Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/6E9C1B862D1D11EEAA7922264AD9E6FC.roa
File: 6E9C1B862D1D11EEAA7922264AD9E6FC.roa (raw, json)
Hash identifier: 5NWHcuif+04bTaOVcbN2bJ32yFFGjBPb/O5DbO8ySzg=
Subject key identifier: 5C:94:27:43:D1:2F:2F:4C:F2:B9:D7:E2:68:3C:E5:DB:6E:E0:7A:99
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 03CF
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/6E9C1B862D1D11EEAA7922264AD9E6FC.roa
Signing time: Fri 28 Jul 2023 08:04:53 +0000
ROA not before: Fri 28 Jul 2023 08:04:48 +0000
ROA not after: Sun 31 Jul 2033 08:04:48 +0000
asID: 20011
IP address blocks: 168.210.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Jul 28 08:04:48 2023 GMT
Not After : Jul 31 08:04:48 2033 GMT
Subject: CN=64c376a5-e563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:9d:59:0c:17:25:c0:54:86:32:71:84:0a:
c5:e4:79:d9:2d:09:e4:4b:dd:37:c1:e8:7d:4a:15:
6a:2d:e9:51:6c:09:18:c4:fc:b6:8b:2f:b8:4f:42:
2f:5c:6c:81:c1:50:57:7b:85:2f:d2:90:8e:48:25:
47:c3:89:3d:40:ff:42:51:49:0e:f2:cf:f5:da:52:
9f:97:39:9b:af:86:6c:99:13:e0:9c:ff:76:5f:e4:
fd:88:7e:e4:98:35:94:fc:6d:aa:91:df:a4:fa:37:
70:69:d5:c4:7f:be:4c:43:30:ee:c1:bf:06:4c:30:
fd:f3:03:6b:6c:09:7a:f3:d6:3e:81:cc:f8:89:52:
d2:df:7e:e1:71:f0:43:fd:f3:01:ff:08:d6:38:da:
fc:1d:bb:45:f4:03:5d:d0:33:c0:08:02:6b:30:bd:
c7:fe:86:7f:a9:2c:cc:33:8a:c4:e2:33:f3:34:c2:
01:b4:a5:44:70:eb:5b:f8:f4:5d:e5:25:70:e6:fa:
d6:cc:86:ce:55:0a:05:21:5c:a7:16:62:3a:40:38:
d4:62:db:5d:2d:a2:6d:4c:ae:61:57:6c:48:7a:e2:
99:04:25:2d:0a:46:04:be:34:59:cb:b6:4f:6c:93:
3f:01:67:bc:ff:5e:ad:68:70:80:91:72:a0:f0:44:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:27:43:D1:2F:2F:4C:F2:B9:D7:E2:68:3C:E5:DB:6E:E0:7A:99
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/6E9C1B862D1D11EEAA7922264AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:56:a1:40:f0:0e:79:9c:c3:79:a3:29:66:db:ea:9d:a5:3c:
2c:e9:55:fe:72:d0:ab:9b:df:c5:c8:3d:83:da:3f:2f:37:e0:
d5:00:e4:ef:3c:ac:17:3f:d0:c2:ac:7b:e3:c2:72:87:c2:7b:
3a:b5:36:ca:c6:5b:39:49:68:19:91:78:44:3d:42:cb:66:7c:
c9:ef:43:80:73:b3:38:08:7d:bc:09:90:1b:6a:6c:33:b0:24:
94:1b:65:94:66:67:3b:b5:24:8d:60:2c:25:44:47:29:b9:94:
2d:d0:2f:41:8c:a1:3e:a7:ce:40:ae:05:66:c1:4e:09:ac:19:
e7:56:55:45:34:4b:46:77:6c:58:ee:fe:9d:74:10:8d:c1:9c:
12:05:e5:00:4c:2a:0d:4d:d3:8c:3e:cb:ef:19:47:72:ed:ae:
6a:3d:89:76:ce:df:17:26:c6:c5:32:f3:3c:06:f8:17:2e:20:
71:f8:d3:0d:5c:ec:28:e0:73:54:6f:7d:27:f0:df:30:5a:6b:
ad:74:47:e5:af:9d:cc:1f:c4:49:b1:51:fe:d6:a0:27:68:62:
38:d6:14:72:8f:f9:78:00:68:f2:0a:93:b3:41:79:c4:6c:1d:
4e:e2:cd:ad:f5:80:a4:62:23:20:7e:7f:bf:a8:6a:a8:33:55:
c9:a2:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:00:54 2024 by rpki-client on console-ams.rpki-client.org