Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3DA7BBFA9DCB11EFB8DE4399762E951A.roa
File: 3DA7BBFA9DCB11EFB8DE4399762E951A.roa (raw, json)
Hash identifier: tX1uCxR0u+FkcQNw5ZJTUW1WEOzFkjxJkiGD5s8s55M=
Subject key identifier: 74:13:E0:AF:2D:97:48:90:9C:B4:ED:CC:3F:86:C4:99:BD:8A:84:A4
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AC1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3DA7BBFA9DCB11EFB8DE4399762E951A.roa
Signing time: Fri 08 Nov 2024 12:16:11 +0000
ROA not before: Fri 08 Nov 2024 12:16:07 +0000
ROA not after: Wed 08 Nov 2034 12:16:07 +0000
asID: 6206
IP address blocks: 192.142.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2753 (0xac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 8 12:16:07 2024 GMT
Not After : Nov 8 12:16:07 2034 GMT
Subject: CN=672e010b-5fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:63:72:33:61:06:aa:48:61:0b:97:1c:08:
2c:f7:50:2b:cf:13:1f:5e:2b:0b:8d:cd:3c:ea:f9:
b8:b7:aa:7b:d8:19:92:78:63:6e:44:20:a2:bf:e2:
21:aa:52:e6:51:1c:67:ea:78:b2:86:0d:27:e1:ae:
c4:ec:f4:4c:fc:d1:91:da:5f:39:00:20:06:fb:1e:
f5:5d:7f:fe:71:e5:2a:81:e8:c5:b0:74:98:7a:0e:
3e:78:bb:21:15:44:e3:45:53:23:30:42:9d:a7:e3:
06:4c:be:63:f3:e6:32:fc:03:b0:47:c8:9f:6a:52:
ef:6d:f4:65:f2:04:f7:36:5c:b3:9e:03:6a:b7:b6:
a8:38:29:0e:84:ca:85:67:24:16:72:7d:45:ad:e3:
34:01:be:1e:ae:d7:cc:6b:a6:78:54:04:30:ca:4d:
68:82:e4:98:ca:65:1d:9d:6b:e3:e4:40:90:7e:43:
6a:98:1b:44:39:b0:38:58:bd:09:a3:12:44:a4:c4:
4c:96:69:f2:db:d4:d6:57:75:5f:9a:82:d4:cf:3a:
39:77:74:a1:5e:93:d4:40:99:88:4a:ba:04:b5:4c:
9f:53:36:0d:86:86:0e:7c:b9:27:ea:ab:67:96:d7:
fb:c9:fb:8b:2b:bb:74:dc:72:77:1d:0b:72:fa:58:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:13:E0:AF:2D:97:48:90:9C:B4:ED:CC:3F:86:C4:99:BD:8A:84:A4
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/3DA7BBFA9DCB11EFB8DE4399762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.2.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7c:fa:d8:7b:8f:00:7e:6f:59:28:76:63:12:4c:84:22:4c:
9e:43:ae:4d:3c:d8:cd:c7:df:98:65:53:79:76:05:96:ec:56:
ff:c1:6f:71:c4:2f:60:5c:9a:66:02:be:60:ed:86:76:99:f0:
67:5a:28:7a:35:d6:ea:fc:b4:e9:54:2e:eb:85:ae:07:59:1b:
5b:0b:07:34:3f:97:55:d8:7e:f8:5b:8a:ab:c9:bf:ab:ee:2d:
e7:64:ba:2e:b5:4f:cb:2e:3c:84:69:79:ab:5f:2b:cf:d3:d7:
88:f8:0c:79:42:93:f1:51:cf:5b:0b:61:23:b6:0b:1a:e1:0a:
c1:ff:fd:78:00:e9:50:5e:0e:6b:62:24:25:83:70:05:78:50:
ca:8d:80:16:cc:9f:47:78:1a:37:f2:5b:75:e3:c3:27:38:6a:
be:b4:96:e6:45:9b:78:74:76:f0:14:89:2d:de:26:38:64:c7:
50:a1:83:57:1a:7d:fe:0f:73:a9:ab:da:e4:3d:01:7f:39:95:
ad:b4:2c:f4:07:e3:03:d0:a3:48:e6:cd:11:45:64:81:44:d0:
df:2d:b9:45:b6:ed:0c:30:3d:33:fe:ab:cd:bc:f6:bb:e0:33:
e9:8b:86:21:dd:7f:9d:9a:94:bc:45:34:9b:8c:1b:ff:de:c1:
75:be:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org