Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4E0AC7A8A57811EF8D9FBE94762E951A.roa
File: 4E0AC7A8A57811EF8D9FBE94762E951A.roa (raw, json)
Hash identifier: 6oe2oWpPdA54slLOHo9kCaTDST8c4/z/jtc31oNxgyE=
Subject key identifier: 05:D6:52:56:2C:37:D9:E4:35:A9:C4:B4:45:10:C1:02:22:9D:DF:F3
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B16
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4E0AC7A8A57811EF8D9FBE94762E951A.roa
Signing time: Mon 18 Nov 2024 06:42:40 +0000
ROA not before: Mon 18 Nov 2024 06:42:36 +0000
ROA not after: Wed 15 Nov 2034 06:42:36 +0000
asID: 30431
IP address blocks: 192.142.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2838 (0xb16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:42:36 2024 GMT
Not After : Nov 15 06:42:36 2034 GMT
Subject: CN=673ae1df-c972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:3f:5e:ca:5a:3b:20:f8:71:cc:ec:9d:c5:
a8:ba:1e:a5:d8:f1:b6:33:e7:16:28:ca:2e:4d:0d:
9b:0a:ee:38:96:9a:62:ee:e6:45:90:6d:34:b0:30:
5f:e9:87:7e:ae:e9:69:53:41:23:03:d4:ec:7d:ea:
19:76:34:d2:98:d6:7e:fc:09:42:40:18:61:d2:bc:
bc:9f:c1:b9:e8:d7:a7:d6:b0:d9:16:c0:68:bf:11:
1e:b4:58:70:de:79:02:13:35:55:15:ca:45:9a:75:
8c:fb:f2:2c:aa:a3:3e:dc:11:6f:b9:83:78:f0:5d:
45:0e:23:76:fe:1d:f5:cf:3c:5d:99:72:b0:5b:fe:
0d:bd:61:ca:60:c9:29:91:68:34:2b:cd:d3:2a:75:
cf:35:8d:55:d6:b3:e9:42:ca:51:c7:00:9b:2b:1f:
4e:c1:26:fc:fc:e7:51:f4:6c:3c:0f:5b:fc:4e:9c:
51:c4:2d:8a:95:84:d3:ae:db:51:41:aa:c8:c2:46:
f5:49:06:78:1b:1b:d5:96:64:31:18:73:29:b2:fb:
ea:66:bb:21:09:ce:72:60:e2:19:29:60:22:81:09:
ce:8b:2f:c3:ac:45:0c:1a:30:ef:1e:cd:ac:0b:8f:
1f:da:37:1c:04:bf:65:84:f5:56:a6:f9:59:7d:26:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:52:56:2C:37:D9:E4:35:A9:C4:B4:45:10:C1:02:22:9D:DF:F3
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4E0AC7A8A57811EF8D9FBE94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.208.0/21
Signature Algorithm: sha256WithRSAEncryption
30:1a:53:95:69:7c:1a:51:99:66:a1:8d:11:6f:fa:9e:a4:49:
e8:ee:17:3b:b4:1f:48:d8:8e:6e:f9:24:7c:8b:f1:6c:b5:8f:
19:57:54:78:fa:69:85:73:06:a3:30:a5:83:20:ce:e6:ed:01:
8a:af:c7:9a:fb:cf:d1:b7:a1:1f:01:e9:d9:a7:14:f5:8f:36:
d9:41:de:09:da:b4:21:44:43:ce:bc:50:34:07:79:62:32:c1:
47:ca:5c:7a:46:b4:29:62:13:03:37:e3:03:f4:18:d9:9e:18:
e4:41:b6:b3:9b:16:99:ed:d8:5b:c3:00:b9:c6:4e:4f:79:97:
46:41:4a:99:e1:3c:c9:9e:d7:13:cf:df:a9:e5:90:19:7b:45:
fe:c7:28:11:05:64:71:58:5e:63:95:30:7e:82:5b:a2:35:35:
9e:4c:53:b6:5c:87:06:81:12:54:03:65:89:ff:d5:4d:fa:3d:
d7:cb:57:11:f2:3b:b1:c6:a7:c8:8a:10:08:1d:da:14:76:f8:
ec:16:68:30:d2:c5:01:71:7e:9f:23:6b:f5:07:b3:79:5b:41:
27:9c:a1:ce:ab:e3:0f:f7:8a:c2:f6:40:bd:06:0b:3b:43:f2:
e3:81:f5:60:9b:e5:7b:aa:12:00:45:98:95:f6:f0:c6:0b:5f:
1d:08:44:ec
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDExMTgwNjQyMzZaFw0zNDExMTUwNjQyMzZaMBgxFjAU
BgNVBAMTDTY3M2FlMWRmLWM5NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCuT9eylo7IPhxzOydxai6HqXY8bYz5xYoyi5NDZsK7jiWmmLu5kWQbTSw
MF/ph36u6WlTQSMD1Ox96hl2NNKY1n78CUJAGGHSvLyfwbno16fWsNkWwGi/ER60
WHDeeQITNVUVykWadYz78iyqoz7cEW+5g3jwXUUOI3b+HfXPPF2ZcrBb/g29Ycpg
ySmRaDQrzdMqdc81jVXWs+lCylHHAJsrH07BJvz851H0bDwPW/xOnFHELYqVhNOu
21FBqsjCRvVJBngbG9WWZDEYcymy++pmuyEJznJg4hkpYCKBCc6LL8OsRQwaMO8e
zawLjx/aNxwEv2WE9Vam+Vl9JrOdAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUBdZS
Viw32eQ1qcS0RRDBAiKd3/MwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzRFMEFDN0E4QTU3ODExRUY4RDlGQkU5NDc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPAjtAwDQYJKoZIhvcNAQELBQAD
ggEBADAaU5VpfBpRmWahjRFv+p6kSejuFzu0H0jYjm75JHyL8Wy1jxlXVHj6aYVz
BqMwpYMgzubtAYqvx5r7z9G3oR8B6dmnFPWPNtlB3gnatCFEQ868UDQHeWIywUfK
XHpGtCliEwM34wP0GNmeGORBtrObFpnt2FvDALnGTk95l0ZBSpnhPMme1xPP36nl
kBl7Rf7HKBEFZHFYXmOVMH6CW6I1NZ5MU7ZchwaBElQDZYn/1U36PdfLVxHyO7HG
p8iKEAgd2hR2+OwWaDDSxQFxfp8ja/UHs3lbQSecoc6r4w/3isL2QL0GCztD8uOB
9WCb5XuqEgBFmJX28MYLXx0IROw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org