Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E3E0FD4B99411EDAC1AE4D0F1222468.roa
File: 1E3E0FD4B99411EDAC1AE4D0F1222468.roa (raw, json)
Hash identifier: VT65oj4c97PKAXJdtJAhsyWkx9ZMdWiXK8rMzFbH25M=
Subject key identifier: 99:50:93:15:83:D4:1E:C3:9C:6C:C4:C9:E2:26:56:1C:E2:73:F1:88
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0664
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E3E0FD4B99411EDAC1AE4D0F1222468.roa
Signing time: Fri 03 Mar 2023 07:22:13 +0000
ROA not before: Fri 03 Mar 2023 07:22:07 +0000
ROA not after: Wed 09 Mar 2033 07:22:07 +0000
asID: 211936
IP address blocks: 192.142.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1636 (0x664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 3 07:22:07 2023 GMT
Not After : Mar 9 07:22:07 2033 GMT
Subject: CN=6401a025-3d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:04:2e:be:55:35:24:d4:a1:aa:41:fd:92:
28:99:0e:a4:6c:eb:76:27:4e:2a:00:52:78:cc:2f:
e4:10:8f:00:96:15:b8:81:7d:8d:a0:7d:7e:34:a0:
8b:1e:30:9a:c8:bd:33:1e:c4:25:7d:15:c1:27:25:
fc:f6:03:de:0f:11:d2:93:cc:e1:44:a9:b9:7f:94:
db:35:c6:db:89:fa:bd:95:9f:89:63:92:54:d2:cf:
3b:02:5f:46:40:91:6d:b5:48:74:8e:a4:a2:1c:f5:
37:8a:33:73:2e:dd:d7:fe:b4:4f:08:fb:f5:27:50:
94:35:12:3f:19:d3:88:a9:89:0f:02:51:98:3e:66:
60:47:12:5c:9b:a6:69:0f:38:d3:e6:00:d3:81:8a:
a3:06:62:f1:96:9c:95:09:eb:fa:f0:1e:c0:d9:cb:
f9:22:80:1b:3e:fb:12:1c:ce:af:f0:43:ba:ad:b6:
9e:3e:aa:6c:60:cc:6d:80:53:1d:56:56:cb:63:23:
70:ae:f3:76:bd:df:8a:ba:17:0e:09:7e:eb:92:ce:
95:c5:46:ef:a4:c8:0a:d6:35:df:c5:4c:89:a9:a9:
58:b2:28:10:ac:c4:65:38:f7:dd:cc:87:e2:61:c7:
a0:21:d4:f0:93:c4:56:3b:4e:b5:8d:c8:18:6c:ea:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:50:93:15:83:D4:1E:C3:9C:6C:C4:C9:E2:26:56:1C:E2:73:F1:88
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/1E3E0FD4B99411EDAC1AE4D0F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.240.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:3c:25:27:56:c8:1a:c3:f8:db:9b:7d:72:4a:af:70:07:90:
fb:ed:79:fe:68:0d:24:56:cd:de:07:11:7b:3e:d8:bb:18:c5:
bb:ee:35:cc:b1:23:7c:06:02:a6:9f:3c:42:f4:27:c3:5a:ed:
fe:30:9e:87:9a:ec:c4:e9:c2:55:53:45:19:de:c7:5a:5e:ec:
fb:8b:61:16:a8:06:a0:3a:c4:aa:6e:70:67:04:af:7d:9b:c8:
8f:0d:a8:b3:6d:50:56:f6:4f:64:45:7c:fc:0f:7e:ef:75:d6:
c8:6d:12:6c:38:ec:29:50:26:ce:d4:5b:af:05:93:ec:dd:a6:
76:14:3c:99:61:d9:56:ca:2c:db:4c:46:ea:3a:ff:dd:63:06:
94:a8:39:73:04:fc:8b:99:cd:3c:c9:ea:ab:1c:b3:68:d2:97:
38:46:a2:26:f3:f5:f1:98:61:08:33:8a:7f:99:3d:f4:8f:5b:
51:be:66:f4:16:d0:18:4d:31:97:74:2c:de:e4:3a:0b:17:16:
63:0a:a5:8a:f7:71:d3:48:be:3a:ea:2f:61:bb:c2:8b:0b:c2:
57:66:ad:4b:d4:df:60:d4:c4:f8:7c:90:30:ec:b5:45:c5:d5:
b3:3f:17:71:b8:9b:e5:32:e3:56:2c:41:52:5c:96:18:85:98:
0a:02:c8:e5
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzAzMDMwNzIyMDdaFw0zMzAzMDkwNzIyMDdaMBgxFjAU
BgNVBAMMDTY0MDFhMDI1LTNkMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsoAQuvlU1JNShqkH9kiiZDqRs63YnTioAUnjML+QQjwCWFbiBfY2gfX40
oIseMJrIvTMexCV9FcEnJfz2A94PEdKTzOFEqbl/lNs1xtuJ+r2Vn4ljklTSzzsC
X0ZAkW21SHSOpKIc9TeKM3Mu3df+tE8I+/UnUJQ1Ej8Z04ipiQ8CUZg+ZmBHElyb
pmkPONPmANOBiqMGYvGWnJUJ6/rwHsDZy/kigBs++xIczq/wQ7qttp4+qmxgzG2A
Ux1WVstjI3Cu83a934q6Fw4JfuuSzpXFRu+kyArWNd/FTImpqViyKBCsxGU4993M
h+Jhx6Ah1PCTxFY7TrWNyBhs6s8vAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUmVCT
FYPUHsOcbMTJ4iZWHOJz8YgwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzFFM0UwRkQ0Qjk5NDExRURBQzFBRTREMEYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPAjvAwDQYJKoZIhvcNAQELBQAD
ggEBAKc8JSdWyBrD+NubfXJKr3AHkPvtef5oDSRWzd4HEXs+2LsYxbvuNcyxI3wG
AqafPEL0J8Na7f4wnoea7MTpwlVTRRnex1pe7PuLYRaoBqA6xKpucGcEr32byI8N
qLNtUFb2T2RFfPwPfu911shtEmw47ClQJs7UW68Fk+zdpnYUPJlh2VbKLNtMRuo6
/91jBpSoOXME/IuZzTzJ6qscs2jSlzhGoibz9fGYYQgzin+ZPfSPW1G+ZvQW0BhN
MZd0LN7kOgsXFmMKpYr3cdNIvjrqL2G7wosLwldmrUvU32DUxPh8kDDstUXF1bM/
F3G4m+Uy41YsQVJclhiFmAoCyOU=
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org