Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/17BAF512876D11EEA19EAA2C4AD9E6FC.roa
File: 17BAF512876D11EEA19EAA2C4AD9E6FC.roa (raw, json)
Hash identifier: CQNI7f1o9F1DcdCze4+kcew986oY2V/lQ1xeJ/xWGPQ=
Subject key identifier: 39:D6:4F:B5:46:53:6A:09:99:90:AC:B5:B8:C5:4E:BF:44:A3:E6:6A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0837
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/17BAF512876D11EEA19EAA2C4AD9E6FC.roa
Signing time: Mon 20 Nov 2023 06:21:51 +0000
ROA not before: Mon 20 Nov 2023 06:21:48 +0000
ROA not after: Wed 23 Nov 2033 06:21:48 +0000
asID: 197555
IP address blocks: 192.142.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2103 (0x837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 20 06:21:48 2023 GMT
Not After : Nov 23 06:21:48 2033 GMT
Subject: CN=655afaff-80a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:c8:a0:d7:f5:01:39:ed:80:b1:f8:17:ed:
4f:d3:57:92:99:8a:37:4f:87:18:9b:86:f8:e1:ca:
8b:32:7c:01:22:a6:91:0e:b5:77:d4:13:fd:96:0b:
98:d1:84:42:f2:43:d0:8a:e5:c0:3b:3a:86:31:bf:
b0:27:29:2a:d3:1b:c5:3d:7a:71:1b:0b:e7:39:26:
d7:67:0c:21:71:ff:7d:6a:5c:e6:d6:aa:de:00:cc:
d6:9d:fa:65:11:4a:f6:f1:fa:dc:e9:d9:ff:df:95:
5c:be:f0:bd:22:2f:83:be:6f:39:7b:0b:3c:93:29:
88:92:2c:08:c6:0e:fb:74:33:d9:dd:da:b5:bd:f4:
91:d6:95:ca:95:1d:65:f3:76:b6:c3:d7:d7:cb:81:
44:16:e8:d9:cc:e1:2c:3a:88:b4:8a:3f:5e:c2:5a:
19:8d:53:23:a9:c5:ab:28:14:cc:ff:17:fa:7a:14:
34:86:2f:2f:09:ed:6f:17:56:a3:f2:3e:4c:8b:61:
39:33:e3:bb:e8:b4:59:fc:e7:1c:7d:34:50:bc:9e:
dc:ba:c5:d5:95:28:42:cd:24:ea:e4:88:dc:8d:ff:
fe:01:0b:38:ff:4d:bc:7a:a1:04:bf:a3:f1:6c:dc:
e7:8c:dd:37:5f:75:d2:52:e6:9d:1f:d5:39:20:74:
09:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:4F:B5:46:53:6A:09:99:90:AC:B5:B8:C5:4E:BF:44:A3:E6:6A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/17BAF512876D11EEA19EAA2C4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.105.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c2:67:8b:f7:87:55:8b:07:93:59:e5:fd:9d:99:1e:c1:56:
cd:b5:26:08:88:eb:94:24:3b:93:1d:13:79:f5:cd:65:59:cd:
70:2f:1c:eb:b9:95:24:39:ec:c1:06:df:e3:8f:2e:f4:b0:36:
a8:f7:c1:6d:fb:6e:2c:9e:bf:84:b6:45:81:bc:df:a7:a2:cd:
5b:b6:89:d2:93:b4:f5:c2:fc:e2:33:18:12:0a:3a:bb:8f:24:
9a:00:81:3b:5c:9b:5f:2c:cf:ab:7b:de:16:4d:09:ac:02:cc:
ab:0b:8a:10:9f:29:c7:7d:37:ad:4d:53:9a:e3:ff:59:c8:42:
5d:5a:dd:a9:58:0a:56:8d:66:c4:d2:20:fa:be:75:24:c8:a4:
12:1e:fb:2b:ae:59:46:bc:5d:e0:da:b0:1c:eb:16:22:e3:9a:
18:93:d0:55:8e:6c:52:5d:c7:46:e2:fd:26:56:a4:48:c0:78:
24:db:be:4c:2c:aa:ea:0f:22:a4:fa:25:23:69:9d:70:37:23:
7e:7a:a6:33:27:83:80:2f:f2:c4:c7:42:95:11:74:3b:03:e4:
6f:bd:22:2c:23:ee:0e:8a:f1:5b:0c:be:ee:c9:99:f0:27:74:
bb:ce:37:0a:88:b5:19:32:5a:3a:fd:3e:41:d6:e6:c4:03:b2:
8a:f5:e5:fb
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzExMjAwNjIxNDhaFw0zMzExMjMwNjIxNDhaMBgxFjAU
BgNVBAMTDTY1NWFmYWZmLTgwYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6BMig1/UBOe2AsfgX7U/TV5KZijdPhxibhvjhyosyfAEippEOtXfUE/2W
C5jRhELyQ9CK5cA7OoYxv7AnKSrTG8U9enEbC+c5JtdnDCFx/31qXObWqt4AzNad
+mURSvbx+tzp2f/flVy+8L0iL4O+bzl7CzyTKYiSLAjGDvt0M9nd2rW99JHWlcqV
HWXzdrbD19fLgUQW6NnM4Sw6iLSKP17CWhmNUyOpxasoFMz/F/p6FDSGLy8J7W8X
VqPyPkyLYTkz47votFn85xx9NFC8nty6xdWVKELNJOrkiNyN//4BCzj/Tbx6oQS/
o/Fs3OeM3TdfddJS5p0f1TkgdAmZAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUOdZP
tUZTagmZkKy1uMVOv0Sj5mowHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzE3QkFGNTEyODc2RDExRUVBMTlFQUEyQzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjmkwDQYJKoZIhvcNAQELBQAD
ggEBABfCZ4v3h1WLB5NZ5f2dmR7BVs21JgiI65QkO5MdE3n1zWVZzXAvHOu5lSQ5
7MEG3+OPLvSwNqj3wW37biyev4S2RYG836eizVu2idKTtPXC/OIzGBIKOruPJJoA
gTtcm18sz6t73hZNCawCzKsLihCfKcd9N61NU5rj/1nIQl1a3alYClaNZsTSIPq+
dSTIpBIe+yuuWUa8XeDasBzrFiLjmhiT0FWObFJdx0bi/SZWpEjAeCTbvkwsquoP
IqT6JSNpnXA3I356pjMng4Av8sTHQpURdDsD5G+9Iiwj7g6K8VsMvu7JmfAndLvO
NwqItRkyWjr9PkHW5sQDsor15fs=
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org