Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0869D84EA25611EFBED3EA52762E951A.roa
File: 0869D84EA25611EFBED3EA52762E951A.roa (raw, json)
Hash identifier: SI6zBg3L5aIe5PbqECffu/orZN55146EfJpvCl/upiM=
Subject key identifier: 9F:48:9C:A2:20:7D:26:94:BF:39:5E:30:02:0E:BD:A5:D2:15:C4:AC
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0ADD
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0869D84EA25611EFBED3EA52762E951A.roa
Signing time: Thu 14 Nov 2024 06:59:46 +0000
ROA not before: Thu 14 Nov 2024 06:59:43 +0000
ROA not after: Tue 14 Nov 2034 06:59:43 +0000
asID: 6206
IP address blocks: 192.142.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2781 (0xadd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 14 06:59:43 2024 GMT
Not After : Nov 14 06:59:43 2034 GMT
Subject: CN=67359fe2-f9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:b1:66:02:e7:d1:94:4f:aa:63:08:7b:e9:
f3:b1:c1:79:42:3d:b2:a0:1b:81:d0:cb:43:62:18:
9a:7c:42:9f:3e:cd:ac:fe:a6:d6:82:d3:d8:65:f8:
df:55:ca:7e:28:56:52:d0:44:fe:61:ec:e8:c3:aa:
f0:5b:26:8f:28:12:4c:3a:db:30:25:3a:a9:f5:a4:
f5:8d:cf:5e:5d:cb:3e:20:9a:77:0c:4e:03:1d:5a:
75:f8:b9:b8:80:87:f8:c9:49:60:3b:03:3b:8b:d7:
5e:4c:d6:4f:d3:09:c5:82:60:24:d9:0a:e0:bc:da:
9d:c6:d1:02:e6:39:30:ab:40:c2:5e:5a:7b:93:33:
31:06:c1:61:45:45:b6:9f:e0:11:e0:b9:ae:02:ca:
3f:1d:8c:f6:37:be:ea:24:e4:f7:17:cc:44:f2:5e:
37:5d:80:1f:af:8d:2c:6c:9e:76:39:ca:7a:6f:55:
07:21:a3:73:d3:25:b4:49:11:82:59:d7:bf:d5:2c:
3d:3a:83:08:37:67:c1:b3:fa:f5:52:19:46:b1:a0:
50:5e:96:0c:7e:ed:d9:31:ef:96:b8:6f:e3:4e:7a:
a5:bd:ba:c2:d8:f4:4c:3a:fa:a2:bb:15:76:d9:66:
f7:ee:cf:a5:8c:c3:e0:41:7a:7d:b7:a4:e3:95:f2:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:48:9C:A2:20:7D:26:94:BF:39:5E:30:02:0E:BD:A5:D2:15:C4:AC
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0869D84EA25611EFBED3EA52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:70:d1:a9:87:7c:a3:53:aa:c6:10:5c:8d:81:72:d3:fd:41:
00:eb:bf:58:d5:14:4d:af:2d:3f:24:4b:75:99:87:3a:d6:c1:
eb:5b:12:18:8d:91:b1:53:1e:62:ff:3b:4c:53:b2:3c:88:e6:
48:2a:e9:4c:c4:f6:09:03:e3:09:1b:5e:1b:e1:b2:12:0a:a6:
0a:fa:f5:04:51:52:29:be:01:00:82:f5:6a:42:5c:57:20:c1:
d1:d9:6c:04:80:ba:d6:92:69:45:94:86:28:fb:ab:7f:7a:9b:
7c:ab:cf:57:ca:cb:f4:95:d5:17:0a:37:40:13:84:87:0a:a6:
c7:f3:6e:a3:83:2a:8e:43:7b:7a:55:3c:78:0f:fe:af:35:64:
ee:cb:16:11:d4:a2:e9:bf:70:bb:d4:03:1c:f8:1b:14:33:1f:
74:1c:03:92:1e:b5:78:3b:93:40:bf:7f:30:86:75:26:4e:b0:
54:10:65:ac:aa:e6:16:3a:4a:71:a4:c2:58:39:62:05:5a:5a:
4c:ad:a6:f8:71:b7:90:63:d8:5f:1e:b4:97:4d:7b:26:4b:c9:
a1:66:d9:1c:0e:f0:73:5a:0d:53:e8:10:13:3f:b4:71:fd:e6:
77:ae:eb:e7:cc:da:52:1e:84:b2:bb:e4:5f:72:97:c2:c5:0b:
f7:67:f9:18
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDExMTQwNjU5NDNaFw0zNDExMTQwNjU5NDNaMBgxFjAU
BgNVBAMTDTY3MzU5ZmUyLWY5YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBI7FmAufRlE+qYwh76fOxwXlCPbKgG4HQy0NiGJp8Qp8+zaz+ptaC09hl
+N9Vyn4oVlLQRP5h7OjDqvBbJo8oEkw62zAlOqn1pPWNz15dyz4gmncMTgMdWnX4
ubiAh/jJSWA7AzuL115M1k/TCcWCYCTZCuC82p3G0QLmOTCrQMJeWnuTMzEGwWFF
Rbaf4BHgua4Cyj8djPY3vuok5PcXzETyXjddgB+vjSxsnnY5ynpvVQcho3PTJbRJ
EYJZ17/VLD06gwg3Z8Gz+vVSGUaxoFBelgx+7dkx75a4b+NOeqW9usLY9Ew6+qK7
FXbZZvfuz6WMw+BBen23pOOV8k1bAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUn0ic
oiB9JpS/OV4wAg69pdIVxKwwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzA4NjlEODRFQTI1NjExRUZCRUQzRUE1Mjc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjggwDQYJKoZIhvcNAQELBQAD
ggEBADpw0amHfKNTqsYQXI2BctP9QQDrv1jVFE2vLT8kS3WZhzrWwetbEhiNkbFT
HmL/O0xTsjyI5kgq6UzE9gkD4wkbXhvhshIKpgr69QRRUim+AQCC9WpCXFcgwdHZ
bASAutaSaUWUhij7q396m3yrz1fKy/SV1RcKN0AThIcKpsfzbqODKo5De3pVPHgP
/q81ZO7LFhHUoum/cLvUAxz4GxQzH3QcA5IetXg7k0C/fzCGdSZOsFQQZayq5hY6
SnGkwlg5YgVaWkytpvhxt5Bj2F8etJdNeyZLyaFm2RwO8HNaDVPoEBM/tHH95neu
6+fM2lIehLK75F9yl8LFC/dn+Rg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org