Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0E23B212A57811EFA090A394762E951A.roa
File: 0E23B212A57811EFA090A394762E951A.roa (raw, json)
Hash identifier: D3yauSS96nnheIcuxISg7qjKcSVKK8OEdHjsBWH5JwU=
Subject key identifier: 96:5C:9E:11:86:A7:AA:A1:87:CB:AD:E8:82:0A:44:8F:59:0C:D6:06
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B12
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0E23B212A57811EFA090A394762E951A.roa
Signing time: Mon 18 Nov 2024 06:40:52 +0000
ROA not before: Mon 18 Nov 2024 06:40:48 +0000
ROA not after: Tue 14 Nov 2034 06:40:48 +0000
asID: 30431
IP address blocks: 192.142.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2834 (0xb12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:40:48 2024 GMT
Not After : Nov 14 06:40:48 2034 GMT
Subject: CN=673ae174-a154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:cf:de:0d:4f:88:60:e2:27:d8:7d:8f:ad:
e5:27:f7:f3:34:78:c5:ec:8b:f8:96:30:84:f0:a9:
c2:9c:cd:9a:3e:45:09:b7:47:ed:1b:aa:20:67:6f:
35:a6:c3:a0:54:f2:aa:73:2f:fe:12:f1:6c:7d:ef:
0d:23:55:05:43:90:99:31:ae:fd:89:04:51:f5:82:
dc:ff:83:a1:de:89:a9:4d:9a:5c:c1:85:17:f8:fa:
16:03:2a:52:66:76:48:9c:01:04:f5:e6:78:b2:e5:
fb:18:da:e9:b1:81:d9:94:5b:00:31:52:62:95:68:
f3:8b:1d:a5:4f:50:20:66:5e:db:3d:c3:45:00:04:
e1:75:35:e5:f3:e5:0f:5e:c7:62:70:57:13:c2:c1:
2c:8b:39:9e:9b:91:d9:72:07:ae:de:84:c7:e3:a8:
be:2e:4d:37:e8:74:6e:74:9f:e5:70:eb:d9:cf:5a:
39:eb:74:86:e6:c7:c6:bc:70:69:c8:3d:3e:1f:43:
19:1a:43:cb:5b:f1:62:fe:3f:4d:8d:40:a1:40:98:
7b:55:dd:a5:43:ba:7a:e0:31:a2:ea:51:d3:a7:15:
83:10:f8:bb:88:7b:f3:73:f0:41:60:00:05:58:05:
d4:62:59:94:4d:75:2c:b9:77:c6:ec:cc:15:fa:dd:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5C:9E:11:86:A7:AA:A1:87:CB:AD:E8:82:0A:44:8F:59:0C:D6:06
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/0E23B212A57811EFA090A394762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.198.0/23
Signature Algorithm: sha256WithRSAEncryption
07:be:79:52:1d:bb:1d:8d:13:58:9a:ec:24:b1:6f:03:93:19:
01:85:22:64:96:8d:3f:5b:b7:3d:90:32:9f:3e:f9:62:c7:41:
86:8f:8f:39:82:5a:26:ad:cb:59:14:2a:34:1a:ad:0e:8f:00:
dc:8e:e1:fd:89:4c:61:99:63:50:a4:c7:e7:40:91:fc:2b:3e:
b3:cd:48:63:e5:0d:82:0d:0d:1e:0d:0f:37:64:2e:4d:3b:cc:
33:1b:31:78:1b:56:98:52:e1:3e:91:7a:87:d4:f8:30:06:bf:
04:1c:84:84:71:82:d5:68:b6:a1:e3:90:ac:32:59:e0:5c:66:
8b:f9:0c:a0:3b:92:ad:ac:ac:83:fb:73:18:a9:dd:c5:b6:42:
26:a8:06:6e:74:3d:02:51:ad:de:33:7d:f8:02:4c:13:4e:80:
80:a7:46:96:9f:50:08:99:c2:a1:01:84:3f:ce:56:bb:9d:a7:
8d:e4:7d:0b:5d:a2:76:26:31:22:46:8d:78:36:03:6b:5a:63:
f1:ae:b7:af:ee:dc:29:fc:d6:35:5a:0e:10:d2:6e:91:0a:42:
27:1d:32:33:fc:29:fb:07:e8:ad:ba:ea:16:ad:26:fd:7f:89:
bb:d1:a1:95:98:0a:20:46:ee:cb:16:d3:31:b9:3a:27:7c:08:
65:df:08:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org