Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6690646A5CF211EE851335274AD9E6FC.roa
File: 6690646A5CF211EE851335274AD9E6FC.roa (raw, json)
Hash identifier: /H+PuByS743mOxtLBCEhcLS7KQu3qEb56NYC8Dimk28=
Subject key identifier: C1:EA:2E:27:13:D0:A6:31:14:49:DA:91:D3:47:61:28:C5:1C:5A:EB
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07D7
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6690646A5CF211EE851335274AD9E6FC.roa
Signing time: Wed 27 Sep 2023 04:57:47 +0000
ROA not before: Wed 27 Sep 2023 04:57:43 +0000
ROA not after: Tue 27 Sep 2033 04:57:43 +0000
asID: 64286
IP address blocks: 192.142.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2007 (0x7d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 27 04:57:43 2023 GMT
Not After : Sep 27 04:57:43 2033 GMT
Subject: CN=6513b64b-803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:1f:9c:9e:74:b9:bb:6f:27:f1:04:42:d5:
5e:2b:3f:fa:d9:89:12:fc:d9:19:c9:f9:e4:4f:ee:
ca:ab:cb:75:26:6f:0b:5a:a7:15:2e:82:a0:dc:8a:
79:8a:4f:1f:c1:08:c4:85:ef:9c:46:d3:21:8a:2a:
a7:7b:7b:7b:dc:44:f0:13:1f:c7:9a:98:54:38:12:
c3:16:0a:19:46:83:5d:ce:d0:5d:79:29:7c:2e:b1:
ea:77:dc:21:55:77:86:6b:87:10:6c:ce:00:e7:d8:
a5:87:c2:aa:86:83:1d:82:27:73:28:e3:e9:27:8c:
fc:42:c9:35:cc:a4:b0:21:35:fc:86:60:ad:62:ca:
86:84:1a:33:87:10:5a:fb:23:0c:ab:7a:41:a2:d5:
bc:30:15:fc:0c:1d:ce:ef:a9:34:3b:6f:2c:7f:9b:
b2:c5:8d:c8:f0:8c:17:dc:89:6e:ff:14:bf:ad:b1:
b7:f0:bd:5b:a2:ca:45:4b:09:00:ad:3d:70:7c:17:
83:e8:86:f7:5a:0e:99:5a:5b:01:d5:38:c5:f8:73:
72:00:f5:f2:66:0a:3f:a5:1c:c2:cb:d1:9c:ab:28:
85:6a:1f:54:ec:77:75:e9:92:d1:8f:0a:70:9b:2b:
8b:d4:0a:18:22:bb:fd:ea:29:84:0c:37:21:69:29:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:2E:27:13:D0:A6:31:14:49:DA:91:D3:47:61:28:C5:1C:5A:EB
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6690646A5CF211EE851335274AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.86.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f1:48:06:52:34:6b:1b:67:40:cb:b7:bf:74:51:a8:52:45:
98:b5:d8:57:a7:a7:3b:c7:6f:f3:fb:a3:17:9a:78:78:6a:09:
f1:f0:2c:a0:1c:01:f7:f2:2d:7c:f7:69:ff:8f:7e:35:b7:c7:
c1:26:55:80:74:4d:4e:0a:cf:a9:f4:17:bb:fe:71:22:58:d6:
3b:80:1e:ab:5b:40:02:8f:dd:02:13:62:0d:20:0a:4d:d9:25:
04:6d:f8:79:b7:c8:71:4f:1e:15:2e:73:f4:f8:c4:3a:91:9e:
34:0e:c4:f5:ae:c2:df:3a:51:60:44:92:f8:70:e0:08:9d:4d:
69:49:72:08:d6:8d:4d:e9:14:dd:38:83:f6:ec:a9:72:f9:f8:
05:97:f9:22:59:cc:40:b9:2f:9c:71:20:e0:b7:f0:85:17:40:
e7:cf:a6:d9:ec:01:d6:56:b0:94:61:52:ab:88:c6:42:2a:db:
13:5e:9a:2c:30:2d:7c:94:a3:cc:5f:fe:ef:05:97:7b:3d:80:
a0:a5:d6:c2:74:85:72:8a:de:1f:64:93:41:4a:29:6f:0a:97:
89:62:06:e8:9b:0a:88:46:a2:99:26:d7:77:01:74:91:84:da:
cc:33:26:dd:e6:bd:49:7f:ec:b4:f2:7e:20:35:5c:66:03:02:
0b:88:ec:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org