Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5F50198CF3E011EDA98FC9374AD9E6FC.roa
File: 5F50198CF3E011EDA98FC9374AD9E6FC.roa (raw, json)
Hash identifier: ymTvQ350h6HkZVPhUTCVvkM7ernGzITN3X/FDd9rKyA=
Subject key identifier: 4E:3F:00:64:41:FF:1C:FA:A8:D5:CD:D1:45:B2:17:8F:03:03:FB:AA
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 06E7
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5F50198CF3E011EDA98FC9374AD9E6FC.roa
Signing time: Tue 16 May 2023 11:54:12 +0000
ROA not before: Tue 16 May 2023 11:54:07 +0000
ROA not after: Tue 17 May 2033 11:54:07 +0000
asID: 212238
IP address blocks: 192.142.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 20:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767 (0x6e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: May 16 11:54:07 2023 GMT
Not After : May 17 11:54:07 2033 GMT
Subject: CN=64636ee3-c01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0e:f0:b9:68:11:b2:7e:af:26:cd:d6:96:8e:
77:b7:dc:6a:2e:07:ca:b1:15:a6:eb:0a:30:7c:ee:
4b:64:0b:c3:f2:f5:7f:f8:7d:09:f4:7f:6c:2e:72:
85:e3:85:48:5d:d9:41:26:da:3f:ff:90:e8:2b:17:
e1:72:50:0f:3f:f3:f5:37:f3:78:7c:0d:e2:43:89:
86:0c:a4:1c:f1:4d:dd:05:3f:05:b2:72:60:52:42:
5c:2a:79:09:bd:1a:fc:77:0b:69:c8:4f:ce:ab:26:
7c:36:2b:0f:9d:ca:5a:32:68:7c:13:9f:69:09:a1:
41:7f:54:19:11:d5:9b:2a:cd:c6:d9:7d:05:6a:a5:
f2:fa:ab:75:45:f8:0e:4d:5d:84:70:1f:aa:ba:9b:
62:40:25:41:0b:a7:a0:94:5f:3b:95:09:a7:87:85:
61:16:57:13:9b:98:ad:bc:e4:7f:8e:c4:05:05:03:
ea:b4:b6:43:8e:ce:96:3f:f6:53:87:fe:dc:7d:34:
a9:8b:c8:3c:14:2d:24:80:44:ae:36:95:02:68:70:
a2:54:f5:03:f7:25:2a:01:f7:33:89:f4:3c:ae:3d:
ed:ca:eb:7a:91:ce:de:8b:e9:ec:65:98:67:5c:d6:
5f:4b:0d:73:21:fc:f1:e5:24:15:92:fe:3d:6d:b6:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:00:64:41:FF:1C:FA:A8:D5:CD:D1:45:B2:17:8F:03:03:FB:AA
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5F50198CF3E011EDA98FC9374AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.76.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:78:7a:5f:81:1f:28:17:25:12:f2:2d:0d:19:20:c8:03:ab:
ca:c5:80:a7:85:e8:73:8f:5a:74:7f:8e:eb:0a:59:fa:59:da:
4c:da:ef:22:45:74:a7:9d:12:7e:38:10:44:7d:8e:bf:8b:60:
3a:c6:e1:50:39:97:ba:9d:de:62:e5:22:18:d6:d5:3b:5f:1a:
54:a3:b3:6c:00:b8:95:83:36:18:9d:65:78:b3:c1:18:7f:68:
fc:85:5c:1e:47:40:9e:f7:4b:0c:07:b4:94:ba:e0:53:f7:dd:
34:5e:0e:d3:d6:61:35:c4:58:f4:98:48:6c:61:67:c6:e0:44:
82:36:07:1d:8b:1b:19:6a:46:6c:4e:5a:34:5f:6d:9b:30:ef:
c7:ac:4d:9d:1f:0a:19:69:e6:fa:ae:f3:4c:1f:83:d4:19:d0:
4c:1d:e7:f8:ca:48:4b:c2:b3:5d:4d:e5:67:fa:9e:bc:b1:70:
65:b8:60:48:d0:f3:09:3d:64:5f:98:c1:b1:91:98:11:70:91:
60:3b:87:ad:9c:8d:88:4e:33:cf:ee:34:b3:26:ef:38:8b:3b:
f4:9b:3f:a4:8d:78:b5:cb:8e:43:d0:da:a6:a2:88:9a:17:f2:
f2:d7:60:96:58:a2:59:65:fa:cb:54:35:41:14:6a:1b:22:27:
88:5e:98:56
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBucwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzA1MTYxMTU0MDdaFw0zMzA1MTcxMTU0MDdaMBgxFjAU
BgNVBAMTDTY0NjM2ZWUzLWMwMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD1DvC5aBGyfq8mzdaWjne33GouB8qxFabrCjB87ktkC8Py9X/4fQn0f2wu
coXjhUhd2UEm2j//kOgrF+FyUA8/8/U383h8DeJDiYYMpBzxTd0FPwWycmBSQlwq
eQm9Gvx3C2nIT86rJnw2Kw+dyloyaHwTn2kJoUF/VBkR1ZsqzcbZfQVqpfL6q3VF
+A5NXYRwH6q6m2JAJUELp6CUXzuVCaeHhWEWVxObmK285H+OxAUFA+q0tkOOzpY/
9lOH/tx9NKmLyDwULSSARK42lQJocKJU9QP3JSoB9zOJ9DyuPe3K63qRzt6L6exl
mGdc1l9LDXMh/PHlJBWS/j1ttjdLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUTj8A
ZEH/HPqo1c3RRbIXjwMD+6owHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzVGNTAxOThDRjNFMDExRURBOThGQzkzNzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHAjkwwDQYJKoZIhvcNAQELBQAD
ggEBAA14el+BHygXJRLyLQ0ZIMgDq8rFgKeF6HOPWnR/jusKWfpZ2kza7yJFdKed
En44EER9jr+LYDrG4VA5l7qd3mLlIhjW1TtfGlSjs2wAuJWDNhidZXizwRh/aPyF
XB5HQJ73SwwHtJS64FP33TReDtPWYTXEWPSYSGxhZ8bgRII2Bx2LGxlqRmxOWjRf
bZsw78esTZ0fChlp5vqu80wfg9QZ0Ewd5/jKSEvCs11N5Wf6nryxcGW4YEjQ8wk9
ZF+YwbGRmBFwkWA7h62cjYhOM8/uNLMm7ziLO/SbP6SNeLXLjkPQ2qaiiJoX8vLX
YJZYolll+stUNUEUahsiJ4hemFY=
-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:07 2024 by rpki-client on console-ams.rpki-client.org