Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/856937CCD6D211EEBB241198775412E6.roa
File: 856937CCD6D211EEBB241198775412E6.roa (raw, json)
Hash identifier: +VWOVU8LbjtU0UeX7EzW0goMWVCEjX2fnfbvZEzd4jE=
Subject key identifier: E8:92:2D:9E:B0:7F:43:DC:D7:46:8E:46:9E:5A:A0:DE:15:12:20:C4
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04DE
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/856937CCD6D211EEBB241198775412E6.roa
Signing time: Thu 29 Feb 2024 07:16:56 +0000
ROA not before: Thu 29 Feb 2024 07:16:53 +0000
ROA not after: Tue 28 Feb 2034 07:16:53 +0000
asID: 20011
IP address blocks: 168.210.102.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246 (0x4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:16:53 2024 GMT
Not After : Feb 28 07:16:53 2034 GMT
Subject: CN=65e02f68-4641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:ac:62:ea:0e:37:b3:07:0a:e8:bf:eb:db:
2d:50:22:05:91:4b:ab:b2:dd:f2:cb:69:59:d4:99:
01:b1:42:d7:9d:e8:92:94:57:6f:e1:3f:46:dc:03:
a9:70:a2:ff:1f:63:87:f8:43:fd:36:7d:a4:8b:18:
ac:fe:52:ec:db:d6:90:01:75:d9:a6:14:d2:f7:5c:
98:39:f5:20:f7:d5:60:07:88:ba:2a:9f:ff:fe:31:
a7:35:22:87:7a:2d:7f:0f:64:7f:e9:68:da:60:0b:
8e:f1:0f:71:d5:61:5a:b3:23:88:7d:d3:c2:85:b2:
5f:68:22:7f:b7:97:c0:66:d7:8c:26:9e:22:dd:af:
89:d0:57:bf:8e:83:bd:78:00:19:fe:49:78:5c:15:
13:45:12:e1:53:50:a3:40:55:ec:ea:56:8f:d2:2c:
85:8d:9e:8a:68:d2:dd:36:77:e9:8e:ee:6c:b4:21:
f5:4d:93:5d:be:02:5b:a1:14:27:46:75:60:3d:15:
e3:13:a5:78:c7:57:6b:e2:4e:2b:1b:c5:2a:8b:a8:
52:29:7d:09:06:e5:a4:fe:ba:5a:8c:43:16:2d:8e:
4a:5e:95:3e:46:ff:37:ee:77:2a:36:3b:8b:6d:cc:
a1:e9:56:de:dd:fb:25:a9:9f:d8:79:14:23:05:1b:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:92:2D:9E:B0:7F:43:DC:D7:46:8E:46:9E:5A:A0:DE:15:12:20:C4
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/856937CCD6D211EEBB241198775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.102.0/23
Signature Algorithm: sha256WithRSAEncryption
15:f2:b3:93:cd:0d:c7:12:bb:dd:56:8c:c4:45:f0:58:6b:95:
c4:45:49:e4:a8:bc:b5:1b:d1:a8:f7:76:79:4f:a9:cf:04:b0:
4f:8d:2a:f2:c7:58:b4:9b:bf:74:67:4f:ca:b5:ef:2d:dc:98:
10:30:92:bb:eb:e7:37:ea:c1:49:78:58:cd:2b:75:3a:bb:3e:
f3:34:35:f6:8f:aa:1b:f3:12:8f:40:67:18:3d:db:9b:50:a8:
8c:56:1f:3f:36:03:e3:a3:05:66:67:30:bd:c1:af:d6:e8:ae:
ab:36:8c:e3:f9:2a:50:9c:63:69:ea:b3:64:96:9a:d9:00:8d:
a1:04:4d:af:2d:e8:64:60:75:66:27:be:6f:1d:d6:f8:8a:f7:
92:18:f2:83:49:dd:12:8a:7b:3e:79:aa:26:fe:2e:dd:71:f0:
55:6a:09:26:f3:2b:62:cd:b1:fc:15:1a:28:ed:d2:1e:67:ee:
ee:35:42:d5:c0:4a:ea:54:2b:b5:45:52:e8:af:47:bf:2d:f0:
f6:74:40:9b:71:95:08:8d:98:be:ec:b5:12:a6:80:65:0c:b3:
01:6c:41:c4:a5:fe:bf:dc:1b:2a:36:02:8a:05:34:18:b5:2f:
8b:3c:0e:c4:e1:0b:35:ed:c3:99:41:87:0a:9b:af:7f:96:be:
43:4b:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:48 2024 by rpki-client on console-fra.rpki-client.org