Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/4E9C4770D6CD11EE958F778F775412E6.roa
File: 4E9C4770D6CD11EE958F778F775412E6.roa (raw, json)
Hash identifier: c9sQaEYAyqm+BkldBdyQdwbmIPGfxK5LWIsB7tX3aMo=
Subject key identifier: AA:9B:CB:01:C7:58:8E:E5:D8:68:C6:E7:88:C3:84:03:25:A2:65:CB
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04B8
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/4E9C4770D6CD11EE958F778F775412E6.roa
Signing time: Thu 29 Feb 2024 06:39:37 +0000
ROA not before: Thu 29 Feb 2024 06:39:33 +0000
ROA not after: Tue 28 Feb 2034 06:39:33 +0000
asID: 20011
IP address blocks: 168.210.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1208 (0x4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 06:39:33 2024 GMT
Not After : Feb 28 06:39:33 2034 GMT
Subject: CN=65e026a9-d904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:fc:3b:07:22:48:27:4c:2b:37:6f:17:ea:
e2:b0:d2:40:69:8a:97:f5:2f:2e:94:de:08:82:23:
15:a7:88:9c:72:75:ca:56:5f:84:86:fd:68:12:33:
fd:46:ef:dd:1a:01:2c:8c:41:28:e0:66:f0:11:48:
07:40:3c:ac:3a:90:f3:7c:92:39:fa:48:e0:40:74:
5e:73:72:2a:0c:ce:9d:6d:ef:2f:47:14:49:0a:66:
42:e6:91:ef:9f:db:bd:4e:e8:6b:6d:36:d2:da:2d:
7e:4e:7e:2a:82:a8:80:f9:80:72:6c:d8:de:28:03:
29:61:b2:9c:cc:71:c2:1c:5d:cb:3e:dd:39:e8:c1:
da:eb:cd:71:75:1d:72:68:15:da:84:40:c5:27:d5:
f5:34:23:16:4d:87:d0:66:3a:44:46:3c:fa:6e:fc:
91:85:24:71:07:7b:3c:6e:c0:9f:57:46:1b:63:e6:
80:42:20:39:dd:1a:88:c5:0b:6c:6b:33:58:0a:17:
37:d1:f6:09:8e:c0:97:04:f8:ba:94:f3:3d:a6:be:
52:f5:0a:59:94:38:3f:5e:b9:af:dc:80:86:ce:ca:
7b:79:71:9e:0d:aa:4e:5f:aa:f9:28:c1:b3:9c:9b:
03:e6:c6:19:4e:ea:8e:d8:17:1b:77:63:dc:a0:90:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:CB:01:C7:58:8E:E5:D8:68:C6:E7:88:C3:84:03:25:A2:65:CB
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/4E9C4770D6CD11EE958F778F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.0.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:4d:4c:2a:a9:ef:85:41:54:81:b1:1b:16:11:97:9e:fe:35:
a8:5f:5f:2f:df:8d:57:33:ce:35:ce:1b:19:29:ad:d3:42:82:
2a:6f:4b:46:0c:9d:ed:b4:c5:1e:30:ee:f2:e4:47:2e:06:b2:
c5:96:46:a2:af:4c:68:27:c6:e1:28:1f:cd:c1:62:25:da:2d:
1e:cc:62:1c:ed:2a:42:6e:fe:8e:69:1c:c3:5e:c9:b5:ce:9a:
cd:80:7d:88:20:e4:6d:fe:85:a4:bd:92:b7:93:6c:9e:68:32:
bd:41:27:6b:5d:4d:9a:06:38:eb:4e:60:32:a3:c6:7f:ec:9b:
12:84:66:ec:71:84:2d:cd:64:0a:8c:36:43:3f:b5:ba:9c:72:
e5:a1:be:93:df:06:69:06:d5:de:57:ef:0c:52:69:89:a6:d5:
aa:0f:7d:b9:c6:5b:0f:18:5c:f2:59:02:10:c0:c7:e2:1b:88:
5d:47:42:70:bb:85:55:26:c2:5d:6a:67:ae:ca:42:46:7d:a1:
31:06:aa:4a:05:81:77:97:94:4a:5f:13:a4:45:f2:ac:50:cf:
d4:97:23:cf:18:9f:e5:53:f9:68:b4:2a:75:64:c1:33:4e:bf:
7a:59:4a:c5:69:26:87:2e:55:4d:42:90:c8:8c:40:d5:1f:c3:
76:65:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:29 2024 by rpki-client on console-fra.rpki-client.org