Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/6306BA7AD6D111EE8D123E96775412E6.roa
File: 6306BA7AD6D111EE8D123E96775412E6.roa (raw, json)
Hash identifier: LhniyhVI98Bu2cP0+UWqwVqSF0Ryo7Y5wEOzSwkjfCY=
Subject key identifier: 85:9E:24:63:ED:28:10:E1:DC:8C:F4:1D:80:15:FC:B3:A8:93:4F:38
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04C9
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/6306BA7AD6D111EE8D123E96775412E6.roa
Signing time: Thu 29 Feb 2024 07:08:49 +0000
ROA not before: Thu 29 Feb 2024 07:08:45 +0000
ROA not after: Tue 28 Feb 2034 07:08:45 +0000
asID: 20011
IP address blocks: 168.210.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1225 (0x4c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:08:45 2024 GMT
Not After : Feb 28 07:08:45 2034 GMT
Subject: CN=65e02d81-98ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:05:8e:6b:2d:35:22:6f:0c:e8:a2:0f:e3:
f0:09:99:fc:59:ca:61:8f:89:c4:e9:7d:29:8c:a4:
cb:47:97:58:94:e5:3f:9f:59:e3:03:e3:7d:ee:a0:
23:d5:3e:b8:88:3b:bd:f4:95:83:69:47:16:8c:ea:
74:a2:a2:25:a9:6e:42:9a:15:dc:18:6d:df:a2:7c:
68:4b:90:27:c2:db:6b:39:79:10:9e:76:f9:c9:0b:
d2:aa:90:0f:18:6b:fd:d8:01:18:03:09:12:a9:24:
7c:f1:eb:f4:31:61:4a:69:01:17:68:83:4a:51:ee:
6f:2a:33:b8:a0:57:b1:13:f3:60:06:ca:63:10:1f:
85:58:a7:3c:70:4b:60:64:d9:29:1d:0d:ae:b4:bb:
2b:3c:f6:2b:6b:ba:fd:22:79:31:fb:41:48:55:22:
00:3c:5c:6c:8f:65:14:e9:06:a8:b5:d5:56:e5:02:
4f:c6:2b:47:1b:48:08:48:46:60:73:ce:15:4f:d7:
27:60:19:4a:72:27:c8:03:0f:92:82:26:17:9e:5b:
c6:79:36:35:36:56:14:31:46:46:78:90:4b:1d:eb:
ed:c3:82:a3:32:00:58:a7:3d:21:30:99:39:86:00:
39:20:dd:d2:43:94:cc:41:ea:0a:0d:07:e0:9e:c7:
d7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9E:24:63:ED:28:10:E1:DC:8C:F4:1D:80:15:FC:B3:A8:93:4F:38
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/6306BA7AD6D111EE8D123E96775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.42.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:ea:02:0c:53:e9:9b:1c:14:3d:5d:0b:0c:82:8a:8a:45:49:
5c:ce:bf:a2:de:c0:4e:55:20:16:b5:f2:10:ee:2e:0c:ea:b8:
1d:cd:3b:ba:ba:9d:4c:9f:1c:5c:49:b3:56:cd:2f:d3:75:78:
49:f7:c7:4c:3e:a4:f9:c9:04:93:dc:d9:1a:c0:1e:cb:3c:f0:
a9:e3:12:ad:2e:c4:48:cf:0f:56:81:31:9b:bc:ff:eb:07:28:
60:34:80:2b:fc:1b:2b:58:e5:2d:5a:f6:67:f7:f6:da:57:78:
4b:1f:9e:3e:de:ef:75:42:94:0b:b7:e3:5e:ae:d5:79:06:e4:
84:f6:a2:85:ae:a7:40:7b:da:ff:5b:c7:e2:47:2c:c4:d2:f1:
69:5d:ce:d2:e0:17:5a:5a:6f:01:87:ba:f9:87:47:5d:26:45:
15:5d:a5:74:09:0f:9b:ff:67:18:e2:42:2e:5d:90:31:f7:87:
d0:c0:e9:b0:fd:47:c5:92:20:85:ae:87:ea:7a:87:bf:52:7a:
85:12:df:9d:f3:1a:58:25:26:13:71:6b:f4:6b:b5:97:39:6b:
7a:36:12:b0:82:7b:d3:b6:9e:d9:2f:f4:95:b3:24:45:ef:8b:
56:59:e1:91:b2:ca:3c:d3:ec:01:fd:64:8a:e8:c1:90:81:7e:
24:14:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:22 2024 by rpki-client on console-ams.rpki-client.org