Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7D47A376A57611EFB7A0D989762E951A.roa
File: 7D47A376A57611EFB7A0D989762E951A.roa (raw, json)
Hash identifier: Ah4s09nddNPLmjZyMZnk11F2K+j562wDJAW58/O5oOk=
Subject key identifier: E3:94:BC:C6:60:92:53:37:AE:2B:21:6D:3D:91:6F:57:2D:9B:F7:D2
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AF8
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7D47A376A57611EFB7A0D989762E951A.roa
Signing time: Mon 18 Nov 2024 06:29:40 +0000
ROA not before: Mon 18 Nov 2024 06:29:36 +0000
ROA not after: Tue 14 Nov 2034 06:29:36 +0000
asID: 30431
IP address blocks: 192.142.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2808 (0xaf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:29:36 2024 GMT
Not After : Nov 14 06:29:36 2034 GMT
Subject: CN=673aded4-9665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:9b:9e:ad:26:aa:55:77:0d:31:77:61:3d:
d2:a3:b6:55:b0:e7:aa:dc:e9:aa:bc:e6:08:3e:c3:
08:8a:74:22:9e:3c:c7:07:71:f5:bb:de:b9:c4:1f:
6e:7c:f3:26:c4:de:16:fd:92:39:d3:65:58:64:5d:
6f:ee:82:b6:0c:ff:ac:16:40:70:74:39:9b:dc:65:
29:ee:ab:55:65:d0:bb:f7:fd:ec:3c:9e:c5:2b:e7:
02:81:9b:aa:0a:7a:10:5e:f2:71:51:77:c8:ac:57:
52:66:9e:34:05:79:9a:ba:eb:1a:f7:f9:f9:4f:b1:
6d:fd:95:3e:8a:b2:bd:80:53:66:09:66:b2:64:a7:
b7:7f:19:bb:e5:5a:39:a5:3d:0a:24:58:1c:b1:ab:
ce:08:a8:af:af:6c:a2:86:1b:38:1e:02:53:08:e4:
4b:37:81:4c:02:b2:85:5b:e6:8e:1d:14:d8:de:b3:
e3:19:87:e0:e2:65:be:3b:14:71:91:ab:17:65:b6:
6e:40:67:40:f7:40:5b:e7:b9:21:1b:ab:79:11:65:
fe:28:2f:55:0c:92:e3:03:b4:2a:ce:34:d0:3b:a5:
d0:87:ab:41:cd:d3:27:f3:ad:3c:ff:7f:6f:42:9e:
4e:c4:22:36:98:53:32:66:7c:1f:f2:f6:7a:65:d0:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:94:BC:C6:60:92:53:37:AE:2B:21:6D:3D:91:6F:57:2D:9B:F7:D2
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/7D47A376A57611EFB7A0D989762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.79.0/24
Signature Algorithm: sha256WithRSAEncryption
54:26:5a:4f:0a:90:7f:69:a4:2e:5b:8b:eb:ef:d2:6d:cc:60:
5f:fd:26:41:21:fa:39:3f:48:d9:ee:fd:b2:a6:21:fe:9b:1d:
d4:6c:fa:9e:1f:9c:0c:10:6a:9d:2d:17:8b:ca:1f:de:23:d6:
91:e7:08:c1:69:48:2a:85:d8:48:40:07:35:ef:58:6b:a3:50:
4d:d3:ff:0e:31:8e:d7:87:94:83:e8:23:9b:1b:f3:21:e0:8e:
97:85:2b:4f:f5:ea:a3:aa:65:46:1d:8f:c8:39:a9:79:3e:d7:
99:4c:4a:73:2e:8e:0e:f6:9e:20:66:51:6d:ea:fb:93:54:5d:
8a:71:8b:7d:eb:69:fb:45:ff:c1:83:81:df:03:4d:bc:e0:5b:
61:dd:af:3e:b6:06:f9:c8:65:f6:56:78:5e:65:d9:cb:04:42:
4b:2b:f1:d1:5a:0e:ef:53:e9:1a:7e:ea:7e:47:bb:2b:49:b4:
d4:7e:aa:4e:17:c2:69:30:e8:35:ec:0f:c3:7d:4c:a3:ef:7a:
2b:8f:96:6b:1a:99:ac:d4:a2:e7:35:11:4b:28:90:78:14:28:
7e:b7:db:e6:08:ec:e4:78:3f:be:4f:22:fc:da:a1:e7:55:d9:
f8:ba:a5:7f:6a:75:18:a0:72:13:40:b9:ca:41:4f:1a:5a:9d:
1c:76:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org