Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9939DF68A57611EF8CCD098C762E951A.roa
File: 9939DF68A57611EF8CCD098C762E951A.roa (raw, json)
Hash identifier: sBpLEbNUaEHYczzlSg6OQAT0nAewiOM8o11a6tgShPg=
Subject key identifier: 35:DF:4B:40:BD:33:C4:1D:27:4D:DF:96:27:39:0C:7B:DE:2D:BC:C0
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AFA
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9939DF68A57611EF8CCD098C762E951A.roa
Signing time: Mon 18 Nov 2024 06:30:27 +0000
ROA not before: Mon 18 Nov 2024 06:30:23 +0000
ROA not after: Wed 15 Nov 2034 06:30:23 +0000
asID: 30431
IP address blocks: 192.142.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810 (0xafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:30:23 2024 GMT
Not After : Nov 15 06:30:23 2034 GMT
Subject: CN=673adf03-d35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:dd:2c:3e:ed:5b:5b:cc:b5:92:4b:48:d4:
7a:ea:cf:91:1b:2e:e8:dc:2c:11:60:09:d4:1a:a0:
8b:26:23:f3:d4:23:1e:f0:10:9c:1b:b7:42:bc:24:
9d:0c:ca:b1:19:e3:1a:f7:45:7d:76:ba:02:f3:42:
95:c6:8a:7d:37:d8:de:3b:74:78:64:99:3b:3f:ca:
84:6f:a8:d0:76:37:35:ef:6f:e8:4f:93:ed:92:ec:
7a:63:70:0f:38:d2:ac:57:d8:d5:93:ec:b1:18:46:
46:a5:2b:e5:f0:9f:c8:26:e0:94:84:e6:e3:54:eb:
bf:5b:a7:65:10:a3:00:1e:6a:71:7d:db:ab:d0:34:
2f:4f:13:37:8f:4b:18:dd:69:50:66:23:b9:1f:78:
f0:03:5d:1b:f1:1c:70:42:0a:06:d5:e7:b3:19:33:
1c:bd:a9:49:36:ec:3a:86:5a:39:23:de:b1:ac:ec:
16:42:b9:fb:3b:56:e6:f4:35:08:05:58:88:fb:cb:
49:3a:4b:8d:48:4f:63:d5:70:e9:92:47:2e:67:2c:
39:a4:bb:56:2a:6f:88:3c:7d:ae:dd:a1:6d:03:d7:
24:84:e7:fb:f4:4d:3d:f9:08:2c:19:b9:cb:ed:14:
93:ee:9e:d7:db:57:7f:d6:e8:a2:af:33:72:d0:d3:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DF:4B:40:BD:33:C4:1D:27:4D:DF:96:27:39:0C:7B:DE:2D:BC:C0
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9939DF68A57611EF8CCD098C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.80.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:a4:62:a8:f9:09:a5:7b:d4:c2:82:6c:d6:17:ab:8e:70:e9:
fc:68:81:17:1b:9f:33:e9:2d:3a:cb:d1:44:cb:5a:14:8a:f2:
8e:ca:b3:ad:b9:75:30:ee:72:ed:3a:80:02:ff:9a:d9:d8:7f:
08:96:da:03:5d:bc:0f:e3:86:3d:82:0d:ef:75:0f:8f:49:f7:
77:e2:c1:0d:6b:4e:16:7f:e3:df:c9:35:1f:12:42:d0:81:50:
4d:3d:e9:e6:01:bc:59:89:1b:31:2e:0b:78:4e:ba:83:25:1f:
e2:37:c6:f7:c2:bc:b8:d8:3f:e7:e9:c7:71:d7:ec:98:de:5f:
42:4e:6b:f0:55:ed:f6:01:f0:cf:3a:62:5a:f0:a7:b3:b3:22:
bc:29:df:5d:0a:7b:96:d5:65:5e:9a:b9:99:fc:3a:7e:7f:68:
b2:12:88:66:c0:e5:eb:b3:e9:ec:2e:cb:b6:80:60:b2:41:ee:
04:39:a8:e1:e2:96:e9:bb:d2:c5:64:a1:c0:fc:e2:d7:38:95:
24:fa:76:d9:86:c3:31:42:0a:d4:5c:b0:93:ab:5a:c7:5f:6e:
35:bf:58:98:e8:83:ce:35:b2:52:b6:7b:64:7f:bb:71:52:e8:
d6:f8:5a:1a:5f:52:f3:8a:7b:4b:3b:a3:ce:d5:c8:ef:2c:6b:
3c:45:95:23
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCvowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDExMTgwNjMwMjNaFw0zNDExMTUwNjMwMjNaMBgxFjAU
BgNVBAMTDTY3M2FkZjAzLWQzNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnBN0sPu1bW8y1kktI1Hrqz5EbLujcLBFgCdQaoIsmI/PUIx7wEJwbt0K8
JJ0MyrEZ4xr3RX12ugLzQpXGin032N47dHhkmTs/yoRvqNB2NzXvb+hPk+2S7Hpj
cA840qxX2NWT7LEYRkalK+Xwn8gm4JSE5uNU679bp2UQowAeanF926vQNC9PEzeP
SxjdaVBmI7kfePADXRvxHHBCCgbV57MZMxy9qUk27DqGWjkj3rGs7BZCufs7Vub0
NQgFWIj7y0k6S41IT2PVcOmSRy5nLDmku1Yqb4g8fa7doW0D1ySE5/v0TT35CCwZ
ucvtFJPuntfbV3/W6KKvM3LQ00WLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUNd9L
QL0zxB0nTd+WJzkMe94tvMAwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4Lzk5MzlERjY4QTU3NjExRUY4Q0NEMDk4Qzc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATAjlAwDQYJKoZIhvcNAQELBQAD
ggEBAKukYqj5CaV71MKCbNYXq45w6fxogRcbnzPpLTrL0UTLWhSK8o7Ks625dTDu
cu06gAL/mtnYfwiW2gNdvA/jhj2CDe91D49J93fiwQ1rThZ/49/JNR8SQtCBUE09
6eYBvFmJGzEuC3hOuoMlH+I3xvfCvLjYP+fpx3HX7JjeX0JOa/BV7fYB8M86Ylrw
p7OzIrwp310Ke5bVZV6auZn8On5/aLISiGbA5euz6ewuy7aAYLJB7gQ5qOHilum7
0sVkocD84tc4lST6dtmGwzFCCtRcsJOrWsdfbjW/WJjog841slK2e2R/u3FS6Nb4
WhpfUvOKe0s7o87VyO8sazxFlSM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org