Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/07313B1AA57711EF8EF3FC8D762E951A.roa
File: 07313B1AA57711EF8EF3FC8D762E951A.roa (raw, json)
Hash identifier: SyDS+YkPzgzDHOrrrbbnwcxYcM7Ztv7OAg/J0ypgNE8=
Subject key identifier: 0B:F2:AA:22:5E:8C:6D:05:FF:B9:4B:15:CE:9E:B0:54:13:9F:C9:73
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B02
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/07313B1AA57711EF8EF3FC8D762E951A.roa
Signing time: Mon 18 Nov 2024 06:33:31 +0000
ROA not before: Mon 18 Nov 2024 06:33:27 +0000
ROA not after: Wed 15 Nov 2034 06:33:27 +0000
asID: 30431
IP address blocks: 192.142.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2818 (0xb02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:33:27 2024 GMT
Not After : Nov 15 06:33:27 2034 GMT
Subject: CN=673adfbb-8e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:ac:c0:4e:f5:02:d1:ea:4b:23:65:d2:28:
74:cd:eb:56:ea:bf:72:6f:7f:10:60:5e:5e:13:1f:
51:d0:6b:5f:ec:5c:cc:ce:4b:90:e4:75:65:48:c2:
26:27:9b:8e:24:f5:39:1a:f3:27:00:2a:e2:14:1c:
96:e9:bf:94:6e:aa:21:3c:01:f9:05:1c:e5:c8:af:
32:d2:92:4b:98:50:a9:30:af:80:77:aa:7e:b5:b9:
16:34:12:e1:32:d5:4c:fb:d2:a6:2e:54:b7:e7:83:
42:8a:b1:0c:ad:36:81:14:c6:97:ba:cf:53:f0:43:
a2:b9:b3:80:8f:92:d2:a1:a9:e4:b7:c0:7e:a7:c3:
07:41:6f:f8:6e:cc:79:56:d0:83:ab:36:54:bc:5a:
4d:28:df:08:82:9c:45:c0:c1:3d:7e:a3:44:e7:68:
f0:58:36:d2:5e:05:8b:2f:88:b1:a8:b6:39:b2:86:
4b:d9:99:88:1d:54:d7:f0:eb:6a:91:55:70:dc:3b:
62:ff:97:a6:88:e1:d4:89:f9:9b:4e:b1:6b:0a:a4:
44:fd:58:f0:d7:2c:fa:8a:41:cb:b8:4d:72:f7:c4:
b1:cd:14:1f:5a:5b:92:29:f7:83:62:34:6a:df:79:
2b:14:4a:f7:6b:f5:62:75:5c:d8:27:40:2f:1a:9f:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F2:AA:22:5E:8C:6D:05:FF:B9:4B:15:CE:9E:B0:54:13:9F:C9:73
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/07313B1AA57711EF8EF3FC8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:20:ad:2d:27:be:f1:75:be:83:7b:37:d5:b6:ef:af:5e:11:
12:f8:2d:5d:53:db:ce:e8:e2:8c:4d:c6:30:15:ab:20:cf:35:
19:23:2c:69:1f:a7:f5:85:33:75:74:33:ac:3d:6e:37:3f:cc:
10:70:35:ac:48:15:14:99:5f:22:2d:d9:97:db:52:5e:83:f1:
9a:5c:a6:d3:85:cb:88:0b:25:5e:ba:d9:7a:a0:f7:6e:33:83:
80:56:68:45:be:ef:88:21:2d:9a:6b:fd:54:4a:36:2f:d7:61:
34:65:49:50:2d:a8:76:32:d4:a4:88:ba:73:4c:a3:0f:ed:bf:
7a:45:64:38:d3:02:0a:4c:9a:ef:ba:a1:22:6f:13:d8:41:9e:
93:c3:49:a0:ea:ed:d3:aa:f2:67:fa:2f:a0:49:5c:cf:98:1a:
90:98:11:fc:11:dd:db:a8:f2:52:db:3e:01:39:a3:c8:58:d0:
31:40:20:37:7f:8a:e3:14:f1:00:b7:de:36:24:29:16:85:3b:
17:dc:39:24:a0:4e:5d:a3:af:1d:8b:5e:d9:0a:5d:a6:92:fc:
18:4d:60:ea:78:85:a6:a7:ba:62:cd:a9:33:a5:79:a2:25:f4:
20:07:89:e3:f0:b6:6f:b2:00:09:e8:93:70:a2:7d:58:b0:d3:
3c:49:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org