Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5D45231AF54511EDB355AF794AD9E6FC.roa
File: 5D45231AF54511EDB355AF794AD9E6FC.roa (raw, json)
Hash identifier: Q28geYNCuxxZowZKgG1b/2YQiuv9V5BukNkqHEjr8Ug=
Subject key identifier: CE:94:5B:E8:8B:91:A3:5A:5A:D3:8E:E2:6B:B7:BF:DD:79:6A:D6:49
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06ED
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5D45231AF54511EDB355AF794AD9E6FC.roa
Signing time: Thu 18 May 2023 06:29:38 +0000
ROA not before: Thu 18 May 2023 06:29:35 +0000
ROA not after: Wed 18 May 2033 06:29:35 +0000
asID: 64286
IP address blocks: 192.142.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1773 (0x6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 18 06:29:35 2023 GMT
Not After : May 18 06:29:35 2033 GMT
Subject: CN=6465c5d2-f896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:29:27:60:ea:8b:39:b3:22:ef:8c:da:be:
f7:2c:57:37:88:1b:37:22:6b:53:95:5a:d3:8f:a5:
39:69:da:7c:54:c7:f7:63:50:3c:05:e6:45:09:f7:
34:ca:0b:f0:e8:78:27:72:81:90:20:35:77:f8:5d:
e3:ab:bd:b6:f2:82:84:e5:79:7e:2a:e3:70:45:34:
1d:37:66:ff:82:3f:f9:32:a0:9c:61:5d:cb:2e:ef:
e0:d1:da:0f:1c:78:53:8c:f4:d9:19:3a:60:af:25:
fa:db:3e:73:aa:f5:5a:f3:53:48:0c:f0:16:b7:c7:
1f:e6:2e:9d:3b:2f:28:cd:5f:f7:d1:de:03:99:55:
33:ca:f8:a6:3d:c2:2f:3a:de:39:35:ca:36:2d:e2:
17:bc:21:47:07:52:8d:d6:1a:d9:ec:7b:0e:5a:f5:
f7:14:33:94:fc:7f:5e:aa:40:47:93:a5:4b:64:81:
cd:0a:4f:ad:bc:92:0d:aa:8a:d5:3a:29:80:85:4c:
f1:73:be:34:b4:e4:08:f2:7e:7d:70:41:a5:80:28:
c1:4d:58:06:ec:8b:7e:80:3e:92:a9:97:b7:75:b6:
a4:5e:84:65:29:50:1a:8c:19:92:b2:76:bc:c1:7a:
15:28:4f:f8:19:3e:70:17:03:66:8c:3b:6c:0e:dd:
13:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:5B:E8:8B:91:A3:5A:5A:D3:8E:E2:6B:B7:BF:DD:79:6A:D6:49
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5D45231AF54511EDB355AF794AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.133.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:c3:11:89:aa:d3:be:e7:a1:67:69:88:6a:45:de:22:d0:28:
3e:65:cd:57:e6:24:bc:44:49:c3:8e:3e:a5:06:0b:02:a4:19:
27:f3:32:de:ef:e7:20:2d:b0:0f:23:d8:20:8c:1f:62:03:b1:
7d:51:ab:29:fb:81:73:17:29:7b:67:a6:c8:72:93:a4:ed:03:
3e:07:c4:46:11:27:5e:04:5c:15:d7:fa:28:92:d8:52:a5:e8:
03:5c:5a:6d:f2:7d:6b:a6:99:ce:94:75:46:96:20:a2:4a:a8:
ca:de:9a:a3:79:89:70:a1:51:be:28:b9:78:e6:5f:a2:ea:11:
5b:fc:d5:95:18:1c:c3:61:0b:16:10:f6:6f:8d:c7:f7:10:87:
9d:7b:bc:2e:0e:9a:3e:9f:4a:9b:57:8e:cf:f4:4c:4e:07:0b:
84:ec:9f:75:e9:11:89:e8:a9:33:27:01:e3:c1:5c:4e:c1:ed:
e1:bb:04:28:54:83:1b:50:a1:26:0e:61:89:f2:ac:4f:8e:19:
5f:c2:ce:a1:d5:2b:e1:6d:48:94:8a:03:d2:f5:6d:e3:03:48:
7c:b4:fe:fd:d3:bb:02:79:a7:33:8a:b3:b9:35:c1:79:31:5a:
68:71:b8:09:58:77:b2:f5:7f:2e:0d:9f:43:00:cc:2e:8c:c0:
91:dd:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org