Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6D2926FC9BDA11ECB0B3D9965A40D577.roa
File: 6D2926FC9BDA11ECB0B3D9965A40D577.roa (raw, json)
Hash identifier: hNo8Bqe28A9T3y2e7VD2u3D1GzbCcAyO1sB01RyGyeA=
Subject key identifier: 9E:A1:63:2A:F5:84:76:CC:85:07:A5:01:FC:41:B4:9A:55:51:DD:33
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 045B
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6D2926FC9BDA11ECB0B3D9965A40D577.roa
Signing time: Fri 04 Mar 2022 16:44:58 +0000
ROA not before: Fri 04 Mar 2022 16:44:54 +0000
ROA not after: Wed 08 Mar 2028 16:44:54 +0000
asID: 3223
IP address blocks: 192.142.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Mar 4 16:44:54 2022 GMT
Not After : Mar 8 16:44:54 2028 GMT
Subject: CN=6222420a-902d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:2b:1a:b0:c4:3a:19:ef:eb:21:ae:d4:51:
c8:90:80:5b:18:02:1f:96:ab:6d:74:8e:9e:07:0d:
8e:30:8f:03:1a:a2:7b:33:43:02:2a:15:fb:d0:7e:
d0:6a:d9:89:b2:82:7a:3a:08:e6:40:90:f0:9a:f9:
05:ec:91:a6:dc:ec:4c:14:77:d9:30:a6:2b:22:8b:
c8:13:9d:2f:6e:ef:1f:4d:75:ae:9a:fe:4a:5f:62:
f4:0a:a4:6e:b6:55:d1:e7:fb:e1:7d:d8:98:44:c9:
83:78:5c:11:b0:dc:02:27:fd:e0:93:52:85:c1:70:
da:c8:df:f7:d3:de:db:3a:44:0f:ee:1a:90:39:10:
37:e6:dd:5a:69:69:54:99:28:8d:74:e1:b1:7c:08:
ee:d9:41:f5:04:f3:41:60:b9:68:d9:8e:d8:c4:27:
ae:d0:de:3b:47:f8:7a:17:cf:8f:81:ae:d1:bf:8d:
85:97:78:8e:a9:38:a7:45:18:2e:c2:6f:04:f1:3f:
c3:b4:1b:be:50:eb:bc:c3:3c:48:0c:49:69:64:e2:
09:36:e6:99:e4:d1:fe:65:39:6a:c4:63:57:db:72:
f0:5a:e5:1e:a1:61:24:b1:34:78:34:1e:9a:d7:16:
37:f6:c0:d4:f2:bf:18:9a:2a:74:38:17:36:55:5d:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:63:2A:F5:84:76:CC:85:07:A5:01:FC:41:B4:9A:55:51:DD:33
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6D2926FC9BDA11ECB0B3D9965A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.244.0/22
Signature Algorithm: sha256WithRSAEncryption
50:42:f6:64:10:de:bc:29:35:3b:e2:cb:0b:47:0c:ba:44:4e:
9c:f1:13:78:7f:5d:b0:e1:a4:ea:30:4d:db:cc:1d:f8:2b:f7:
45:a4:35:67:66:0b:fe:cc:b8:2f:9f:2d:e2:53:b4:6a:de:91:
8e:4b:2d:24:04:5c:d5:7e:a7:65:ce:f3:fe:ae:23:60:d0:c1:
c1:04:00:8f:a6:cf:f2:50:de:3f:21:b4:13:ac:49:4a:7c:45:
6d:60:00:7b:cc:3d:3f:d1:e0:a8:84:fb:cf:e6:af:a4:b5:d2:
44:de:f6:fb:d0:77:bf:31:1f:05:1d:93:00:0e:82:83:5c:6d:
41:44:c7:a5:30:a6:f3:b6:1c:80:cf:df:68:62:42:cd:c1:1b:
26:31:08:d8:2e:e8:59:a3:e2:d2:c5:96:1b:b9:56:3c:67:9b:
a0:c2:d9:14:7d:57:f4:20:9a:3b:32:c6:b0:ca:25:9b:a2:c6:
a8:6c:99:00:eb:14:c5:cc:db:36:7d:b5:d1:6e:bb:4c:aa:78:
25:dc:19:a0:38:f3:11:49:03:5f:af:64:9d:a7:52:82:b4:ed:
28:e5:4c:7b:21:bf:da:5e:f8:d7:5c:1a:77:3c:8d:53:8e:b4:
40:74:fc:b9:fe:65:27:67:24:e1:cd:2c:9c:5c:2a:75:57:9e:
86:6a:40:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:36:58 2024 by rpki-client on console-ams.rpki-client.org