Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/CCB69C22920711EB82BD0A7EF8AEA228.roa
File: CCB69C22920711EB82BD0A7EF8AEA228.roa (raw, json)
Hash identifier: Rusugkco9hQSpaO103aTMbTn9udYse5/JtYgMWEp260=
Subject key identifier: 83:55:00:44:D7:94:41:89:C3:37:37:0F:A3:18:1C:6A:D3:0C:B8:F5
Certificate issuer: /CN=F367D68CAR/serialNumber=598DA01DE4E9CD5474AD0A6826625BE6B808F0AB
Certificate serial: 02
Authority key identifier: 59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
Authority info access: rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/CCB69C22920711EB82BD0A7EF8AEA228.roa
Signing time: Wed 31 Mar 2021 09:59:36 +0000
ROA not before: Wed 31 Mar 2021 09:59:31 +0000
ROA not after: Tue 31 Mar 2026 09:59:31 +0000
asID: 327859
IP address blocks: 169.255.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl
rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.mft
rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367D68CAR/serialNumber=598DA01DE4E9CD5474AD0A6826625BE6B808F0AB
Validity
Not Before: Mar 31 09:59:31 2021 GMT
Not After : Mar 31 09:59:31 2026 GMT
Subject: CN=60644808-e3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:ac:0c:d5:5f:43:15:19:15:78:a7:fa:4d:
9f:cb:40:df:78:35:3c:6c:b8:93:8e:79:f9:42:52:
bf:3e:48:b6:a9:2e:fc:a7:58:43:e8:f7:67:d2:bc:
cf:b1:d1:d7:46:58:1c:43:35:88:4d:d7:36:c8:cd:
45:94:51:42:da:64:68:52:fe:39:41:82:cf:e9:a2:
5e:9b:cf:1e:78:fc:42:77:03:1d:8f:28:25:7a:c6:
9a:a9:20:6b:8a:2e:c5:aa:ca:cb:89:0c:60:cf:65:
d4:ad:8b:ba:e2:b8:c2:27:c2:3a:6d:54:77:10:e2:
99:3e:08:0c:bc:f9:1e:cd:fc:fb:42:fa:ea:da:ea:
88:65:7b:fd:7e:23:1b:72:08:30:43:55:e8:0a:54:
11:67:0c:ac:d8:25:80:b3:67:e6:10:3f:94:45:d5:
89:3e:ee:bb:e6:e8:48:57:05:d5:e8:92:d2:f3:c7:
61:2c:9a:7e:59:d3:1c:a8:ac:f4:ea:ce:a0:9e:df:
4d:99:dc:2e:c6:3a:a8:df:af:2d:63:6d:97:78:47:
5a:b2:b2:4b:6d:71:18:9f:bf:d2:14:e7:87:19:97:
6e:31:f1:9b:b2:a6:fe:77:a2:91:00:2d:b6:30:37:
e1:a0:a9:06:f3:23:8e:71:6a:20:2a:49:e0:bf:f9:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:55:00:44:D7:94:41:89:C3:37:37:0F:A3:18:1C:6A:D3:0C:B8:F5
X509v3 Authority Key Identifier:
keyid:59:8D:A0:1D:E4:E9:CD:54:74:AD:0A:68:26:62:5B:E6:B8:08:F0:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WY2gHeTpzVR0rQpoJmJb5rgI8Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/C3F92A42920611EB95D6E57CF8AEA228/CCB69C22920711EB82BD0A7EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:da:2f:ae:d5:cf:f0:b0:a4:d7:0b:02:0e:26:4e:8d:c8:d4:
a9:c9:37:2b:15:ff:a9:02:36:9a:7e:c2:b2:61:b0:0b:69:0e:
ce:a2:b0:11:62:f8:9a:fd:8d:0b:ee:e0:a1:0d:8f:e0:b8:8f:
b8:cd:4d:b5:27:84:42:81:7a:c2:da:dc:07:9e:25:0b:ef:c7:
87:a9:27:d3:6a:64:34:0a:c6:f4:d4:20:33:8f:81:a6:59:74:
43:82:39:3a:c4:44:e6:e7:a5:53:38:6d:69:5e:96:54:aa:2c:
e9:df:1b:0a:7d:6f:ac:4e:84:3d:73:f4:e5:4c:2f:59:6a:7d:
84:2b:a7:42:3d:4c:be:e4:f4:37:8c:3f:f8:1f:84:03:b1:87:
dd:16:51:1d:7d:e0:8e:07:ca:2e:49:ad:43:89:fb:c9:81:2c:
b6:ab:03:d8:74:92:7b:cd:3f:8d:85:2d:cf:c2:d7:1b:3e:02:
c6:ad:7b:fc:0f:17:f8:c4:a2:64:34:fa:39:13:06:cc:e0:0b:
79:37:66:4f:ff:4d:43:19:5e:c1:75:83:18:ef:96:ef:65:58:
13:a0:8e:2d:1b:59:b5:65:43:fd:fa:d0:ac:03:17:ea:e1:a7:
01:39:9d:e0:10:62:c4:45:ef:81:12:36:d0:06:9b:bb:27:79:
2a:4b:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:00:54 2024 by rpki-client on console-ams.rpki-client.org