Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/46E4E22AA57711EFBADF5490762E951A.roa
File: 46E4E22AA57711EFBADF5490762E951A.roa (raw, json)
Hash identifier: bpvyKYPJcBRj7vyT646kBitt9qrzfb8jGuLteTmGui8=
Subject key identifier: EA:AE:8F:62:47:7D:8A:01:47:A6:25:4B:4B:F8:EB:90:E8:95:24:9D
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B06
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/46E4E22AA57711EFBADF5490762E951A.roa
Signing time: Mon 18 Nov 2024 06:35:18 +0000
ROA not before: Mon 18 Nov 2024 06:35:14 +0000
ROA not after: Tue 14 Nov 2034 06:35:14 +0000
asID: 30431
IP address blocks: 192.142.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2822 (0xb06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:35:14 2024 GMT
Not After : Nov 14 06:35:14 2034 GMT
Subject: CN=673ae026-e3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:b0:58:cd:98:61:99:55:cf:a6:7b:17:00:
d9:e2:17:58:ea:e3:07:8c:e3:cf:20:df:35:06:ff:
5a:96:53:34:fa:9c:b0:dc:be:44:3e:ad:55:2f:e8:
f9:07:93:c9:65:4a:b6:85:fc:39:ce:96:24:3f:b8:
ba:42:35:e7:67:79:50:59:2a:b3:1f:64:db:a7:2d:
ad:67:44:3e:9e:03:01:d7:fa:a5:61:58:26:6e:f8:
c0:10:39:48:07:82:ba:5c:d9:eb:81:0e:3a:e4:7c:
df:b7:32:dc:85:7a:3d:a5:17:3c:9a:fe:b5:bc:66:
7d:db:e7:1d:92:8b:3a:01:48:f0:ba:81:54:5d:1d:
70:a2:28:01:e7:26:b0:ef:d7:a9:22:82:84:99:57:
9f:c7:7d:4c:48:40:66:ef:c5:2b:c1:28:d1:4e:5f:
e7:e4:b3:d7:f5:5d:64:1b:da:12:53:d5:f8:77:b1:
01:f8:e0:13:c6:97:70:24:88:62:c4:73:c6:3d:83:
16:0a:f7:7d:13:02:d5:27:d5:ae:6d:3e:1f:05:da:
68:b3:39:5e:f4:29:d9:6d:d8:5b:34:d8:74:9c:45:
7a:9f:e4:72:80:ef:01:c4:ec:c6:39:3f:98:a0:dc:
7a:aa:13:2c:b8:76:ea:dc:fc:1f:c3:0f:21:97:b9:
02:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AE:8F:62:47:7D:8A:01:47:A6:25:4B:4B:F8:EB:90:E8:95:24:9D
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/46E4E22AA57711EFBADF5490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ed:01:cf:bc:2b:1f:8e:ac:b4:35:8a:33:d0:fb:f1:cc:9b:
3e:df:ce:2f:22:b4:46:34:56:09:92:3e:5b:5f:09:96:4b:aa:
9e:59:2e:b7:1c:c5:70:72:cf:01:e8:55:fd:49:ec:a0:97:c4:
47:ec:15:a9:3e:ba:96:44:da:9b:80:e1:dd:d1:0e:a9:82:59:
a1:b1:c8:7c:20:7c:6a:ce:26:1d:f8:db:3d:71:3a:3f:90:e1:
f4:a6:99:21:1e:7a:36:d3:c1:42:b4:ed:1b:24:ec:72:b6:b6:
ac:05:e5:47:65:c4:ec:59:fc:63:46:ab:71:e0:3d:3e:46:55:
2d:e0:d9:e4:4f:0e:61:68:bd:0d:1a:03:b3:bd:78:87:01:9a:
ac:f0:87:22:00:89:f4:98:71:d0:bd:25:83:f4:54:28:16:ca:
83:21:69:ca:f9:9e:7b:5a:a2:92:ec:d5:ea:5e:3a:7b:e0:fd:
41:7d:d2:5e:e6:f9:d6:99:9a:d0:d7:85:9c:c4:dd:d0:cc:ca:
e5:0b:68:26:e6:80:8e:fa:b2:45:ed:32:8c:46:f5:2b:e8:16:
74:3e:e4:4c:6a:d3:9e:fc:d8:b9:a6:1f:e0:db:9e:7e:96:3b:
04:6e:fe:54:07:62:b5:0d:b0:ab:d8:f1:40:15:be:12:37:80:
e1:18:f5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org