Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/D2F1A5928E6411EBBC748B6AF8AEA228.roa
File: D2F1A5928E6411EBBC748B6AF8AEA228.roa (raw, json)
Hash identifier: 6qK0G9UDQpIN5VB9HAdPfGyjLR6yeZQoNvVlRbOIFCk=
Subject key identifier: D1:ED:DA:29:98:88:2D:38:50:AA:4C:C1:86:44:56:82:66:CE:EA:7C
Certificate issuer: /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial: 0257
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Authority info access: rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/D2F1A5928E6411EBBC748B6AF8AEA228.roa
Signing time: Fri 26 Mar 2021 18:55:25 +0000
ROA not before: Fri 26 Mar 2021 18:55:22 +0000
ROA not after: Mon 31 Mar 2031 18:55:22 +0000
asID: 715
IP address blocks: 45.221.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Validity
Not Before: Mar 26 18:55:22 2021 GMT
Not After : Mar 31 18:55:22 2031 GMT
Subject: CN=605e2e1d-c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:93:3b:38:a0:ee:75:af:da:03:4f:2c:d7:
2b:69:d5:8a:04:05:76:23:e1:c4:e8:89:70:6a:d8:
08:e9:1a:78:9a:75:f6:22:0b:2e:69:60:f9:0d:1b:
62:aa:50:b9:69:97:cb:31:d6:01:31:d8:36:ce:e0:
b7:9c:f4:83:18:49:93:2b:1c:e0:4b:9f:f0:f1:6e:
20:d0:7a:29:9d:6b:cd:09:f1:25:95:c4:41:c5:0f:
6e:df:68:eb:aa:3e:cd:69:a0:8a:8c:8d:15:5a:29:
11:4f:b7:3d:90:ee:28:36:bf:8b:d4:a1:5a:23:4d:
6b:f8:41:9b:fc:71:56:f4:cc:eb:ee:8e:9e:1d:b5:
dd:4d:c2:e7:56:d0:51:88:07:e1:22:d1:a6:de:55:
7e:b9:d2:73:4a:18:2a:9e:ab:c7:23:96:30:4e:a9:
87:d1:bf:cd:3d:e2:40:da:19:85:d6:0e:f0:33:9e:
cf:20:ba:33:e6:65:1a:1a:b5:66:d9:0e:61:39:f5:
a9:2c:95:b6:b3:a5:2f:cf:02:8c:4b:e8:ea:af:cf:
41:ea:40:a4:96:b4:7a:b9:2d:2f:9e:32:a8:81:3c:
66:2a:9c:ed:c3:3c:d7:1a:ab:34:19:cd:b8:7f:9b:
6e:6b:d4:1d:2e:d4:88:9a:4a:00:79:e8:a3:cc:94:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:DA:29:98:88:2D:38:50:AA:4C:C1:86:44:56:82:66:CE:EA:7C
X509v3 Authority Key Identifier:
keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/D2F1A5928E6411EBBC748B6AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.221.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:8a:73:50:3c:be:62:8b:d0:e3:42:f3:89:e2:48:89:fe:56:
8e:8c:37:1e:d0:a9:1f:67:e9:61:49:38:36:6e:40:22:a5:69:
d6:28:ac:40:f6:b6:55:75:a9:da:90:47:26:b6:d0:72:e8:87:
f2:01:bf:89:90:3d:af:a6:4e:52:96:fe:c3:a5:32:f8:0e:80:
29:38:e0:e1:3f:74:24:3b:42:80:ec:30:a7:49:80:7d:8f:b0:
b8:49:50:c8:7e:81:7f:4c:64:cb:e7:42:0e:aa:ec:87:d7:1d:
c5:9a:60:0e:cb:00:11:28:cd:53:4a:87:aa:62:9a:25:8d:68:
9b:3c:38:86:39:15:61:fe:6d:2e:d6:6e:28:95:76:df:b4:52:
21:1a:39:dc:dc:be:dc:72:23:0d:35:d3:0b:2c:d4:04:ae:14:
ef:5d:35:f2:bf:b5:a8:64:f3:a0:4c:7a:96:fb:10:13:9c:35:
8a:3d:d4:e4:c8:4a:b5:75:30:57:73:0c:b7:b1:6e:a0:de:7d:
70:b7:82:9a:e3:bb:51:1f:43:7a:4f:c8:7c:b4:e7:f0:77:aa:
4d:ea:31:f7:6e:02:be:d3:61:bc:98:bb:eb:fe:92:62:c1:9c:
9f:37:f1:47:36:95:4f:a6:39:c2:86:a7:40:be:8b:67:80:59:
63:c7:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:57 2024 by rpki-client on console-fra.rpki-client.org