Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/25AFCD1CD6D411EEBE04379B775412E6.roa
File: 25AFCD1CD6D411EEBE04379B775412E6.roa (raw, json)
Hash identifier: wQ53Tz4Ea9/8C2+Qv/h7Bn2lmPYDJIiNvN6ok68fVzI=
Subject key identifier: B9:9E:C7:D0:1B:E3:5C:D3:EC:88:0D:30:1C:AD:7E:0B:B0:6C:F6:8F
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04FC
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/25AFCD1CD6D411EEBE04379B775412E6.roa
Signing time: Thu 29 Feb 2024 07:28:35 +0000
ROA not before: Thu 29 Feb 2024 07:28:31 +0000
ROA not after: Tue 28 Feb 2034 07:28:31 +0000
asID: 20011
IP address blocks: 168.210.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:28:31 2024 GMT
Not After : Feb 28 07:28:31 2034 GMT
Subject: CN=65e03223-6421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:78:58:28:f0:fa:6b:48:9d:ae:b0:12:bd:
be:5b:02:ca:93:58:7b:18:98:3d:25:5d:00:1f:df:
53:3f:da:7e:9b:18:71:d1:4d:7a:b1:4d:d4:96:c5:
8b:fd:b8:e5:1e:7c:41:51:29:52:cb:ff:a2:5f:8e:
b9:ab:3f:41:ad:70:24:0d:82:fc:dd:6a:ab:ac:18:
2f:4b:a5:74:70:b8:64:b8:91:43:e0:bf:f1:0d:d0:
4b:84:72:3b:6f:c5:8f:81:40:ca:a5:f7:98:34:af:
19:c9:91:81:82:64:c9:f3:98:d0:32:04:05:15:58:
c9:21:32:4f:ea:e7:6f:fa:5f:f8:02:80:e2:03:b0:
43:4d:a7:f6:5d:85:20:41:a0:1c:05:df:df:54:62:
3c:b2:ae:63:cf:63:72:a6:28:0d:2c:79:ef:1b:0d:
a5:df:b5:de:9c:0e:ca:f9:2c:71:34:f8:0e:78:61:
63:97:0d:85:a9:1b:6b:49:4c:4a:c8:cf:90:5b:5f:
48:b2:fe:27:24:54:b0:7c:7e:14:fd:c7:6f:55:d9:
85:46:ac:ac:fb:e1:5e:62:17:41:66:2f:dd:a0:d5:
f0:2a:c6:6b:2d:d9:eb:00:80:92:b4:65:4c:be:66:
22:9b:6b:b5:0b:a7:95:59:82:49:df:d6:5a:02:8c:
ed:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9E:C7:D0:1B:E3:5C:D3:EC:88:0D:30:1C:AD:7E:0B:B0:6C:F6:8F
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/25AFCD1CD6D411EEBE04379B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.236.0/22
Signature Algorithm: sha256WithRSAEncryption
06:08:45:fc:1f:1a:a7:42:3f:b0:15:1c:57:d5:27:64:9f:97:
bf:c3:3f:9a:5e:b3:32:b6:53:ea:f6:33:44:c1:2d:7f:30:2b:
98:ad:53:98:47:4b:5e:0b:42:29:4d:e5:33:06:f3:1e:6a:3e:
14:5d:7e:da:6c:88:be:f2:e4:84:c2:43:a8:ea:b1:a2:6c:f7:
1c:c9:82:fb:6f:97:64:91:4a:97:ac:af:f2:3a:19:17:a9:da:
b3:0a:14:80:6c:69:29:13:0a:ca:3f:ee:65:12:5b:b0:a9:7d:
d2:4c:49:69:49:6b:56:bc:40:c2:9c:a7:c5:c1:41:d4:88:e9:
a3:2f:6b:9d:69:97:b1:f8:f3:f7:11:02:8a:fd:17:c4:23:30:
f8:33:36:d1:3e:6b:9c:ec:60:14:87:d0:12:b6:ef:91:8b:16:
3a:cb:d5:7e:18:d7:5f:e6:f5:d6:0b:cf:dc:ce:40:ab:24:ee:
fc:9e:c0:7e:41:69:44:f0:e7:62:37:cc:86:94:ae:b1:b5:a2:
b5:2f:d0:3c:2b:2a:8b:c9:3c:ac:b2:25:43:ab:4a:51:70:9f:
d3:e2:46:d9:db:f4:15:ab:7b:cb:f6:81:ae:38:05:94:f7:24:
3b:96:c6:1c:e9:ec:52:b7:36:cc:d8:89:58:1e:29:56:3c:45:
38:f9:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:37:48 2024 by rpki-client on console-fra.rpki-client.org