Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F066303ED6D211EEBF42ED98775412E6.roa
File: F066303ED6D211EEBF42ED98775412E6.roa (raw, json)
Hash identifier: iNB4D2jFI+zEfaLP5CPTliLyaE9QGOHoTz4gv4BQRjI=
Subject key identifier: 85:A5:37:82:15:22:6E:F1:53:49:28:D0:BD:BA:B8:A8:DC:23:04:BF
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 04E6
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F066303ED6D211EEBF42ED98775412E6.roa
Signing time: Thu 29 Feb 2024 07:19:56 +0000
ROA not before: Thu 29 Feb 2024 07:19:52 +0000
ROA not after: Tue 28 Feb 2034 07:19:52 +0000
asID: 20011
IP address blocks: 168.210.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Feb 29 07:19:52 2024 GMT
Not After : Feb 28 07:19:52 2034 GMT
Subject: CN=65e0301c-5aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:77:77:82:72:02:f9:9e:48:e5:7e:81:86:
a5:8f:b9:33:c6:01:38:18:f6:a7:00:e4:56:36:da:
1c:6f:4f:15:5f:7c:90:72:bd:60:30:26:19:4d:04:
a9:52:5b:e6:68:93:de:0e:b2:5b:36:15:98:39:33:
69:a0:6f:66:ed:b4:6b:54:b6:1f:fe:b3:17:6f:1b:
31:0b:52:df:91:3c:e4:41:81:8d:8a:b0:27:67:b2:
ac:cd:cb:c7:5f:6c:c8:0a:64:08:2f:c2:26:52:d7:
3b:6e:ca:5b:b3:6a:34:48:49:64:c7:45:fc:8f:18:
13:98:7d:f4:81:be:4a:e2:f7:17:14:a7:0b:19:99:
a7:c2:20:bc:14:99:c6:65:0e:aa:85:1a:d0:9e:2d:
e0:ed:4c:3e:c2:01:96:6d:f9:fd:ca:1c:c8:73:97:
5f:6b:e0:83:75:23:95:5e:9c:c4:e3:4d:3d:04:5c:
66:ba:a3:ae:5b:c7:7f:a0:86:cd:ba:1b:8c:1e:6a:
d2:68:8e:c9:84:25:ce:26:c1:4b:a3:2f:d9:21:69:
e5:55:69:28:ca:4c:8b:d8:b3:93:9c:1f:f4:9a:e6:
83:ad:92:12:0f:16:e1:ee:38:40:e0:00:95:5f:5d:
20:7e:6a:8a:ef:09:b8:ec:a7:cd:1e:e6:bf:80:0b:
b3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A5:37:82:15:22:6E:F1:53:49:28:D0:BD:BA:B8:A8:DC:23:04:BF
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/F066303ED6D211EEBF42ED98775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.210.116.0/22
Signature Algorithm: sha256WithRSAEncryption
42:99:61:58:df:a9:8c:93:6b:b4:ec:54:84:13:b8:3a:86:24:
f7:82:7a:36:52:a6:eb:95:46:5f:0b:b6:cc:8d:21:19:6e:5c:
3e:70:2f:62:83:d9:02:82:4a:4b:66:f2:1a:cf:0b:2c:6e:e1:
e5:b1:87:e7:e5:ca:48:08:fd:f3:b7:49:47:a2:39:09:e8:04:
e0:03:37:ce:e3:29:65:a8:d5:b8:3d:77:3b:38:32:d1:4f:6a:
89:7c:d8:29:c0:c7:37:6f:a7:e5:fb:ca:d3:76:31:32:7f:39:
f4:20:30:47:79:ff:c0:f2:75:ad:6e:6c:0e:aa:f8:24:1a:e2:
1e:93:f3:ae:e7:ca:9f:fe:62:9e:ee:21:3a:fb:8a:b9:de:75:
82:25:09:75:00:91:89:e3:6b:f4:d8:f1:4c:1a:1d:bb:c0:68:
62:5a:d2:67:af:51:36:6a:08:14:9b:c1:f8:8a:f1:4d:4e:ce:
85:c1:df:56:2e:6f:a2:29:8f:2c:d3:a5:ca:0b:38:cb:e9:1c:
8a:06:17:98:a9:0b:aa:7b:00:7c:68:26:d3:72:39:c4:5a:d2:
31:f1:db:dc:34:f8:45:6d:53:c1:98:b9:73:1b:16:ef:e1:e9:
fd:17:b3:80:d3:a1:49:0c:bf:82:e8:14:fc:1c:c7:b1:d5:a4:
a6:2f:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:34 2024 by rpki-client on console-fra.rpki-client.org