Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9DE339ACA57511EF993B6F85762E951A.roa
File: 9DE339ACA57511EF993B6F85762E951A.roa (raw, json)
Hash identifier: HpCiYnHJ2toG2WANHjW2JdWBfxPFoDzDgtV/aqAWTlA=
Subject key identifier: F6:90:D6:6F:E7:7E:A2:E3:74:FD:AF:8E:56:AC:82:FF:72:9E:6E:52
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AEE
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9DE339ACA57511EF993B6F85762E951A.roa
Signing time: Mon 18 Nov 2024 06:23:25 +0000
ROA not before: Mon 18 Nov 2024 06:23:21 +0000
ROA not after: Tue 07 Nov 2034 06:23:21 +0000
asID: 30431
IP address blocks: 192.142.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798 (0xaee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:23:21 2024 GMT
Not After : Nov 7 06:23:21 2034 GMT
Subject: CN=673add5d-7ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:bf:b7:ed:3b:02:87:ee:9d:0b:76:f1:6d:
57:03:7a:1d:c9:4f:df:ac:2b:c6:d5:93:e1:da:3f:
85:1c:66:a1:b0:fb:67:99:31:50:56:ca:e5:a2:2e:
78:af:05:d9:5d:c6:37:13:99:bd:b9:69:da:9b:60:
a6:d1:2b:3e:91:70:58:0e:38:11:ca:19:0d:70:12:
f6:47:34:c2:10:c2:38:84:af:e4:74:ef:7c:1c:1d:
b3:d1:79:b9:e6:a2:73:d3:10:d9:3e:a3:a0:16:d1:
85:5f:67:5a:9a:b2:5f:67:2f:c9:0b:55:a7:21:56:
6a:b5:4a:fb:56:cc:63:d5:39:31:98:f7:08:4a:dd:
2d:00:dc:dc:d9:1f:a4:c0:2d:44:d9:4b:50:d5:33:
69:59:ba:1e:d7:0f:99:25:e4:ff:0c:ed:a8:ba:1e:
4d:ee:33:40:c1:da:ec:46:33:61:fa:a6:2a:3f:28:
1e:27:2f:0a:5b:98:ef:f7:31:75:98:40:a3:fa:0c:
0d:fb:22:33:7f:25:4d:7a:61:70:51:0e:4e:bc:74:
82:37:41:57:03:84:ad:70:e9:89:17:9b:e0:2a:55:
03:4c:5f:43:dc:84:72:8a:7a:7f:7b:19:54:f6:ea:
5c:9d:d1:0f:0e:a5:ac:42:79:61:6b:93:4d:a0:98:
f3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:90:D6:6F:E7:7E:A2:E3:74:FD:AF:8E:56:AC:82:FF:72:9E:6E:52
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/9DE339ACA57511EF993B6F85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.16.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:5e:51:07:c0:27:18:d2:bb:a0:e2:bf:5a:b9:5e:0e:61:04:
44:99:80:24:1e:9b:ad:9a:b9:7d:11:6c:14:6a:85:21:28:8f:
a5:94:c1:07:bb:96:ce:27:64:30:75:e0:15:76:e5:ec:cb:cf:
c4:46:3f:4f:c8:0d:dc:a0:8a:22:e3:09:54:23:66:f1:6b:d3:
88:c8:16:44:84:a9:78:f2:3c:59:9b:2e:52:c2:1e:8b:e6:a1:
29:29:7f:17:46:66:90:6d:e0:20:94:64:a6:35:6c:df:cb:7d:
69:99:e9:d1:73:f5:27:ad:29:53:19:18:d9:f2:7e:f9:0e:83:
29:23:58:3e:98:ff:71:6d:06:ed:b3:59:86:c7:94:89:19:94:
5f:ec:af:da:a1:cf:50:ac:7e:0a:94:cc:fd:6c:dd:bc:b8:d7:
eb:05:80:f4:dd:17:38:0b:50:94:e6:2f:ae:8c:82:76:c6:a1:
ed:22:8c:31:a0:04:2c:d6:d6:a8:5b:71:81:87:cf:1c:31:28:
61:2c:b0:67:a6:7d:70:7f:83:9a:aa:02:7e:16:f5:b3:d7:20:
54:3c:60:89:7f:bc:1e:e3:ce:a0:09:f3:49:9b:5f:7b:4d:10:
cf:06:6a:67:c6:24:df:93:f8:3c:37:af:ff:92:a5:3c:a2:d0:
95:a6:c3:ff
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCu4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDExMTgwNjIzMjFaFw0zNDExMDcwNjIzMjFaMBgxFjAU
BgNVBAMTDTY3M2FkZDVkLTdlZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsA7+37TsCh+6dC3bxbVcDeh3JT9+sK8bVk+HaP4UcZqGw+2eZMVBWyuWi
LnivBdldxjcTmb25adqbYKbRKz6RcFgOOBHKGQ1wEvZHNMIQwjiEr+R073wcHbPR
ebnmonPTENk+o6AW0YVfZ1qasl9nL8kLVachVmq1SvtWzGPVOTGY9whK3S0A3NzZ
H6TALUTZS1DVM2lZuh7XD5kl5P8M7ai6Hk3uM0DB2uxGM2H6pio/KB4nLwpbmO/3
MXWYQKP6DA37IjN/JU16YXBRDk68dII3QVcDhK1w6YkXm+AqVQNMX0PchHKKen97
GVT26lyd0Q8OpaxCeWFrk02gmPMvAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9pDW
b+d+ouN0/a+OVqyC/3KeblIwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzlERTMzOUFDQTU3NTExRUY5OTNCNkY4NTc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHAjhAwDQYJKoZIhvcNAQELBQAD
ggEBALxeUQfAJxjSu6Div1q5Xg5hBESZgCQem62auX0RbBRqhSEoj6WUwQe7ls4n
ZDB14BV25ezLz8RGP0/IDdygiiLjCVQjZvFr04jIFkSEqXjyPFmbLlLCHovmoSkp
fxdGZpBt4CCUZKY1bN/LfWmZ6dFz9SetKVMZGNnyfvkOgykjWD6Y/3FtBu2zWYbH
lIkZlF/sr9qhz1CsfgqUzP1s3by41+sFgPTdFzgLUJTmL66MgnbGoe0ijDGgBCzW
1qhbcYGHzxwxKGEssGemfXB/g5qqAn4W9bPXIFQ8YIl/vB7jzqAJ80mbX3tNEM8G
amfGJN+T+Dw3r/+SpTyi0JWmw/8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org