Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/8AE5472A9B7711EBB592026AF8AEA228.roa
File: 8AE5472A9B7711EBB592026AF8AEA228.roa (raw, json)
Hash identifier: JYtg38AemjdFQ9T4jRQ9y/cKWVHvuahgrREnbxpFFVA=
Subject key identifier: 6A:16:B8:98:19:8B:25:9C:AE:AE:97:F9:D9:C4:15:58:04:01:AF:9D
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 5A
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/8AE5472A9B7711EBB592026AF8AEA228.roa
Signing time: Mon 12 Apr 2021 10:12:10 +0000
ROA not before: Mon 12 Apr 2021 10:12:04 +0000
ROA not after: Wed 30 Apr 2031 10:12:04 +0000
asID: 3741
IP address blocks: 152.110.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 May 2024 00:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Apr 12 10:12:04 2021 GMT
Not After : Apr 30 10:12:04 2031 GMT
Subject: CN=60741cfa-1825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:86:28:de:ee:75:2e:70:62:83:9a:06:b9:
3b:68:b5:b0:26:41:99:b0:b0:3e:b4:24:fe:f1:85:
e1:5e:c8:a7:8b:4d:4c:7a:ec:24:70:75:b2:46:3e:
14:4d:d7:09:cc:c9:c4:c0:6b:f4:64:04:2e:30:26:
88:dc:18:83:73:f8:77:d6:c0:d1:aa:01:1a:2f:c6:
28:b4:5e:d3:27:45:34:2c:5a:71:1d:a9:70:15:f8:
86:f6:06:d3:b8:8b:fe:bf:78:88:9f:6b:3d:49:48:
3e:66:89:03:6e:86:c0:89:36:e2:7e:33:7f:d5:a8:
83:d6:3c:a1:a1:3f:56:c8:3e:60:e2:71:08:54:1a:
44:ac:3f:1d:e8:4c:00:a4:32:62:90:11:d8:79:db:
01:fa:ab:5c:48:cb:93:2a:2d:7a:35:93:a5:5d:73:
93:5d:19:47:3e:3c:59:be:5b:c7:90:ec:b1:24:e2:
da:e8:0b:94:aa:f1:b7:a6:5a:0a:26:8a:ea:e3:65:
05:9a:72:49:a0:4b:01:db:26:7b:1b:bc:bc:01:cf:
dc:92:f2:05:0d:9a:6b:4b:71:af:02:87:0d:f4:47:
0a:44:48:b7:52:15:a1:e6:ea:65:3a:c8:3f:31:6f:
10:f0:4b:0e:e9:44:31:7d:45:71:e3:fe:70:f0:88:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:B8:98:19:8B:25:9C:AE:AE:97:F9:D9:C4:15:58:04:01:AF:9D
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/8AE5472A9B7711EBB592026AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
152.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:b8:36:ee:89:6b:9a:d3:28:e1:b9:d6:87:95:08:58:ea:cb:
ad:bb:d0:1e:c2:b2:c2:5c:41:2e:a8:e8:ff:25:04:b4:60:8b:
7d:8c:6c:6e:3e:c4:66:51:fc:df:f2:d0:40:82:ce:6b:89:24:
07:23:27:21:95:f5:d9:0f:f0:07:76:69:15:8f:e1:3b:ea:f9:
fa:6c:d2:30:fe:71:19:1d:fa:52:81:8f:44:e9:fe:81:12:2b:
9b:0f:1e:1b:51:6f:f7:60:d2:bb:b7:47:f7:68:1a:21:2f:5f:
51:58:c2:b9:0f:b3:44:e6:26:84:0b:d5:63:f4:61:92:9e:c1:
9c:d8:c4:94:86:90:29:2f:28:c9:30:4c:7c:2d:59:b3:73:23:
5b:ae:44:16:6f:4f:21:42:ab:3d:63:eb:0b:ee:77:5a:3e:f8:
4f:32:96:ad:d3:21:51:af:00:eb:58:4c:d6:1f:f9:0f:5e:c0:
11:21:2c:eb:22:2e:44:37:34:12:1b:8e:ea:09:73:d4:c3:75:
d5:03:4d:c1:3b:d7:f2:84:0a:fb:e3:91:7b:00:d5:2f:b7:17:
fb:c9:22:c1:4e:0a:6f:53:07:7f:de:66:c1:39:5a:9e:22:02:
2e:1a:00:6f:71:6f:e8:3d:9a:11:fe:4a:ea:46:f1:cc:70:d1:
37:72:33:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:48 2024 by rpki-client on console-fra.rpki-client.org