Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/4426DCF4D6D411EE8FD15F9B775412E6.roa
File: 4426DCF4D6D411EE8FD15F9B775412E6.roa (raw, json)
Hash identifier: thj6WdH0sCn3PirYI7wEQDI5hYFH5PWNx1mbax5v1vs=
Subject key identifier: CF:59:4F:35:56:FC:06:26:2D:9F:8E:A3:A4:DA:A2:C2:DC:C7:CD:D1
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04FE
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/4426DCF4D6D411EE8FD15F9B775412E6.roa
Signing time: Thu 29 Feb 2024 07:29:26 +0000
ROA not before: Thu 29 Feb 2024 07:29:22 +0000
ROA not after: Tue 28 Feb 2034 07:29:22 +0000
asID: 20011
IP address blocks: 168.210.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1278 (0x4fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:29:22 2024 GMT
Not After : Feb 28 07:29:22 2034 GMT
Subject: CN=65e03256-c3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:bd:b5:ee:35:44:b8:da:5a:16:d0:57:e3:
1c:5c:ea:a4:2c:e2:06:92:e3:ed:ef:a8:79:be:93:
0f:76:07:d2:f2:03:cc:95:b4:fe:df:6c:f5:1a:bd:
8a:54:e5:68:af:c6:be:d4:f2:1b:e9:e5:70:a9:66:
dd:cf:bb:c8:7a:2b:4a:34:72:f3:e1:5f:ed:92:36:
4c:e5:97:be:3e:b7:ff:43:5a:23:c1:8e:0e:67:66:
82:c3:3b:61:14:da:fc:d6:04:b1:c7:6f:1c:95:c3:
00:ff:33:85:f9:ea:61:01:91:a6:15:1d:78:d6:2f:
3f:8b:bf:41:89:37:5d:b2:93:3b:aa:b5:27:c9:3e:
e9:d0:3e:5a:2d:46:d9:e8:02:60:10:6f:bf:78:a6:
34:68:f8:a5:aa:10:87:ab:83:7d:65:c0:b3:90:09:
57:3a:68:19:1a:08:22:20:1a:4d:83:cc:fb:a3:df:
5b:67:a2:1a:67:8a:7f:e0:b1:7a:51:f1:a2:b3:94:
77:64:b4:82:a1:28:7d:ed:d6:f7:02:3a:d1:6f:1e:
8c:8d:aa:0f:f8:2b:71:f9:c5:3a:8b:18:13:fe:53:
43:b7:d9:b4:76:d1:53:38:65:27:bb:f6:74:30:40:
94:9e:8c:6f:1b:b3:ef:2d:70:36:8d:59:ef:9c:d3:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:59:4F:35:56:FC:06:26:2D:9F:8E:A3:A4:DA:A2:C2:DC:C7:CD:D1
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/4426DCF4D6D411EE8FD15F9B775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.240.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:e2:89:fe:e2:8e:9a:cc:c6:64:2f:87:fe:73:87:a9:de:c5:
a8:af:13:1b:ff:86:b0:30:a9:20:6a:14:04:e1:e4:79:f6:a2:
ac:8e:7d:5d:44:e1:ea:e1:cf:41:cc:28:03:b6:64:54:26:f0:
83:2c:ac:4f:17:ee:08:ef:08:a7:d8:7c:7d:0c:60:a1:02:e3:
3e:73:ab:83:69:6b:7d:a9:f9:83:d0:db:72:78:28:67:57:3b:
82:9f:fc:68:ed:a1:ea:c8:59:51:4b:27:19:18:72:34:12:99:
2f:20:99:36:a5:b6:bc:0c:17:4c:4b:4e:ea:dc:89:21:bb:a1:
e2:13:43:52:1f:28:e7:fc:00:47:c6:40:2f:74:1b:c0:f7:fa:
42:5c:a9:a9:cb:7a:a8:f5:b9:48:43:a6:5c:7a:e5:7c:13:88:
a0:ae:5b:0a:37:1a:02:76:6f:99:8d:d7:e3:a1:76:26:a2:94:
4e:c9:eb:e9:af:c0:d6:51:ce:62:55:d9:cc:63:20:d1:b6:aa:
0e:10:48:a0:c5:97:a0:71:1d:69:56:23:e4:16:a2:f6:04:96:
72:6b:86:72:21:33:d0:2f:6c:ea:61:b1:82:2d:b4:39:86:0f:
db:5c:0f:d9:6f:d7:2e:93:a2:da:98:55:e2:bb:bb:ea:d5:f2:
e4:ef:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:22 2024 by rpki-client on console-ams.rpki-client.org