2D:CC:24:5B:0A:08:CF:F9:DB:50:07:74:9D:28
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/22699E462D1D11EE810366254AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.209.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:c2:2f:65:76:3b:eb:ac:75:4e:f5:98:6d:43:4a:d1:bb:45:
d5:14:0d:78:89:be:95:19:04:d2:fd:30:21:0e:eb:f9:2e:2a:
b1:df:10:06:cf:ed:18:d6:7d:32:d1:23:55:7e:c4:c4:08:e9:
4d:eb:37:99:58:5b:21:b4:cb:e7:b6:3e:38:f8:bc:ae:9c:a3:
fd:38:62:b3:bd:63:27:71:96:2f:9e:09:74:ea:88:f3:e9:3f:
20:a4:d2:b7:f1:fa:50:bf:f8:a4:38:4a:f6:e3:ae:eb:c7:a7:
fb:82:61:3b:13:12:ee:ee:7b:05:df:cb:1a:14:07:81:7a:5c:
d9:f3:e0:7e:59:7a:bd:12:78:f5:58:f3:86:d2:4a:b7:e9:51:
cd:d9:41:0f:44:b6:27:ec:9f:ad:bb:95:6a:d0:de:ab:e3:e2:
08:b5:d2:bd:a6:7f:09:d2:ed:f9:ba:fe:f3:80:b8:99:e7:86:
f6:55:39:1f:c8:ec:a9:8f:d8:d5:48:cf:60:1f:79:8e:75:ca:
55:5e:49:5d:98:ea:d4:77:06:b1:1f:b1:81:16:18:ba:d4:93:
bc:91:f3:a9:c1:41:fb:7b:fd:94:b8:b6:5a:8d:2b:43:24:38:
d2:82:94:06:9c:59:93:50:ad:03:e2:39:3e:ca:2e:79:99:44:
10:09:ba:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org