Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/A3456F54D6D211EEAF4D5198775412E6.roa
File: A3456F54D6D211EEAF4D5198775412E6.roa (raw, json)
Hash identifier: i0yZF2PUCxhgm8UqNd/C0q9+wArj2Hxhrf+6SwwJG2A=
Subject key identifier: B2:22:9D:D9:DC:40:1E:25:FE:6D:90:51:B0:8D:13:39:FF:11:78:FD
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04E0
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/A3456F54D6D211EEAF4D5198775412E6.roa
Signing time: Thu 29 Feb 2024 07:17:47 +0000
ROA not before: Thu 29 Feb 2024 07:17:42 +0000
ROA not after: Tue 28 Feb 2034 07:17:42 +0000
asID: 20011
IP address blocks: 168.210.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1248 (0x4e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:17:42 2024 GMT
Not After : Feb 28 07:17:42 2034 GMT
Subject: CN=65e02f9a-310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8a:d8:21:02:23:d8:24:7a:ef:e1:a2:b8:b0:
7f:49:63:21:5d:d0:8a:6e:8d:7e:84:f7:0e:37:f4:
b2:46:68:83:2d:58:53:3e:1e:d8:d7:d2:ef:3d:c4:
e5:f5:54:c0:a7:34:4f:31:e9:bf:91:39:d8:64:96:
a6:e9:78:c4:91:15:6a:3f:cc:83:73:46:cb:0f:b4:
0c:b3:72:51:46:70:1e:90:8b:bd:1a:a2:89:d5:94:
f1:76:2d:f4:c4:b0:97:ea:71:a6:16:7c:71:38:35:
49:12:f1:7a:74:5b:af:eb:7a:78:a3:fd:d5:96:ed:
7f:d1:84:d4:48:d0:ea:a9:37:9f:9d:c3:76:fc:8e:
49:8d:4f:8b:23:90:e5:97:f9:d4:08:d6:95:f1:40:
8b:60:c5:b0:aa:be:48:2f:ec:f3:a8:dd:1b:7f:bb:
d5:3d:45:76:a2:a8:c1:58:f8:33:87:09:1c:4d:ab:
40:b6:3e:ab:7b:97:a4:f9:70:df:90:d8:92:e4:53:
1a:f2:7e:a2:1c:4c:50:34:dc:6b:20:98:c5:69:ef:
05:82:b1:0b:d0:88:6d:df:bc:83:3a:76:65:b1:b8:
5f:e1:f8:da:f3:93:6c:d3:74:99:e9:75:bb:09:66:
65:a1:3a:78:2c:b0:37:f4:03:3d:97:69:e3:2d:51:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:22:9D:D9:DC:40:1E:25:FE:6D:90:51:B0:8D:13:39:FF:11:78:FD
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/A3456F54D6D211EEAF4D5198775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.104.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:ff:e9:e7:9e:37:2c:a1:52:0a:c6:ef:e2:05:97:53:32:f2:
39:8f:50:17:30:b5:b2:3d:97:cf:5c:9f:be:1e:17:4f:9c:94:
83:5c:c9:0f:2d:c4:f6:70:ad:47:11:07:14:0d:08:a5:59:2a:
fb:b0:83:15:e4:21:3c:a2:69:59:7b:d3:83:e8:04:ce:04:42:
b3:fe:1c:05:2b:a2:1d:8c:ad:22:79:4a:50:80:6e:54:92:df:
8d:76:31:81:f7:a6:4a:fb:42:fe:1a:fd:53:dc:cb:78:9a:66:
56:b6:01:53:4f:17:a8:18:e0:0b:6b:60:37:f6:86:cd:fb:17:
47:db:74:2b:b6:e1:98:b5:8d:89:9d:da:b2:ea:77:e8:90:86:
fd:9b:71:f1:8c:20:cf:ce:5d:4d:6e:ce:5d:1f:19:bc:64:30:
f0:86:3d:e1:42:c9:7a:e2:7f:94:53:4f:d0:85:71:18:b5:c6:
db:4a:69:98:c3:d6:38:13:6b:e3:7c:88:56:56:65:59:19:f3:
4e:39:34:ae:d1:01:12:da:81:89:cd:29:b6:01:03:ab:ec:df:
57:43:84:cc:62:72:c3:6f:5c:20:c6:d8:88:80:a7:aa:9e:ee:
92:a1:5b:fd:3f:f1:0b:c9:05:b2:32:d1:1c:18:0d:e9:54:42:
b1:32:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:29 2024 by rpki-client on console-fra.rpki-client.org