Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/A6F2088AD6D011EEAB1BFF94775412E6.roa
File: A6F2088AD6D011EEAB1BFF94775412E6.roa (raw, json)
Hash identifier: OujszP2Qz0rfTPsT2WgXJ59nmkNNMZcwUxlCNRpm33E=
Subject key identifier: CA:FF:F9:DE:74:82:87:C1:54:A6:1F:87:5C:39:CC:70:2B:2C:B4:54
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04BF
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/A6F2088AD6D011EEAB1BFF94775412E6.roa
Signing time: Thu 29 Feb 2024 07:03:34 +0000
ROA not before: Thu 29 Feb 2024 07:03:30 +0000
ROA not after: Tue 28 Feb 2034 07:03:30 +0000
asID: 20011
IP address blocks: 168.210.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:03:30 2024 GMT
Not After : Feb 28 07:03:30 2034 GMT
Subject: CN=65e02c46-4ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:b7:00:b0:91:b0:56:9d:a1:44:d0:e4:08:
c3:cb:c1:9e:dc:7a:46:63:34:bc:60:34:4a:8d:2c:
94:1c:f3:4d:c8:73:f3:a5:14:9f:6a:1c:eb:c5:3c:
fd:a9:c0:7a:f8:93:c6:e3:8c:36:28:bd:41:8d:2a:
2e:20:1f:15:0f:83:66:eb:d9:8a:15:06:f1:7b:df:
bb:e5:06:bd:f8:68:19:b1:94:bb:0d:2a:5d:3d:ad:
6a:28:77:2d:05:cd:31:e4:92:3a:5f:4f:fb:0c:52:
bd:46:6d:12:f2:5d:cd:c3:9e:95:59:d1:09:fe:88:
ad:c7:e1:43:5e:07:9b:be:2d:38:7c:3c:7b:71:1d:
71:c9:7f:79:d3:0d:c4:58:af:f2:ae:46:27:f1:0f:
1f:bb:3d:f1:eb:38:6f:89:8f:6d:d8:96:8b:52:2d:
be:28:df:cb:9a:2c:b9:27:d8:89:07:7b:5e:6e:b6:
76:f3:4b:85:76:d3:80:ed:63:16:96:03:4d:37:d5:
55:f8:93:7b:a9:65:e5:1d:ce:3e:04:05:2a:b0:9d:
b9:d0:b3:d8:da:ca:09:5b:75:69:ba:d4:f5:e1:e7:
b8:57:01:f4:20:ae:0d:5c:21:63:d2:fc:c2:05:9b:
9f:80:d2:bf:42:c7:97:b0:fb:62:82:ef:a4:e0:f6:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:F9:DE:74:82:87:C1:54:A6:1F:87:5C:39:CC:70:2B:2C:B4:54
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/A6F2088AD6D011EEAB1BFF94775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.20.0/22
Signature Algorithm: sha256WithRSAEncryption
21:fd:dc:cd:03:98:02:43:f4:7f:bf:27:1a:04:a5:bd:de:a2:
8a:81:f6:18:92:a2:f6:1c:21:74:ca:8a:f3:74:bc:97:99:fb:
80:21:a9:e1:98:11:4d:cc:1f:23:24:70:e6:e1:40:13:dd:29:
c6:87:4a:56:51:2e:c1:ec:54:02:52:e0:c2:85:cd:34:e3:0b:
57:90:e1:4c:43:0d:3e:31:88:f9:0e:ad:0e:bc:bd:e0:0b:14:
20:13:e9:0e:87:29:a7:8c:50:2f:70:2e:91:b7:bc:f3:1e:6c:
16:75:70:02:a0:39:25:3b:e7:7f:1f:ba:d7:1d:d3:22:b9:fd:
8f:69:ae:21:cc:8f:b6:c4:7e:28:ba:9d:24:e1:bc:0c:20:cc:
95:b7:ba:dc:9e:a2:37:1b:08:b5:19:cc:84:2e:bd:24:c4:fa:
ea:85:2a:5b:e2:3f:bb:83:05:4b:e6:5b:1e:56:08:bd:27:c8:
a0:9e:cb:0d:67:74:21:18:09:b9:11:7a:2c:65:e1:8e:3b:b3:
ff:c4:31:2d:3b:04:1c:d2:4b:34:a6:82:3f:00:ad:4a:bb:ef:
91:a8:7a:69:f9:de:dd:fd:17:ca:9c:ce:1b:5d:a3:ec:b6:87:
e9:8b:10:88:7f:0e:8d:23:9e:12:9f:59:d9:36:62:3b:6b:b8:
1d:0b:e4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:29 2024 by rpki-client on console-fra.rpki-client.org