Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C5A5D540584011EEB6FD1E284AD9E6FC.roa
File: C5A5D540584011EEB6FD1E284AD9E6FC.roa (raw, json)
Hash identifier: iPZm9UL5O/TFl8OdlkYw3neaJ4ifCM5HD/h+tEWFu0U=
Subject key identifier: 84:A7:64:A3:68:BE:59:BB:AD:F0:21:2D:E3:DE:86:51:82:19:A9:12
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07C9
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C5A5D540584011EEB6FD1E284AD9E6FC.roa
Signing time: Thu 21 Sep 2023 05:36:11 +0000
ROA not before: Thu 21 Sep 2023 05:36:08 +0000
ROA not after: Wed 21 Sep 2033 05:36:08 +0000
asID: 64286
IP address blocks: 192.142.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993 (0x7c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 21 05:36:08 2023 GMT
Not After : Sep 21 05:36:08 2033 GMT
Subject: CN=650bd64b-2466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:b9:38:92:6b:47:eb:14:b0:f3:31:a5:3b:
01:73:2e:8a:62:2a:46:32:ff:44:24:76:dd:6d:23:
1b:c1:6a:92:b9:f5:1b:97:a2:d3:60:ff:b9:b4:ff:
d1:06:f1:13:32:80:de:9f:02:92:e9:45:68:c2:4c:
ea:fa:32:b4:06:47:45:80:2f:59:84:fb:4a:ff:a2:
89:2d:c2:44:69:a3:9e:04:6e:2d:64:c4:ae:3b:f4:
49:2d:cd:01:2d:e7:30:66:ee:6e:3b:39:91:c2:60:
35:8d:85:b1:f5:13:86:a4:ca:45:fc:b7:66:e7:78:
bd:2e:4c:fd:c6:10:56:6b:6c:d7:3e:ad:e5:18:0c:
d7:fb:2c:01:a2:76:4a:33:14:02:90:a9:43:e6:73:
7e:fb:cc:41:ed:9e:a6:3b:08:b8:0c:1d:47:9e:29:
e5:b2:bf:b7:2e:a2:64:b0:99:fc:4e:c3:52:69:3b:
a6:8e:93:62:08:c6:43:23:9e:70:e3:78:3b:ea:5f:
0e:7d:6d:4f:65:4f:30:d2:85:e1:be:0d:ff:47:4f:
c0:40:6c:1a:00:65:cc:77:c5:0c:1a:1d:26:b4:89:
2e:f0:f0:de:64:74:f4:b7:34:37:76:4c:99:90:4c:
e7:39:46:a8:24:c7:f0:0e:38:a0:a4:8c:46:69:52:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:64:A3:68:BE:59:BB:AD:F0:21:2D:E3:DE:86:51:82:19:A9:12
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C5A5D540584011EEB6FD1E284AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.95.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ec:b0:4a:82:1a:58:85:88:4d:5f:4c:68:88:6d:42:43:4d:
01:d6:b8:ae:96:75:2f:c0:48:48:74:0c:6c:61:9d:3c:f9:a6:
11:73:97:c4:83:cf:d2:64:a6:f0:9e:5c:79:e6:18:54:66:b1:
9d:3d:ef:7c:31:1b:11:4b:58:29:8a:95:52:bc:7f:56:64:ad:
d0:5f:ef:22:3a:81:c4:a0:37:85:b5:60:b3:d4:17:80:c4:60:
18:8a:25:c1:33:3b:29:a7:db:7c:00:98:38:44:81:82:a0:d5:
0e:41:35:b1:be:3c:6a:9e:ce:cf:21:80:b3:91:61:4a:ee:46:
e8:b2:93:5d:e3:58:03:a8:04:b9:37:13:e7:0c:94:c1:30:26:
0b:22:24:c2:5c:c8:aa:79:7e:2a:20:d3:a0:09:1f:5c:ca:e7:
da:6f:09:2a:44:2c:46:b7:42:d5:f1:a9:ba:aa:84:2d:95:9f:
77:7e:6d:36:ad:54:db:ab:36:d8:79:af:5e:90:f3:a7:e7:51:
c4:5e:42:97:96:59:27:5c:39:2f:67:fb:b5:3b:1e:8d:81:ec:
0a:4b:06:00:25:05:41:4e:9b:b3:b4:00:c1:4c:6e:a1:4b:43:
c1:71:ae:d2:69:be:9d:93:c1:25:52:4c:8f:9d:9f:16:16:c4:
82:15:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org