Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/40AED7A2726111EEBB4A07724AD9E6FC.roa
File: 40AED7A2726111EEBB4A07724AD9E6FC.roa (raw, json)
Hash identifier: IlTZtPFfhSE7pe1EwFgCbay0vbMlOw8uqy0wh/4wDzI=
Subject key identifier: C6:12:9D:AA:43:D0:CB:B9:44:C3:44:D0:35:74:76:6F:FF:96:3E:F6
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0805
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/40AED7A2726111EEBB4A07724AD9E6FC.roa
Signing time: Tue 24 Oct 2023 11:34:12 +0000
ROA not before: Tue 24 Oct 2023 11:34:09 +0000
ROA not after: Tue 18 Oct 2033 11:34:09 +0000
asID: 0
IP address blocks: 192.142.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Oct 24 11:34:09 2023 GMT
Not After : Oct 18 11:34:09 2033 GMT
Subject: CN=6537abb4-c709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:8c:cf:5b:bc:30:a0:a2:6c:3b:09:d2:da:
96:67:40:86:26:61:8a:94:95:06:c5:10:59:9b:88:
1f:af:ad:f7:1c:2c:54:b1:60:a9:68:e0:5d:40:93:
42:af:3d:db:94:39:4a:b4:ae:b5:4a:8f:6e:64:a8:
ec:24:28:d6:3d:46:4c:b2:84:f8:a3:44:11:84:62:
e7:e5:c2:08:46:37:37:21:78:63:e6:c4:06:3c:d1:
fb:79:c2:91:22:4e:44:c5:cb:d5:cc:a1:49:10:cb:
43:bf:f6:9b:2a:c3:65:ab:3f:c9:a1:33:7a:1e:db:
21:dd:e8:97:4c:87:33:ba:4c:ec:3d:8d:0f:d2:97:
2b:70:5f:63:93:f8:16:df:8f:26:85:95:9e:4b:29:
6d:42:77:7f:e6:e8:60:a1:51:16:64:0c:e5:86:fb:
c8:b4:70:07:1d:a1:75:33:c0:e3:17:74:ba:73:95:
5b:ba:90:a4:25:47:21:7b:3d:79:9f:d8:e2:a5:b9:
ac:da:a1:32:f3:30:72:03:45:83:01:a6:f9:ba:58:
5b:d5:45:22:56:bf:38:c6:70:56:9f:01:8a:0b:7a:
a4:de:d1:43:d1:a2:26:7e:0f:b3:c6:58:d6:fc:e8:
a7:b8:f6:29:44:6f:60:45:f3:43:95:00:5a:e7:67:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:9D:AA:43:D0:CB:B9:44:C3:44:D0:35:74:76:6F:FF:96:3E:F6
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/40AED7A2726111EEBB4A07724AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.136.0/23
Signature Algorithm: sha256WithRSAEncryption
03:48:40:c5:46:d1:87:8f:74:0e:95:7f:59:d7:5a:68:7b:35:
a9:15:4b:e0:6b:6c:a2:6b:1d:d9:9e:22:8b:1b:3b:9d:c3:23:
c6:be:cc:12:fb:08:6f:7d:db:2a:c8:f7:97:00:08:cf:b3:71:
dd:09:3e:b7:cc:66:83:65:54:c4:f4:a9:b5:44:2c:a3:a3:11:
45:f5:b6:3f:ad:33:37:df:a7:6f:db:07:20:f0:d2:99:10:20:
93:7d:93:9d:30:25:e3:40:39:92:11:b7:bb:c5:bd:ab:36:12:
f5:22:b5:7f:90:01:1c:d2:cd:c9:86:bb:a8:cc:45:e2:da:f5:
fb:fb:5d:13:83:14:47:ff:a6:e1:23:92:17:29:8e:3f:27:14:
af:39:3e:06:5c:6e:98:9f:76:2f:25:f6:58:ec:9c:ee:3a:1b:
ea:af:2c:ff:f7:3d:cc:28:b5:52:87:ce:4f:37:04:55:fd:e4:
e8:60:ac:44:02:74:b9:13:12:09:36:30:80:18:10:6c:98:1a:
b0:75:fc:5d:3d:59:66:10:91:97:2b:55:b6:d9:dd:7a:aa:6a:
4e:8a:31:2e:8d:a6:46:35:aa:96:00:15:ac:c2:10:8f:98:37:
f0:bb:75:f4:21:43:9b:06:bd:15:20:59:fd:55:cc:5a:b1:f9:
40:0f:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:09 2024 by rpki-client on console-ams.rpki-client.org