Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/83C0370E683211EE99A103684AD9E6FC.roa
File: 83C0370E683211EE99A103684AD9E6FC.roa (raw, json)
Hash identifier: 0fxTVtICAbsJ94UPaq7VyA5iy+mBoJ83wFpFkxEKe8w=
Subject key identifier: 4B:3D:C4:A7:81:89:B5:87:90:D6:7B:80:BD:57:20:92:96:34:33:CF
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07F1
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/83C0370E683211EE99A103684AD9E6FC.roa
Signing time: Wed 11 Oct 2023 12:34:26 +0000
ROA not before: Wed 11 Oct 2023 12:34:23 +0000
ROA not after: Tue 11 Oct 2033 12:34:23 +0000
asID: 209737
IP address blocks: 192.142.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Oct 11 12:34:23 2023 GMT
Not After : Oct 11 12:34:23 2033 GMT
Subject: CN=65269652-c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:fd:5c:bd:3a:13:76:c0:79:97:a1:df:8e:
79:1f:93:0f:45:0d:44:b1:49:c2:80:9e:4d:5b:08:
55:60:da:2d:fa:64:1b:ec:11:99:af:10:f1:6f:cb:
f6:62:59:02:b6:46:7e:a5:f2:64:90:fb:b3:9c:d8:
39:19:ce:f0:24:c2:59:7d:01:86:89:6f:9e:41:c4:
f6:a0:bd:c4:a1:1a:e4:12:d2:5d:81:01:b8:2f:8e:
1a:d7:6f:62:df:ef:24:36:e8:b8:98:4f:83:1d:c6:
6d:54:aa:ed:4e:01:90:15:4f:d6:ab:73:48:f2:d2:
19:82:32:96:35:e9:81:35:cf:44:3b:03:33:c5:34:
9d:97:f0:87:4d:1a:c9:31:62:ec:e1:a8:a2:48:81:
3a:27:6d:b3:0f:be:93:75:f0:61:36:74:66:71:9f:
9b:fa:5d:97:44:52:64:b2:d7:e2:d9:3c:b6:a7:61:
3d:1b:4a:ea:8b:40:6e:b6:ef:b0:cd:22:75:27:33:
07:fe:58:31:b0:aa:fb:60:81:64:f8:a3:b0:29:6a:
14:c5:27:59:64:45:c7:5c:b8:af:e6:1c:c7:95:14:
2a:cb:93:36:fa:32:67:fb:bb:4c:4f:a7:85:cb:19:
0d:cf:ce:1f:7a:ba:1e:69:b8:7c:14:17:68:05:41:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3D:C4:A7:81:89:B5:87:90:D6:7B:80:BD:57:20:92:96:34:33:CF
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/83C0370E683211EE99A103684AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.105.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a3:80:02:00:f9:c7:94:45:4e:37:25:68:15:3e:10:b5:d6:
1a:2a:92:71:c6:89:7c:95:4d:ac:08:05:82:8d:42:25:3b:39:
d6:60:a1:4f:ca:98:fb:c8:c9:a8:e9:ef:81:d8:8a:3b:e3:1c:
4c:17:32:df:99:de:ee:53:e6:77:2f:68:56:14:eb:7e:10:f5:
78:75:61:63:aa:d5:b7:2c:aa:c8:1c:85:77:c4:90:3f:d1:62:
46:7a:33:e5:97:1d:d5:0c:e2:e1:6f:51:96:ff:16:af:ad:1b:
5e:ec:a5:01:b0:01:3b:e2:2e:ee:a0:ae:dd:a0:46:83:0e:20:
6c:84:bf:85:a7:27:b3:5d:31:2b:e0:d7:14:e7:48:33:7b:94:
2f:52:01:7b:26:fe:61:f8:92:d1:47:37:c9:99:18:6f:74:b0:
df:71:a2:19:20:b8:81:c9:df:af:a1:d9:ce:1e:53:26:40:e6:
88:1b:32:1f:ea:0e:d7:6b:b3:08:fd:f1:91:99:fb:99:b1:d9:
1c:06:18:6f:f9:75:72:6b:30:a0:8a:fd:84:d8:28:3b:79:4b:
f3:36:3c:58:c4:7d:b2:cf:cd:ca:fd:d5:e1:78:1c:f6:d3:ca:
1c:2c:43:79:77:ba:1b:51:d4:34:43:31:1e:28:70:a6:1c:a3:
aa:ed:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:32:43 2024 by rpki-client on console-fra.rpki-client.org