Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3569CFE0A57911EF910AD99A762E951A.roa
File: 3569CFE0A57911EF910AD99A762E951A.roa (raw, json)
Hash identifier: JxfM+j/YfcoRd/nwAshjZ5QWPSj8DJOwyTo1E26JNFg=
Subject key identifier: 6B:D9:63:A1:92:50:5A:BD:53:92:33:4F:7A:92:D9:5C:4D:14:30:63
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B22
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3569CFE0A57911EF910AD99A762E951A.roa
Signing time: Mon 18 Nov 2024 06:49:08 +0000
ROA not before: Mon 18 Nov 2024 06:49:04 +0000
ROA not after: Tue 14 Nov 2034 06:49:04 +0000
asID: 30431
IP address blocks: 192.142.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2850 (0xb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:49:04 2024 GMT
Not After : Nov 14 06:49:04 2034 GMT
Subject: CN=673ae364-c92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:8a:a1:77:cd:55:06:0e:77:b2:4d:52:19:
9e:36:af:46:d7:86:8d:a7:5a:ff:12:db:dc:f5:f2:
b1:c9:73:2b:51:d4:13:7c:c2:f2:be:59:19:4f:64:
f8:b2:a3:ed:de:65:ee:1f:38:17:02:76:58:73:93:
97:38:e9:70:e1:93:99:9f:53:43:68:02:cf:39:64:
da:ec:c0:8b:3b:50:8b:3c:30:c9:e0:c9:38:63:23:
2a:ce:72:41:0d:9e:c5:0c:1e:9a:ef:c9:7f:20:ca:
7c:8d:09:0b:8b:3b:47:81:a3:ba:47:c9:39:a7:54:
b1:01:5c:29:18:a4:09:e7:a7:eb:d9:d5:ef:62:b5:
72:b4:66:fe:ba:09:41:dd:83:48:a0:9f:ff:6f:3d:
bb:7e:0b:94:b0:f9:70:83:a0:85:24:9d:eb:43:b1:
4f:34:97:ae:48:35:d3:34:bc:47:5a:b7:67:7a:a7:
1a:f7:b5:9d:a0:d1:ae:c4:4e:9f:41:e8:1b:0b:e1:
bd:9f:2b:fc:e7:97:2c:3a:b7:37:57:d4:c6:ad:50:
60:c0:32:3b:14:e4:24:1e:1d:83:63:82:33:63:69:
fa:ac:f6:2a:76:15:c6:a6:fb:58:b2:c2:11:63:1a:
65:3e:58:a7:aa:87:67:b1:e3:57:a3:d0:3a:ec:df:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D9:63:A1:92:50:5A:BD:53:92:33:4F:7A:92:D9:5C:4D:14:30:63
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3569CFE0A57911EF910AD99A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.248.0/22
Signature Algorithm: sha256WithRSAEncryption
61:dc:86:be:94:85:d1:24:69:ed:4b:12:d2:18:9a:c6:e5:e2:
af:5f:ef:f0:e6:05:29:54:7a:b1:49:92:e9:29:42:da:35:2a:
d4:01:7a:27:11:9a:f8:9b:13:85:ef:94:7f:ff:3c:3c:0c:4b:
5f:9b:6c:3d:f1:c9:6f:54:aa:35:06:48:9b:19:3d:50:89:2b:
24:27:f4:57:3a:88:74:df:1b:b3:59:60:b9:7d:95:32:b9:4d:
81:c5:5b:eb:49:ca:26:f6:bc:df:b9:cd:a3:fa:6f:8a:d5:07:
19:a7:c9:be:c3:a8:a0:4b:10:35:55:f4:0e:da:88:d1:73:03:
b8:d2:e6:8d:95:f5:ae:e1:bd:1f:1c:0e:e1:b2:41:df:44:7d:
dc:42:81:b4:9c:23:ea:f4:60:1b:9d:32:83:ba:e0:50:1d:0e:
75:25:59:40:08:78:1b:d9:81:69:81:45:1b:48:a3:f4:d9:7b:
ec:34:1b:5b:3d:93:ee:b5:88:f0:30:30:a9:e1:74:f5:ed:85:
48:da:e7:d0:cc:42:9c:a9:02:25:92:61:c1:aa:63:54:5d:79:
46:81:dd:8d:5b:43:45:5a:ea:72:fe:9b:03:25:99:df:f2:33:
8a:4f:f6:3b:f2:6f:73:6c:07:36:f9:39:e4:5f:6b:26:87:2f:
aa:2b:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org