Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2C40B378A25611EF9EFB0355762E951A.roa
File: 2C40B378A25611EF9EFB0355762E951A.roa (raw, json)
Hash identifier: mAUSETPC9W/JKVS2j/GlC/p2y5iHRTNqH37QKSSHzSU=
Subject key identifier: 83:03:56:CC:53:F2:55:4F:15:CE:93:61:A7:7F:E8:E7:C2:1E:7E:E7
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0ADF
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2C40B378A25611EF9EFB0355762E951A.roa
Signing time: Thu 14 Nov 2024 07:00:46 +0000
ROA not before: Thu 14 Nov 2024 07:00:43 +0000
ROA not after: Tue 14 Nov 2034 07:00:43 +0000
asID: 6206
IP address blocks: 192.142.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2783 (0xadf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 14 07:00:43 2024 GMT
Not After : Nov 14 07:00:43 2034 GMT
Subject: CN=6735a01e-9492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:9c:67:46:50:f3:2d:b5:aa:83:66:96:d2:
e0:41:cc:f6:5a:f8:62:40:48:ff:4e:f1:ec:97:8b:
87:ed:51:49:1c:69:23:0b:30:39:01:f6:40:3e:7d:
26:e0:ad:20:66:1d:72:70:eb:c4:d2:db:8b:74:57:
73:21:2e:06:11:16:f0:c3:ae:6f:d8:fd:23:e5:4b:
d2:7a:18:60:6a:4f:88:3e:1b:b4:1e:73:a7:5a:a4:
8d:83:c9:cf:cf:12:6f:3b:77:6b:e9:27:3c:94:bd:
55:8a:a3:e2:a8:09:6d:8c:d3:e2:6e:fa:61:ce:4a:
db:db:7a:f3:e1:a1:3c:55:5c:77:dc:f0:2c:66:49:
11:2e:7e:b7:74:34:a5:ee:b8:a4:8f:d2:50:b0:2d:
2d:9b:5c:30:90:35:dc:65:2d:40:37:99:eb:76:3b:
f6:19:25:e4:a2:ab:13:02:ac:fb:7a:eb:b5:c7:27:
d9:9b:41:39:42:e9:8b:df:03:4d:54:6f:cb:7d:4b:
b9:41:39:24:67:7f:02:67:92:03:4e:57:03:96:82:
4f:97:00:ef:3f:67:cb:b9:81:e5:e1:36:b7:f3:87:
0f:a6:88:a7:9d:10:5d:b4:b2:e2:2d:6d:f7:99:b3:
c2:6b:10:7e:55:36:49:de:7c:ff:e9:c2:53:5e:f8:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:03:56:CC:53:F2:55:4F:15:CE:93:61:A7:7F:E8:E7:C2:1E:7E:E7
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/2C40B378A25611EF9EFB0355762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c1:90:00:20:cd:82:48:a6:6a:55:58:fb:ca:42:49:37:60:
b5:d8:61:2a:21:44:07:79:d1:8e:db:40:98:d9:40:c0:55:33:
fa:90:0c:04:3d:9d:94:39:36:3c:59:61:4f:e3:c7:c0:8b:6a:
14:2d:56:4a:77:e5:83:82:f3:4d:52:8a:d5:d3:f9:4c:d3:6b:
77:29:d8:12:54:44:a9:e4:a0:db:17:f1:2a:10:f1:ba:b4:95:
2d:06:46:95:62:3f:01:84:da:02:d7:2d:f9:29:ff:d9:fa:49:
2d:f5:35:4a:db:c3:71:1e:38:a7:5b:a7:41:01:2e:7e:33:8d:
32:e1:1a:1c:7d:fe:71:2d:b0:f4:fc:70:a2:fb:84:32:f2:12:
13:49:61:4c:a5:44:be:b0:6d:4c:54:48:a2:bf:23:f7:f4:e2:
18:a5:60:db:c8:69:c6:37:4a:bf:f7:bf:31:ee:53:ec:f0:a9:
23:1d:20:cc:27:ca:66:e8:2f:28:0f:c5:81:d1:59:7a:e0:6f:
46:0b:02:46:c6:d3:86:ce:f9:eb:18:ce:54:9b:34:e4:aa:ac:
f3:38:bf:7c:1a:62:27:f2:70:d6:8f:91:75:cf:96:6b:c3:d0:
e2:ee:d8:c9:50:79:ae:ff:8a:01:92:54:7c:5d:82:73:1b:4d:
3a:ad:0c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org