Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/CE1B29ACD6D311EEA8F57C9A775412E6.roa
File: CE1B29ACD6D311EEA8F57C9A775412E6.roa (raw, json)
Hash identifier: bi5RLYyELwPTThi9QziSAVXhtDNN8osz2xOTB8BvZaU=
Subject key identifier: 1D:1F:48:1D:A2:3B:94:99:F2:32:60:8F:10:CD:03:9A:C2:10:89:25
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04F6
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/CE1B29ACD6D311EEA8F57C9A775412E6.roa
Signing time: Thu 29 Feb 2024 07:26:08 +0000
ROA not before: Thu 29 Feb 2024 07:26:04 +0000
ROA not after: Tue 28 Feb 2034 07:26:04 +0000
asID: 20011
IP address blocks: 168.210.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1270 (0x4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:26:04 2024 GMT
Not After : Feb 28 07:26:04 2034 GMT
Subject: CN=65e03190-b179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6f:46:cd:23:26:c1:04:c8:09:f0:76:71:44:
66:db:50:7c:92:1f:92:d1:99:14:3b:8b:61:fa:95:
18:a8:db:6d:78:1c:5f:b2:3a:ba:40:c4:b8:d7:95:
f6:f4:46:9f:a2:e7:e7:e3:a4:a5:46:9b:b4:ba:47:
13:9c:59:45:e4:d2:7d:3c:bb:51:54:e7:32:3c:e5:
0c:31:32:89:9a:83:85:c6:9f:7e:99:bb:62:91:c5:
31:88:73:9a:93:b4:21:e1:4c:7a:0c:19:b7:c6:14:
dc:7c:d6:6f:bd:fd:79:3c:7a:3c:e9:a8:9b:5b:8a:
44:25:e9:63:86:0d:6a:93:a8:00:73:a5:86:82:c7:
c4:11:79:2e:a6:d0:04:f2:40:00:1b:be:73:3e:a3:
cb:21:d3:80:22:b9:d3:59:50:62:1a:53:a1:22:2c:
1c:ff:d6:58:0e:05:18:b3:5d:e2:0f:05:d9:ab:f8:
f0:c8:09:a0:a0:d6:f5:a9:4f:e8:4d:13:df:30:97:
02:ac:06:8d:1f:97:6a:57:99:f9:52:ce:5e:77:e6:
cf:30:d4:54:12:46:20:e6:f0:fe:c4:73:3f:7e:d2:
24:c2:f5:70:04:84:6a:0b:53:d0:99:94:97:bf:6a:
8e:73:4f:ca:19:c3:78:20:4c:77:76:b7:0a:a5:50:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1F:48:1D:A2:3B:94:99:F2:32:60:8F:10:CD:03:9A:C2:10:89:25
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/CE1B29ACD6D311EEA8F57C9A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.224.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:d2:e5:64:0e:4d:d2:77:40:60:2e:87:98:2d:d2:4c:9e:a8:
7a:25:6f:36:e3:e7:45:a2:96:c4:fe:58:d9:a5:d2:0d:81:fe:
cc:54:d7:b4:b3:e6:31:6b:33:de:d7:94:e1:10:63:26:c0:cc:
4f:47:ac:d9:2c:3e:60:cc:2d:39:16:6c:4e:b0:8e:a6:38:86:
34:3f:7e:0b:53:76:a7:de:15:59:3c:e9:de:18:6d:00:d4:fc:
f6:47:3d:11:00:06:8c:a7:57:40:e5:75:92:c2:18:51:8c:4a:
8f:52:10:c5:d1:80:07:d2:1a:de:5e:93:4a:df:6d:76:f3:1c:
a0:b9:14:5b:2c:60:a8:7f:97:46:b7:bf:48:b0:ba:0b:29:22:
b8:9d:6f:e7:95:c7:12:29:59:7b:01:db:ef:91:a4:a9:17:48:
12:ec:03:6c:1b:80:6a:fe:d5:0e:71:ba:0d:87:e7:a1:0a:d1:
4b:bf:14:fa:85:dd:88:3f:ef:55:75:1f:5e:e6:8b:59:d5:c3:
75:17:6c:48:e8:22:4b:43:e9:ea:7e:69:76:30:1a:f4:24:93:
2f:bb:01:85:aa:ea:65:da:45:25:41:fc:27:cd:7b:2a:64:0c:
16:3a:ca:df:ce:c5:6c:2e:1a:d8:8d:2e:0f:8e:83:f2:d4:94:
ac:82:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:56 2024 by rpki-client on console-ams.rpki-client.org