Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/62B62646F3AB11EDA2DEEA1B4AD9E6FC.roa
File: 62B62646F3AB11EDA2DEEA1B4AD9E6FC.roa (raw, json)
Hash identifier: A2MbiDqCmJhZFN1XqxW+jxRBjXeJMCqfmVIEeBezbJQ=
Subject key identifier: 07:2B:0E:D7:22:5A:2A:8F:B0:3A:68:06:43:0F:03:98:A5:74:95:C8
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06E5
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/62B62646F3AB11EDA2DEEA1B4AD9E6FC.roa
Signing time: Tue 16 May 2023 05:34:54 +0000
ROA not before: Tue 16 May 2023 05:34:50 +0000
ROA not after: Tue 17 May 2033 05:34:50 +0000
asID: 64286
IP address blocks: 192.142.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 16 05:34:50 2023 GMT
Not After : May 17 05:34:50 2033 GMT
Subject: CN=646315fe-6dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:20:e3:e2:1f:4c:cc:17:53:39:44:61:8a:
68:16:14:6d:01:17:26:06:72:01:e0:1e:19:57:d8:
ea:85:61:95:48:2a:3c:53:89:51:b6:a6:9b:0b:c9:
cc:e3:99:9a:a2:99:09:df:f1:a3:1f:0f:81:34:96:
88:f1:43:99:57:5e:4e:1a:37:a4:93:05:99:5e:66:
28:94:fe:49:2f:de:86:c6:10:7c:28:44:13:23:3a:
2a:37:45:ef:08:58:1e:6d:25:6e:8a:08:ea:3c:31:
a9:91:eb:fc:cb:d3:75:90:b2:8f:a0:91:80:5e:d9:
bc:55:09:6e:2a:0c:6b:11:22:a2:51:a7:0a:bc:4f:
48:88:85:0a:da:40:db:3a:4e:40:73:14:63:d3:de:
25:da:35:f6:f9:f1:a5:44:f3:b8:27:fe:a9:55:56:
e4:77:ec:68:69:72:f5:e8:62:6f:1d:b2:11:ea:a6:
d8:11:c7:17:eb:c5:c4:3b:18:71:dd:6c:99:67:96:
58:0c:65:21:e2:b3:e3:61:f3:f2:3f:eb:de:bc:99:
5e:a9:5c:fc:31:c4:73:b2:ab:ad:7c:ea:b3:a5:f7:
44:54:ec:a9:7b:73:81:7a:d1:99:e3:c7:ab:6f:ff:
86:40:2b:92:49:62:b7:7e:da:88:37:c0:41:5e:47:
f4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2B:0E:D7:22:5A:2A:8F:B0:3A:68:06:43:0F:03:98:A5:74:95:C8
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/62B62646F3AB11EDA2DEEA1B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.131.0/24
Signature Algorithm: sha256WithRSAEncryption
45:03:1e:81:45:fa:8a:b5:59:40:f8:e1:a9:65:6c:39:56:73:
b7:d1:81:4d:db:6d:1c:8b:92:33:a2:0e:02:c8:ed:2b:69:e4:
e0:67:6d:40:10:fc:cc:c6:f2:a2:94:9a:6e:9a:47:99:51:93:
a8:03:64:ea:56:f3:fa:1b:ae:0a:f3:54:6a:8e:b0:a2:af:0d:
c8:64:fa:08:5e:10:07:06:00:9a:b5:ef:b5:ef:e7:12:94:2f:
0f:42:4c:a0:44:53:9f:07:34:f8:ee:9f:44:47:94:f6:89:30:
b6:8f:52:3f:e8:e7:1e:bc:79:dd:1d:c9:c8:ef:79:fe:1d:94:
ac:7b:26:b6:13:14:a5:ce:70:55:63:50:b4:48:b8:cd:f7:ed:
14:3c:c0:e7:27:1e:e0:e9:a6:93:96:81:1b:e6:6f:b9:89:7e:
3e:8d:20:11:24:b7:27:60:cf:93:76:8d:74:38:4a:75:db:db:
6d:49:85:d9:f8:33:e4:3f:85:bf:7b:d9:c5:ff:27:fb:f6:e6:
1e:b4:f1:24:95:2f:f7:d1:18:e2:df:07:18:2f:e9:9f:c8:77:
54:b6:89:2a:cb:f8:ea:6e:77:02:62:b3:51:e7:79:81:a5:41:
e8:2a:4b:24:80:97:cd:b7:8b:b5:33:52:7b:fc:fe:35:47:84:
ce:40:39:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org