Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/454B5C92D08311EE8DACD4AF775412E6.roa
File: 454B5C92D08311EE8DACD4AF775412E6.roa (raw, json)
Hash identifier: pWDD78L3YHgExiqjb7I6N6JqHPbQyKHnpyYrYejWfMU=
Subject key identifier: C5:A9:3F:DC:37:6A:BF:D3:B7:25:68:FC:0C:70:05:87:05:DD:07:FD
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 08D1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/454B5C92D08311EE8DACD4AF775412E6.roa
Signing time: Wed 21 Feb 2024 06:34:32 +0000
ROA not before: Wed 21 Feb 2024 06:34:26 +0000
ROA not after: Tue 14 Feb 2034 06:34:26 +0000
asID: 197450
IP address blocks: 192.142.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Feb 21 06:34:26 2024 GMT
Not After : Feb 14 06:34:26 2034 GMT
Subject: CN=65d59978-b545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:e6:d0:5c:99:aa:1c:0b:b0:06:73:07:2f:
4c:5d:1b:26:6f:92:d0:5a:20:38:49:89:c9:f7:10:
9c:46:9e:2a:cc:47:ef:a8:e3:44:50:e3:24:bc:8b:
ae:f9:55:32:59:3a:00:90:f4:39:3b:3d:23:7c:ef:
cb:03:03:51:75:ac:16:6d:47:7d:df:5e:10:3d:3c:
4e:42:06:c2:98:d4:51:6a:28:4c:77:51:d6:f9:6d:
98:5a:0a:c5:d0:a3:58:bb:bd:7d:be:a3:51:aa:a0:
df:2a:1a:29:bb:c9:f9:89:7c:ad:9a:14:98:57:51:
74:f2:1f:5a:1c:0e:10:4d:bd:47:1e:aa:20:3c:cd:
c1:95:51:33:aa:41:a8:31:62:9e:36:09:8e:1f:3e:
1f:6a:69:2b:cc:21:3a:0d:5c:b4:93:d0:45:f6:c1:
ca:a2:bb:50:e6:af:01:4e:61:ac:cf:53:f6:72:ff:
11:f7:f5:6a:05:32:eb:40:e1:70:93:eb:33:a6:50:
4c:5c:72:2c:c9:8d:6a:31:58:d2:2f:f6:6d:d0:f3:
99:92:83:f8:c4:09:c7:af:c1:65:1d:af:a8:49:d5:
70:80:09:65:e0:da:66:b1:eb:e2:c5:65:10:78:85:
5c:05:fe:3c:6f:1e:c9:2b:96:dc:41:84:da:45:da:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:3F:DC:37:6A:BF:D3:B7:25:68:FC:0C:70:05:87:05:DD:07:FD
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/454B5C92D08311EE8DACD4AF775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.104.0/23
Signature Algorithm: sha256WithRSAEncryption
59:92:a7:90:e9:18:3e:d9:82:6e:21:3b:2c:8d:6c:d7:a7:bf:
2a:85:5c:46:55:48:a6:e3:8d:05:8c:cf:57:c7:18:88:a7:3a:
a1:c4:a9:c3:cc:80:6f:11:f9:ae:cd:12:ca:b2:82:3a:3e:53:
51:df:32:4a:b4:3b:a2:16:69:1b:8e:07:af:c6:a2:40:5a:ad:
b4:d2:0c:45:b0:dd:fe:2b:51:d9:9c:91:7a:0e:4f:2e:2c:c3:
de:03:b8:3f:2a:a0:02:83:c7:e3:53:c9:fe:ad:a4:a1:9b:2b:
39:4c:e4:6c:2b:74:1f:ea:c5:ba:f7:3a:1b:4a:87:0a:f2:a1:
1c:70:b2:fb:c3:10:95:59:25:dd:f6:80:94:d0:d7:e5:bb:43:
20:fa:51:23:43:8d:27:7f:cc:3b:62:ec:a4:30:b8:93:7e:5e:
dd:18:b6:58:ef:0f:98:f9:62:ce:9a:69:9f:b1:3f:97:f6:8f:
11:ac:71:1c:68:de:f8:ad:e8:f9:65:f3:ae:8a:b0:ff:aa:bc:
2b:f7:d2:38:69:6c:a7:66:53:c4:4a:c9:1a:d5:b2:28:e4:f6:
d4:ab:ab:e1:61:28:5b:bd:b9:79:23:62:21:c5:bb:e0:4c:c0:
25:6b:53:d5:31:b0:c1:74:b2:7c:f4:24:67:6e:f9:7d:d3:08:
de:00:63:66
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCNEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDAyMjEwNjM0MjZaFw0zNDAyMTQwNjM0MjZaMBgxFjAU
BgNVBAMTDTY1ZDU5OTc4LWI1NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0hObQXJmqHAuwBnMHL0xdGyZvktBaIDhJicn3EJxGnirMR++o40RQ4yS8
i675VTJZOgCQ9Dk7PSN878sDA1F1rBZtR33fXhA9PE5CBsKY1FFqKEx3Udb5bZha
CsXQo1i7vX2+o1GqoN8qGim7yfmJfK2aFJhXUXTyH1ocDhBNvUceqiA8zcGVUTOq
QagxYp42CY4fPh9qaSvMIToNXLST0EX2wcqiu1DmrwFOYazPU/Zy/xH39WoFMutA
4XCT6zOmUExccizJjWoxWNIv9m3Q85mSg/jECcevwWUdr6hJ1XCACWXg2max6+LF
ZRB4hVwF/jxvHskrltxBhNpF2sSVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUxak/
3Ddqv9O3JWj8DHAFhwXdB/0wHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzQ1NEI1QzkyRDA4MzExRUU4REFDRDRBRjc3NTQxMkU2LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHAjmgwDQYJKoZIhvcNAQELBQAD
ggEBAFmSp5DpGD7Zgm4hOyyNbNenvyqFXEZVSKbjjQWMz1fHGIinOqHEqcPMgG8R
+a7NEsqygjo+U1HfMkq0O6IWaRuOB6/GokBarbTSDEWw3f4rUdmckXoOTy4sw94D
uD8qoAKDx+NTyf6tpKGbKzlM5GwrdB/qxbr3OhtKhwryoRxwsvvDEJVZJd32gJTQ
1+W7QyD6USNDjSd/zDti7KQwuJN+Xt0YtljvD5j5Ys6aaZ+xP5f2jxGscRxo3vit
6Pll866KsP+qvCv30jhpbKdmU8RKyRrVsijk9tSrq+FhKFu9uXkjYiHFu+BMwCVr
U9UxsMF0snz0JGdu+X3TCN4AY2Y=
-----END CERTIFICATE-----
Generated at Sun Jun 2 02:07:16 2024 by rpki-client on console-fra.rpki-client.org