Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6F754678B9F311EEB04D7EA0775412E6.roa
File: 6F754678B9F311EEB04D7EA0775412E6.roa (raw, json)
Hash identifier: YlJkWRZB/ZyDKmNHxBFblL4e9h+gqU3EuvIP+joravE=
Subject key identifier: 82:1A:01:41:1D:32:BF:DB:DA:CC:51:82:8D:2E:BC:5B:F9:97:A0:8B
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0894
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6F754678B9F311EEB04D7EA0775412E6.roa
Signing time: Tue 23 Jan 2024 13:29:29 +0000
ROA not before: Tue 23 Jan 2024 13:29:26 +0000
ROA not after: Wed 18 Jan 2034 13:29:26 +0000
asID: 30058
IP address blocks: 192.142.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 23 13:29:26 2024 GMT
Not After : Jan 18 13:29:26 2034 GMT
Subject: CN=65afbf39-fa02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:cc:b2:e6:99:f1:89:8b:97:57:cd:39:19:
cf:41:ad:21:45:6f:5f:e0:37:c7:a1:2c:08:1e:ff:
67:8a:7c:1d:1a:de:cf:12:32:35:ca:b2:1c:96:38:
6a:67:b0:d6:a1:4b:d3:c2:a9:e0:39:ef:9a:6e:32:
0d:45:88:6f:1c:51:c5:c5:0a:05:af:09:0f:1d:c7:
4e:5d:45:da:95:38:2f:ba:58:56:a6:da:31:7c:a7:
c7:23:b4:05:69:05:94:60:a0:14:7b:24:da:ad:c2:
07:13:43:60:02:c6:c3:29:69:85:8b:d6:77:56:6c:
d0:a2:b3:1e:e0:1e:32:16:10:df:27:b8:aa:c6:72:
98:88:3d:ee:76:92:25:a8:fa:9a:2e:7a:ea:03:9e:
f9:7b:3f:f4:a5:6f:cb:b0:97:80:b6:9a:af:d5:fd:
33:0e:0e:d4:ff:11:8d:5e:13:75:a5:6a:b7:38:2b:
69:09:4f:9a:f2:a5:9d:16:99:d9:84:02:ac:1c:94:
62:d0:c5:4c:8a:36:e7:d5:0b:75:13:83:20:9f:5c:
cd:28:4c:af:01:45:70:b9:17:c9:01:31:18:40:c4:
a9:fd:f6:1f:e1:3d:ce:1b:9f:4d:23:f4:4f:fc:65:
7b:d7:61:ef:12:f0:13:f1:b7:c6:c9:c7:43:83:22:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1A:01:41:1D:32:BF:DB:DA:CC:51:82:8D:2E:BC:5B:F9:97:A0:8B
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/6F754678B9F311EEB04D7EA0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.21.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cb:fe:24:32:5d:29:9f:9f:4c:0f:44:e4:87:68:23:b4:35:
b1:a0:81:ee:88:3c:cd:93:aa:42:3d:b4:64:65:10:50:4b:63:
e3:3e:c2:ca:e0:4f:69:10:47:ef:58:f9:8e:93:9c:53:ea:bc:
a3:be:ca:b8:b9:09:f4:75:9b:d2:e6:a9:fe:91:6f:49:86:66:
b4:0a:b1:c3:12:45:2e:a0:4d:c5:9b:cc:5f:a2:f4:c0:a4:55:
2b:3d:62:e5:b3:28:83:40:46:12:36:78:22:2d:56:b1:d1:09:
0a:87:2e:a9:d2:46:9b:b5:a7:ed:2b:f9:b8:a2:26:b0:10:39:
75:bb:e7:77:ef:55:d3:6e:89:f2:8c:72:f2:26:81:55:c2:f1:
b2:9b:70:e2:00:a4:09:81:08:51:cb:52:26:85:dd:64:9f:c2:
8f:b9:3c:38:15:f8:20:46:88:71:e7:88:9b:bf:1c:14:11:a9:
07:2c:a3:be:0e:a3:f9:ac:ab:a5:42:c0:74:60:6f:c7:40:30:
90:96:c3:48:93:37:97:5e:86:9e:24:e1:19:c0:1f:f6:c7:28:
d5:54:93:11:94:fc:a5:f2:18:a6:2f:2a:3e:b0:a2:b9:c3:7b:
89:e8:3a:af:48:7b:16:ef:c0:f1:c3:e9:bc:25:69:96:fc:c1:
a0:e5:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:03:41 2024 by rpki-client on console-fra.rpki-client.org