Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/3C5C2764D6D311EE8A146899775412E6.roa
File: 3C5C2764D6D311EE8A146899775412E6.roa (raw, json)
Hash identifier: zjTGG2bXnu0wyjKlk84e/maimd751NDXdZ1Zs2MN7QI=
Subject key identifier: 14:DA:0E:18:62:43:8C:E0:28:5E:0D:18:24:5B:5F:F0:4E:00:7E:37
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04EC
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/3C5C2764D6D311EE8A146899775412E6.roa
Signing time: Thu 29 Feb 2024 07:22:04 +0000
ROA not before: Thu 29 Feb 2024 07:21:59 +0000
ROA not after: Tue 28 Feb 2034 07:21:59 +0000
asID: 20011
IP address blocks: 168.210.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1260 (0x4ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:21:59 2024 GMT
Not After : Feb 28 07:21:59 2034 GMT
Subject: CN=65e0309b-cd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:0f:46:a6:52:1c:27:42:22:08:8d:60:28:
ec:c0:0d:82:07:6a:ae:aa:e2:41:21:f2:82:d6:fc:
61:40:c6:07:27:27:91:d4:fa:75:f9:64:05:11:a5:
ef:0e:6b:7e:6c:9a:e6:46:cc:07:50:bb:fe:d3:12:
27:c3:2d:21:e7:1e:0e:2c:37:8f:c8:f7:9e:28:2f:
1f:cf:59:d9:6b:3e:68:53:d5:27:37:23:ab:e2:27:
ea:a5:a7:7a:3a:bd:b2:42:6d:6c:df:90:68:50:a4:
76:94:a2:2d:60:b1:d4:a6:c8:e3:5c:44:f6:53:2f:
54:a6:8d:51:da:6e:4c:69:f8:73:c4:77:77:a4:99:
ea:9f:c0:02:bc:8e:c2:3d:7e:b9:f9:e4:b6:c7:a3:
44:89:e2:68:87:8b:d1:74:d4:38:ed:b0:0f:ed:77:
e5:93:e4:64:05:08:22:53:33:ad:0c:5b:41:89:fb:
c5:f7:0e:e7:f6:4d:a4:9f:dc:85:e3:f0:51:77:fd:
94:46:8b:d7:37:59:9a:8e:37:3b:dd:25:a2:52:fa:
b4:b1:38:21:7c:fd:de:8a:16:50:08:1e:33:e4:60:
e4:cb:c6:f2:20:c5:dd:97:65:ec:38:c7:45:a6:1e:
23:89:ae:2a:06:3e:bf:f4:15:a7:bb:3a:1a:90:ad:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DA:0E:18:62:43:8C:E0:28:5E:0D:18:24:5B:5F:F0:4E:00:7E:37
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/3C5C2764D6D311EE8A146899775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.192.0/20
Signature Algorithm: sha256WithRSAEncryption
87:ed:ed:65:73:25:8a:79:6d:c2:00:a5:24:c6:9e:7a:96:f4:
d0:25:02:20:31:bb:e4:74:01:59:81:13:17:a5:37:fd:11:e6:
66:cd:ad:b2:58:4c:7b:06:12:96:bf:8b:e5:9c:33:26:30:3a:
0e:bf:71:05:45:3a:a3:d2:8f:a0:5d:4f:45:d2:bb:8c:ef:ac:
4a:2d:2a:e3:77:8a:0a:06:3e:fe:46:b4:ea:ac:bb:38:a7:53:
9f:5b:99:d6:b7:08:a9:a8:e7:67:67:e6:1e:e6:6b:12:84:9b:
38:a3:25:eb:c0:27:a1:2a:61:50:92:6f:9e:1a:db:2b:8d:04:
65:c4:86:a4:29:0f:1f:ac:3e:09:2d:fc:85:95:c0:8a:1a:d9:
d9:d6:52:0b:6a:dc:e5:95:dc:00:01:9a:48:d6:22:eb:5a:d5:
95:35:e6:71:f8:c7:2b:3b:54:6c:63:a8:67:76:75:d5:0b:5a:
ee:9d:11:78:ce:94:ee:d3:ca:3a:a4:75:aa:66:be:ec:d3:5e:
85:03:7b:18:5b:6d:73:3a:64:14:36:2b:f6:84:79:94:d7:94:
9b:84:2b:64:41:9f:b9:95:be:fe:28:71:95:b1:6c:0d:91:22:
6b:05:45:da:92:b7:ba:38:a6:73:9a:94:ab:bf:1e:2f:10:a6:
92:39:3a:ee
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBUjExMC8GA1UEBRMoNkM2MDJBMjZGQjJDNDY2NzA3MjJERkM3M0Y3MkZD
NEI2QTczRUJDNDAeFw0yNDAyMjkwNzIxNTlaFw0zNDAyMjgwNzIxNTlaMBgxFjAU
BgNVBAMTDTY1ZTAzMDliLWNkNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIZQ9GplIcJ0IiCI1gKOzADYIHaq6q4kEh8oLW/GFAxgcnJ5HU+nX5ZAUR
pe8Oa35smuZGzAdQu/7TEifDLSHnHg4sN4/I954oLx/PWdlrPmhT1Sc3I6viJ+ql
p3o6vbJCbWzfkGhQpHaUoi1gsdSmyONcRPZTL1SmjVHabkxp+HPEd3ekmeqfwAK8
jsI9frn55LbHo0SJ4miHi9F01DjtsA/td+WT5GQFCCJTM60MW0GJ+8X3Duf2TaSf
3IXj8FF3/ZRGi9c3WZqONzvdJaJS+rSxOCF8/d6KFlAIHjPkYOTLxvIgxd2XZew4
x0WmHiOJrioGPr/0Fae7OhqQrdffAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUFNoO
GGJDjOAoXg0YJFtf8E4AfjcwHwYDVR0jBBgwFoAUbGAqJvssRmcHIt/HP3L8S2pz
68QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzUxQUIyRDVFODdENTExRUI5M0I3NTI0N0Y4QUVBMjI4L2JHQXFK
dnNzUm1jSEl0X0hQM0w4UzJwejY4US5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2JHQXFKdnNzUm1jSEl0X0hQM0w4UzJwejY4US5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjdCMjE2LzUxQUIyRDVFODdENTExRUI5M0I3NTI0N0Y4QUVB
MjI4LzNDNUMyNzY0RDZEMzExRUU4QTE0Njg5OTc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASo0sAwDQYJKoZIhvcNAQELBQAD
ggEBAIft7WVzJYp5bcIApSTGnnqW9NAlAiAxu+R0AVmBExelN/0R5mbNrbJYTHsG
Epa/i+WcMyYwOg6/cQVFOqPSj6BdT0XSu4zvrEotKuN3igoGPv5GtOqsuzinU59b
mda3CKmo52dn5h7maxKEmzijJevAJ6EqYVCSb54a2yuNBGXEhqQpDx+sPgkt/IWV
wIoa2dnWUgtq3OWV3AABmkjWIuta1ZU15nH4xys7VGxjqGd2ddULWu6dEXjOlO7T
yjqkdapmvuzTXoUDexhbbXM6ZBQ2K/aEeZTXlJuEK2RBn7mVvv4ocZWxbA2RImsF
RdqSt7o4pnOalKu/Hi8QppI5Ou4=
-----END CERTIFICATE-----
Generated at Fri May 17 02:00:54 2024 by rpki-client on console-ams.rpki-client.org