Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4909938E352511EE8C9246874AD9E6FC.roa
File: 4909938E352511EE8C9246874AD9E6FC.roa (raw, json)
Hash identifier: Xl0szUfTsoPgouRoW7bwNBWu9r+Co+KvZTgYq2lMzqs=
Subject key identifier: 44:BE:2C:C8:59:92:B5:86:B3:4C:99:07:1F:CE:FA:22:CE:37:01:5B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0768
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4909938E352511EE8C9246874AD9E6FC.roa
Signing time: Mon 07 Aug 2023 13:21:15 +0000
ROA not before: Mon 07 Aug 2023 13:21:09 +0000
ROA not after: Wed 10 Aug 2033 13:21:09 +0000
asID: 30938
IP address blocks: 192.142.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896 (0x768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Aug 7 13:21:09 2023 GMT
Not After : Aug 10 13:21:09 2033 GMT
Subject: CN=64d0efcb-f468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:f4:f5:1e:2c:49:25:51:a3:cb:c7:6d:e3:
68:24:98:17:5c:db:19:23:d3:e6:02:f0:42:ee:19:
19:d8:a6:6a:1f:54:44:80:69:ef:b1:09:6e:43:4e:
ef:b6:31:54:63:0d:8c:14:8f:ed:66:74:cc:77:22:
53:ca:66:27:8f:34:41:c9:81:0d:37:7d:e8:0e:08:
5a:79:28:2b:4a:23:ce:c4:f8:6d:02:6e:68:29:f1:
b8:4c:86:4d:a0:3c:68:4c:cc:57:c5:41:e7:e0:5f:
03:b1:e7:e3:69:e1:2e:fa:35:51:1a:55:01:19:9c:
4a:f3:07:bb:83:a2:aa:af:f2:ed:cd:e5:68:28:e1:
ea:e0:af:05:1a:dd:25:f4:24:bf:38:e6:dc:1a:37:
fd:cf:03:73:92:32:a7:9d:5e:d0:76:20:91:f9:a6:
f8:86:77:d8:b3:4a:cf:1a:5d:2b:db:8c:e1:f4:2b:
80:27:83:85:29:8f:61:df:4a:3b:11:b9:87:20:6f:
39:81:7c:59:c8:45:cf:6c:ba:18:85:38:77:fd:7f:
a5:1a:cd:89:0c:7f:07:ad:c5:05:11:ff:c1:08:6e:
c0:52:76:48:59:88:eb:37:03:2c:76:85:26:71:2a:
69:e0:fb:c4:62:1c:a2:a7:53:39:c6:fa:35:83:66:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BE:2C:C8:59:92:B5:86:B3:4C:99:07:1F:CE:FA:22:CE:37:01:5B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4909938E352511EE8C9246874AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.188.0/22
Signature Algorithm: sha256WithRSAEncryption
26:5d:92:dc:4c:2e:07:ec:f6:53:8b:64:31:5d:da:d2:63:c1:
32:32:c6:00:68:ca:89:50:29:a1:28:44:ca:ae:09:12:84:66:
0c:b6:f7:eb:57:71:ce:ff:10:bc:da:a3:14:49:75:e6:44:d5:
09:8b:49:f5:4e:9d:78:fe:01:c4:7e:1f:c8:ad:35:ef:3b:eb:
2c:b7:8b:5d:cb:ba:a3:7f:75:53:1e:47:a1:0b:da:9a:67:8e:
76:8c:f3:3a:a4:7a:ae:52:78:cd:ae:ca:db:b0:a3:00:5b:ab:
51:31:45:bf:8f:ab:8f:d4:3a:3a:8c:6b:cf:6b:54:c0:e1:8a:
32:6e:5e:f2:74:31:2e:87:4f:c2:d3:97:cc:f3:49:e0:fe:06:
44:8f:d5:ac:80:f9:bc:a5:a9:eb:f4:17:fb:65:57:11:8d:ac:
e1:0d:f9:20:7a:dd:db:93:c5:71:f9:54:39:cb:44:11:38:8e:
5f:a3:bf:98:34:93:51:ef:0d:21:62:f2:f7:f6:5f:2e:f3:fc:
51:3e:25:17:9d:df:96:c8:7c:b2:57:b6:6b:02:c0:be:2e:c3:
89:93:cd:da:62:21:6f:1d:ab:9f:e4:d4:ec:94:f2:a2:5f:8f:
80:a9:8a:51:1b:99:69:00:26:03:31:88:cf:55:d3:8a:a2:9e:
87:8e:71:7e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzA4MDcxMzIxMDlaFw0zMzA4MTAxMzIxMDlaMBgxFjAU
BgNVBAMTDTY0ZDBlZmNiLWY0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeEPT1HixJJVGjy8dt42gkmBdc2xkj0+YC8ELuGRnYpmofVESAae+xCW5D
Tu+2MVRjDYwUj+1mdMx3IlPKZiePNEHJgQ03fegOCFp5KCtKI87E+G0Cbmgp8bhM
hk2gPGhMzFfFQefgXwOx5+Np4S76NVEaVQEZnErzB7uDoqqv8u3N5Wgo4ergrwUa
3SX0JL845twaN/3PA3OSMqedXtB2IJH5pviGd9izSs8aXSvbjOH0K4Ang4Upj2Hf
SjsRuYcgbzmBfFnIRc9suhiFOHf9f6UazYkMfwetxQUR/8EIbsBSdkhZiOs3Ayx2
hSZxKmng+8RiHKKnUznG+jWDZv+RAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQURL4s
yFmStYazTJkHH876Is43AVswHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzQ5MDk5MzhFMzUyNTExRUU4QzkyNDY4NzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALAjrwwDQYJKoZIhvcNAQELBQAD
ggEBACZdktxMLgfs9lOLZDFd2tJjwTIyxgBoyolQKaEoRMquCRKEZgy29+tXcc7/
ELzaoxRJdeZE1QmLSfVOnXj+AcR+H8itNe876yy3i13LuqN/dVMeR6EL2ppnjnaM
8zqkeq5SeM2uytuwowBbq1ExRb+Pq4/UOjqMa89rVMDhijJuXvJ0MS6HT8LTl8zz
SeD+BkSP1ayA+bylqev0F/tlVxGNrOEN+SB63duTxXH5VDnLRBE4jl+jv5g0k1Hv
DSFi8vf2Xy7z/FE+JRed35bIfLJXtmsCwL4uw4mTzdpiIW8dq5/k1OyU8qJfj4Cp
ilEbmWkAJgMxiM9V04qinoeOcX4=
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org