Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/8FDC027ED6D311EEBCB3209A775412E6.roa
File: 8FDC027ED6D311EEBCB3209A775412E6.roa (raw, json)
Hash identifier: lvFe+feGwzn9NrH3W+fJJlP2uPBJK0C+hYAVj55kTmo=
Subject key identifier: 54:1B:9F:FF:06:97:86:65:62:4C:DA:10:61:0A:88:B4:31:50:2F:7B
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04F2
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/8FDC027ED6D311EEBCB3209A775412E6.roa
Signing time: Thu 29 Feb 2024 07:24:23 +0000
ROA not before: Thu 29 Feb 2024 07:24:20 +0000
ROA not after: Tue 28 Feb 2034 07:24:20 +0000
asID: 20011
IP address blocks: 168.210.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:24:20 2024 GMT
Not After : Feb 28 07:24:20 2034 GMT
Subject: CN=65e03127-b7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:50:72:b0:60:07:d8:92:3d:95:b9:6a:5e:
24:e5:7b:f8:3e:9c:a8:65:d8:19:0a:f9:39:dc:de:
d7:37:58:59:40:c5:a5:8a:15:74:5f:9c:c0:cb:64:
9f:2f:c7:b3:1f:53:d6:c9:a1:53:63:12:6d:37:c6:
70:05:42:e9:89:1c:42:06:89:d6:8e:3a:00:98:a7:
53:7e:a3:54:47:5d:fa:72:4f:31:03:31:4c:ca:02:
27:f0:51:3f:fd:a6:c4:9a:24:8e:78:f0:fb:a2:e0:
1d:05:a9:16:d3:1c:34:28:d6:d5:0f:27:64:b6:3d:
5f:bd:44:46:ad:55:ac:69:20:6b:0c:24:21:62:47:
42:c0:19:b1:71:7b:34:3d:95:63:d3:10:fe:c6:d9:
3b:05:11:e9:71:4c:4d:88:7e:87:d9:37:a0:e9:38:
c0:bb:b8:e9:4e:9f:ea:4f:be:64:6e:77:54:af:a0:
43:6d:0c:76:11:2e:55:ca:d5:bc:9a:73:a5:e8:85:
aa:c9:21:29:08:39:6d:b6:9d:0a:ac:c2:88:29:67:
dc:d6:24:16:94:31:5b:da:76:c3:8a:6c:59:cb:f0:
1c:d1:b4:fc:b4:75:f8:94:dc:3c:2f:1f:5c:09:67:
41:2f:f3:1b:7a:ca:de:a9:5f:04:b0:01:1e:aa:9d:
d6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1B:9F:FF:06:97:86:65:62:4C:DA:10:61:0A:88:B4:31:50:2F:7B
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/8FDC027ED6D311EEBCB3209A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.212.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:ac:5b:c0:02:f5:2b:89:df:66:16:16:10:d2:3c:55:99:48:
56:f8:fe:76:b8:67:3f:28:51:d2:16:fc:6f:df:58:f6:e6:d1:
0d:c5:e1:53:f0:5b:99:c6:0b:b6:a5:97:49:f2:92:1c:a8:27:
5a:c1:7a:0c:09:55:17:47:5c:8d:2c:9b:3f:54:7a:3f:9a:1c:
0c:0b:7c:33:39:87:e0:b5:aa:98:7a:55:20:ae:db:a4:84:81:
f0:3f:3f:4c:f8:5f:2e:66:39:a9:4e:f6:c2:a4:99:78:ca:d3:
4f:38:83:f5:52:a7:00:bd:d3:83:d9:2d:92:41:6b:73:92:2e:
be:02:66:04:3f:fb:68:4b:5f:f8:b8:0f:0a:4b:a2:94:ae:f0:
3f:8b:8d:0d:22:a0:c4:22:60:99:da:9b:25:ee:12:9e:1f:2e:
b2:b9:6d:be:13:d6:81:c7:a5:8c:a3:c5:33:7a:5e:1e:4c:ae:
fb:ca:f9:82:42:f2:ac:a2:ae:11:ba:ec:d5:31:53:38:f2:67:
6a:02:f4:b0:72:a9:59:bd:48:4d:2c:2f:b6:23:00:c8:0d:13:
ac:b2:c0:0d:52:fe:4a:4a:80:16:91:2a:fe:96:e7:62:ac:49:
4a:9e:2b:4f:ab:8d:47:1f:ea:4a:26:2d:99:30:80:58:e0:f7:
96:af:2f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:56 2024 by rpki-client on console-ams.rpki-client.org