Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22D8C342A57711EFAEBE0F8E762E951A.roa
File: 22D8C342A57711EFAEBE0F8E762E951A.roa (raw, json)
Hash identifier: tQwUUmX9jq1zQj311atVgBEAZRwLxlbNQrWs5TwCSx8=
Subject key identifier: A5:77:D1:16:2E:C2:0D:F7:FA:63:89:82:81:E8:A6:1B:62:4E:64:94
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B04
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22D8C342A57711EFAEBE0F8E762E951A.roa
Signing time: Mon 18 Nov 2024 06:34:18 +0000
ROA not before: Mon 18 Nov 2024 06:34:14 +0000
ROA not after: Wed 15 Nov 2034 06:34:14 +0000
asID: 30431
IP address blocks: 192.142.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2820 (0xb04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:34:14 2024 GMT
Not After : Nov 15 06:34:14 2034 GMT
Subject: CN=673adfea-fb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:93:cb:56:61:ef:ea:ca:2a:14:76:b3:eb:3a:
26:95:90:b8:f9:04:2e:46:9c:55:56:7c:2a:d1:91:
68:2a:b8:38:4d:07:4a:4a:77:fb:45:b1:94:a7:c6:
58:52:97:56:31:a9:a0:94:69:48:20:7d:82:35:61:
1d:2d:1e:a0:c6:fc:91:a7:76:13:e1:84:02:3a:6d:
72:ef:5f:9a:6c:42:45:2b:87:75:39:7b:68:b6:e0:
4f:58:ed:94:d7:1e:14:c8:99:f3:d5:b7:c5:c3:62:
26:b1:f8:ca:f7:d1:27:59:05:5f:aa:e0:c9:37:27:
ed:ee:18:49:2b:73:a9:a7:72:02:42:32:6b:dc:6d:
a2:b8:22:3e:b8:24:de:32:0c:d7:92:77:36:e5:e0:
de:32:6a:27:a8:28:df:22:85:9e:eb:6e:89:57:d0:
15:92:11:39:69:f2:79:7a:f9:d3:85:5b:bc:fb:b6:
13:dc:3a:bc:f8:64:c3:51:8e:7e:f3:64:77:ff:80:
3f:7a:76:51:f8:4e:03:a0:b7:8e:f1:90:a4:62:33:
55:f8:9b:c8:ba:c7:a7:db:ad:cd:33:28:0d:a5:d2:
15:f0:92:27:39:65:54:54:09:e1:94:49:7c:5a:5d:
c9:b4:ff:84:b7:34:06:22:05:c4:62:0d:43:79:e5:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:77:D1:16:2E:C2:0D:F7:FA:63:89:82:81:E8:A6:1B:62:4E:64:94
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/22D8C342A57711EFAEBE0F8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.160.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:f8:07:ac:46:bb:a0:cb:9f:d6:a9:dd:6f:f5:87:9c:77:e1:
77:dc:4b:14:a3:71:f3:7f:be:ee:c1:03:02:76:01:31:5d:79:
4f:44:3f:83:73:74:64:50:f0:83:51:e4:7d:b7:d5:b0:f4:c5:
79:2d:81:e8:3f:9a:ea:7d:5d:8b:7a:1b:ea:fc:c4:95:d2:1c:
0e:10:32:8e:47:be:01:be:79:b2:37:ca:98:8d:c8:4a:b1:23:
31:33:72:ca:aa:19:c7:ae:e1:9a:a9:5b:53:31:5f:58:1a:f9:
0d:1d:1c:ff:c0:47:31:b8:41:54:4e:80:00:09:00:67:a0:ee:
ac:09:4f:57:81:0e:02:da:4a:3d:73:90:fb:28:13:7d:e9:93:
f8:3f:41:12:84:2b:21:2d:b8:45:c2:5c:a4:60:e3:2f:66:7d:
06:04:6c:ad:34:91:e3:4f:17:73:35:f4:55:46:48:61:90:7a:
6d:a1:65:c9:5d:47:01:0f:08:63:be:48:38:d5:fb:8c:0e:aa:
73:84:ff:83:1b:11:1f:2b:61:d4:fb:f7:46:3f:e9:13:cd:32:
a7:24:bf:8a:da:38:0e:0f:19:ae:31:ad:6a:87:b7:d0:8c:15:
31:89:09:d9:ff:8c:0c:20:11:37:9a:1d:1b:5f:9e:ac:59:1d:
4b:a3:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org