Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/98625598538811EE8AD8D8174AD9E6FC.roa
File: 98625598538811EE8AD8D8174AD9E6FC.roa (raw, json)
Hash identifier: xaZLMHKtx59YjaaXpciYe2sbrz+C4a22QtGua326uys=
Subject key identifier: 69:37:AE:49:41:74:48:3A:2C:42:7D:59:0D:A2:86:0B:D0:6B:21:59
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 07BA
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/98625598538811EE8AD8D8174AD9E6FC.roa
Signing time: Fri 15 Sep 2023 05:27:43 +0000
ROA not before: Fri 15 Sep 2023 05:27:39 +0000
ROA not after: Thu 15 Sep 2033 05:27:39 +0000
asID: 48678
IP address blocks: 192.142.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 May 2024 00:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 15 05:27:39 2023 GMT
Not After : Sep 15 05:27:39 2033 GMT
Subject: CN=6503eb4f-30dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:35:53:cc:de:50:12:5c:9f:ee:93:3c:77:
62:71:6d:b8:4d:b8:e7:ad:cf:ae:93:2c:24:7e:24:
0c:90:b1:18:8c:53:67:9b:97:40:b8:29:d9:17:df:
e0:04:40:d4:97:ea:e6:88:8f:f2:d0:3e:4d:7c:90:
96:c3:3d:82:24:60:74:0e:dd:06:f3:c4:59:ce:05:
65:e6:91:08:61:29:b1:cd:f8:cc:7a:b1:99:15:4a:
fa:c0:4b:1c:2f:5a:d0:0a:7f:1e:f9:7b:84:ba:79:
0e:6e:70:c7:b2:45:68:89:f3:13:1b:e0:d9:42:85:
23:ec:bd:7a:0a:5c:b6:0b:00:d8:92:d6:ae:33:f2:
d4:27:da:35:f4:f5:b4:0b:5b:b4:9d:87:9c:e6:f2:
de:94:2a:54:f3:b4:87:af:d5:1d:85:46:f2:c3:b0:
2f:51:26:43:9b:34:fe:47:b6:c5:b8:bd:9e:41:67:
de:f6:99:14:eb:a9:09:b8:24:03:f5:76:e6:00:da:
e3:41:b1:7c:87:45:14:19:7a:09:04:97:23:b6:c7:
82:2a:01:13:2c:18:08:fa:1f:91:c5:2e:3b:54:c3:
f7:a2:8e:d6:08:d2:6d:4b:dd:8f:3f:ae:d4:7e:9b:
af:31:73:16:86:97:ce:6e:76:62:fb:4b:44:4c:27:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:AE:49:41:74:48:3A:2C:42:7D:59:0D:A2:86:0B:D0:6B:21:59
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/98625598538811EE8AD8D8174AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.7.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2b:40:67:6d:0d:54:34:46:90:9c:7e:77:8c:5e:6a:d7:c6:
b3:c0:a6:78:d1:a0:dd:67:39:92:c7:1f:8e:44:fd:64:66:f6:
b4:89:98:a5:a3:68:69:5d:d6:67:a9:01:68:0c:69:6d:6f:c6:
e7:03:d1:93:e4:d7:03:84:73:0e:b2:4b:f8:78:35:1f:25:a5:
d2:bd:a0:cc:14:85:58:7e:36:87:e6:74:95:76:35:d9:6f:57:
71:e1:dc:6b:7a:73:40:0a:8a:ac:97:20:e3:14:53:e8:90:35:
5d:42:7b:ba:57:2c:0f:71:fc:89:ac:2f:4f:08:dc:f1:39:5c:
48:aa:b4:60:8a:8a:cb:df:ce:05:a6:c3:31:fb:80:40:08:65:
ba:41:0c:dd:6e:8d:8d:db:49:e9:bd:ff:50:5b:5d:a6:56:55:
cb:96:8d:f1:1b:2e:b0:ba:c4:c5:dd:98:f4:43:2f:65:9f:b8:
a3:73:96:cf:a6:f8:ca:1d:3b:80:44:8e:e1:e7:79:3f:e6:d2:
21:d2:fb:97:f2:2d:1e:de:6f:25:e7:d8:e8:c6:54:a5:83:5e:
bd:6e:3f:4b:cd:86:2a:e4:a8:d8:f9:b9:80:6c:2b:bb:83:45:
f1:87:47:df:df:76:59:9e:19:50:d1:bf:de:f5:86:52:64:8f:
9e:65:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 01:34:20 2024 by rpki-client on console-fra.rpki-client.org