Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/91611136B9F311EE936AC9A0775412E6.roa
File: 91611136B9F311EE936AC9A0775412E6.roa (raw, json)
Hash identifier: RWY/2wnkLoNjhC1xzTdhu5BIWSY7SHKWpHMDRlgzjlg=
Subject key identifier: 90:34:4A:88:9B:E7:09:EC:AB:A9:EF:BC:47:8C:B3:4E:E4:A5:79:56
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0896
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/91611136B9F311EE936AC9A0775412E6.roa
Signing time: Tue 23 Jan 2024 13:30:26 +0000
ROA not before: Tue 23 Jan 2024 13:30:23 +0000
ROA not after: Wed 18 Jan 2034 13:30:23 +0000
asID: 174
IP address blocks: 192.142.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:16:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2198 (0x896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Jan 23 13:30:23 2024 GMT
Not After : Jan 18 13:30:23 2034 GMT
Subject: CN=65afbf72-9403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:39:34:4c:28:9b:60:c6:47:70:57:fb:cf:
a8:2d:f0:c4:cd:26:1e:03:64:1d:45:e7:73:1c:8b:
40:fa:41:27:4e:3a:ff:24:c8:0a:2a:1a:bf:a4:55:
f2:3d:67:e4:8e:7e:0e:db:24:64:60:d0:75:32:5a:
b4:75:cb:d3:c4:6d:7b:af:3b:53:fb:b8:4b:5f:cf:
e6:fb:60:68:0e:ab:9d:0e:aa:4c:0a:da:93:98:54:
67:43:93:6b:89:8e:ec:4e:0c:a3:3e:59:f6:4d:d0:
81:f9:f9:13:a1:98:b7:00:c6:44:22:f7:05:5b:0d:
2e:f0:a2:77:63:1f:db:fd:d0:32:7a:7c:ea:b9:c8:
8a:8a:30:73:f5:44:36:e6:e8:1a:55:37:3a:04:2b:
6e:a6:c9:d9:70:03:be:08:d9:bb:a2:5a:82:68:22:
f5:93:f4:5e:69:da:62:bb:1e:35:4e:45:19:63:47:
50:55:a3:70:4c:fd:72:da:53:b0:15:a5:d0:9f:3f:
87:5a:eb:d1:20:10:b3:52:2d:61:fa:62:67:e2:d6:
8d:02:83:0e:54:20:1f:c2:d4:f9:ec:1d:70:76:f9:
e3:c0:24:4b:ca:12:3f:29:ea:a0:98:52:35:86:8d:
26:5f:b7:20:c1:dc:f7:ed:57:a6:be:c8:dc:41:63:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:34:4A:88:9B:E7:09:EC:AB:A9:EF:BC:47:8C:B3:4E:E4:A5:79:56
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/91611136B9F311EE936AC9A0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:b4:c5:c4:48:b7:cd:3d:03:34:4f:57:9d:9d:1e:78:32:4b:
7a:a6:80:81:04:ea:10:ee:e9:cb:3a:3d:eb:f8:80:98:0e:91:
1d:9b:4e:6b:e4:0a:f7:d2:a6:15:2c:02:3c:ff:65:ed:d5:07:
c6:11:2b:3a:4c:cc:aa:f6:1f:a4:2b:ef:31:c0:b5:9f:bb:11:
83:9c:04:65:6d:23:40:82:de:5d:ae:3f:5b:cb:cd:ad:59:94:
b5:25:9e:6a:3a:d6:77:47:e7:9a:ca:0e:b0:35:d3:4b:d4:fb:
a6:a8:11:de:b3:08:9c:ab:0f:6e:d8:df:be:d8:80:2b:f3:51:
9b:d8:5f:c1:68:73:d9:85:97:65:8d:17:0d:31:51:a3:96:37:
bf:ff:a1:9f:c4:ea:2d:80:9e:4c:6e:9f:59:38:0e:53:63:ab:
89:17:7f:41:fa:35:97:a1:3c:c8:a7:cd:85:5b:f9:33:42:b0:
7d:c5:bc:d1:eb:65:05:f8:0b:cd:51:69:68:49:2b:8c:ff:3c:
13:95:61:f9:1d:ae:a3:58:8a:d0:28:9d:73:e7:db:bc:aa:4f:
ea:1e:73:67:06:fc:de:a5:30:09:14:06:81:cb:e2:81:9d:6f:
10:35:6d:af:48:1a:e1:db:a2:67:b7:f7:72:ae:c9:a9:75:5d:
c6:7e:39:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:33 2024 by rpki-client on console-ams.rpki-client.org