Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5E8C8554A57711EFBF7A5A90762E951A.roa
File: 5E8C8554A57711EFBF7A5A90762E951A.roa (raw, json)
Hash identifier: Y9yV1huy1/u1sV+Au3MDyS9auLnZMaRC5sl4fJsGw7w=
Subject key identifier: BC:F4:16:BB:E7:7C:47:AC:79:F5:05:07:92:92:E2:C7:C8:29:11:C2
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B08
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5E8C8554A57711EFBF7A5A90762E951A.roa
Signing time: Mon 18 Nov 2024 06:35:58 +0000
ROA not before: Mon 18 Nov 2024 06:35:54 +0000
ROA not after: Wed 15 Nov 2034 06:35:54 +0000
asID: 30431
IP address blocks: 192.142.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2824 (0xb08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:35:54 2024 GMT
Not After : Nov 15 06:35:54 2034 GMT
Subject: CN=673ae04e-3672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:be:2c:64:f3:73:8e:04:04:1e:a2:1e:e3:
49:33:28:99:23:56:9a:e2:fd:c7:db:0a:b5:10:8a:
94:43:08:6f:8b:fb:01:70:d0:20:f8:ec:38:16:4e:
11:24:b8:e8:f5:54:44:cd:83:42:f2:5e:fa:f1:54:
f7:0f:97:f4:34:cb:c0:a4:c4:3c:9f:a5:5a:46:a9:
8b:26:af:bf:18:ae:fa:e0:15:a4:a1:b0:57:1b:74:
54:0e:b7:8a:5f:34:b2:fa:0f:26:fe:51:a2:e9:6d:
98:76:1d:c2:99:c8:5b:2c:d3:8e:0f:21:25:59:3d:
e1:0d:90:b7:49:d9:dd:e3:b5:8e:0c:83:f2:e4:e0:
59:76:b6:dc:0e:3c:5e:28:17:b3:11:1f:b3:10:43:
4e:dc:79:e1:4f:44:06:f5:d0:07:94:c3:77:ca:11:
df:ed:5c:b5:f8:d7:23:ce:99:c1:ad:8f:d4:02:2f:
96:59:23:27:f6:56:cd:29:ed:1c:a0:ed:84:e6:82:
dd:ef:08:61:8f:5e:e3:ba:f4:02:bd:d2:d1:61:0f:
94:e2:45:0c:50:aa:46:f4:d7:43:a0:aa:6a:20:82:
2e:f2:f6:f9:a1:8e:6b:67:6e:0a:f7:7c:79:92:ba:
e9:f7:be:b4:d3:d7:a4:ad:9e:7e:36:ef:0e:fe:04:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F4:16:BB:E7:7C:47:AC:79:F5:05:07:92:92:E2:C7:C8:29:11:C2
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5E8C8554A57711EFBF7A5A90762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.171.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2c:ab:6e:ea:ce:5a:72:fd:bf:a2:90:04:c1:ad:38:18:82:
50:3d:b2:75:bd:53:bf:fa:ca:af:d0:1d:be:49:f4:29:6d:58:
f9:fb:e4:e7:13:5b:c5:b7:a5:1e:cb:43:a7:0c:af:e2:30:d5:
f3:51:99:ce:fc:5c:4f:03:55:f6:fb:2f:6a:29:9a:ac:55:74:
37:1f:0a:ce:6a:4b:ac:20:d3:4f:06:9c:a4:a2:66:84:ac:9b:
27:4a:b2:a8:c6:be:25:a6:1f:6d:cb:b3:ff:63:f5:10:70:12:
7f:a7:d3:c7:5e:3b:6d:c3:f4:47:55:c9:e0:0a:73:e6:c7:3d:
e2:ee:79:11:51:33:e4:33:7f:96:3b:67:41:93:a8:16:36:c2:
96:90:3b:08:9e:56:c8:16:dc:66:52:d2:57:a6:44:f6:90:55:
e1:69:f9:21:f0:51:3a:09:40:bc:8a:d2:c0:2f:4e:81:d3:48:
15:2a:49:a1:92:51:4c:d2:d2:ca:73:6d:3f:72:91:dc:5a:b4:
50:c0:fb:6d:63:50:04:ae:6c:65:33:9a:45:46:ba:ff:be:29:
e6:08:b3:17:c0:80:bb:a3:b4:3a:32:9a:48:22:a3:13:2c:c7:
b7:a7:61:c4:8a:4c:5c:32:dc:c3:ee:a7:e8:ce:5c:01:bd:b1:
1a:5c:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org