Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B2077168A57611EF880E0E8C762E951A.roa
File: B2077168A57611EF880E0E8C762E951A.roa (raw, json)
Hash identifier: OwoXNpF0WJK4m+lxiJd6NH7P3fEE3KBgzHl4RyMDdNA=
Subject key identifier: 12:B8:63:C6:FE:BC:30:F7:27:5C:7E:89:38:CF:AD:A6:70:22:28:75
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AFC
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B2077168A57611EF880E0E8C762E951A.roa
Signing time: Mon 18 Nov 2024 06:31:08 +0000
ROA not before: Mon 18 Nov 2024 06:31:04 +0000
ROA not after: Tue 14 Nov 2034 06:31:04 +0000
asID: 30431
IP address blocks: 192.142.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2812 (0xafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:31:04 2024 GMT
Not After : Nov 14 06:31:04 2034 GMT
Subject: CN=673adf2c-7ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:58:58:ac:0c:04:99:b8:3c:b7:4b:b6:cf:e0:
71:0d:29:45:2a:3d:f7:f9:c5:37:e8:a2:d4:99:5b:
c8:74:29:be:99:dd:cc:d3:a1:ec:f7:7b:55:81:f4:
d4:bc:11:01:0c:48:e2:db:18:25:03:9b:c1:48:ea:
10:d9:cd:cd:ce:65:0d:4f:ee:42:cf:19:f5:8b:d9:
6d:f7:76:f7:56:87:59:7e:8e:8d:3d:06:c9:43:a5:
e1:79:64:42:f4:3c:60:0f:3f:f0:bd:ea:9c:31:23:
51:e5:a9:3f:79:03:38:dd:e0:80:50:50:00:69:d0:
8e:cd:be:60:d3:30:f0:51:cb:2a:45:e9:73:17:68:
f8:8a:73:f3:9f:9e:65:a3:f0:d6:ed:a9:77:03:23:
8d:d8:88:f4:52:4b:50:85:51:6e:4a:43:f8:f6:2b:
0b:bc:1f:68:3d:0c:c4:63:67:66:71:bf:5a:8f:cb:
84:a6:ac:31:04:6a:0b:2e:97:90:01:67:ce:ae:0b:
fd:96:04:d1:8c:15:76:43:7f:10:59:79:17:b6:33:
27:46:50:e2:d7:59:ac:b0:d3:6e:8a:d0:7e:e7:4f:
1a:87:9f:ff:0b:1b:68:1e:60:c9:a2:bf:12:0d:ad:
27:18:f2:4f:e0:68:1c:2f:d8:2a:b6:f6:dd:b7:38:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:63:C6:FE:BC:30:F7:27:5C:7E:89:38:CF:AD:A6:70:22:28:75
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/B2077168A57611EF880E0E8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:8c:4c:77:eb:25:5a:0e:19:ca:96:18:4f:30:df:51:6a:38:
d5:20:6b:b5:a4:e7:9c:ad:88:c9:69:36:e9:a7:a2:3f:b6:a2:
2c:b6:fd:f4:73:e9:ef:3e:a3:03:65:7b:96:52:d1:85:9e:f2:
ab:34:76:de:b9:c7:2a:44:09:a8:5d:62:da:f8:35:75:05:2c:
3d:19:35:92:6e:5a:f8:0c:4b:e3:c2:4b:48:7b:ce:88:07:62:
ca:07:37:d0:73:c0:e1:c1:35:d7:da:2b:43:0b:13:4f:da:6d:
85:86:aa:09:94:9d:ad:49:d7:4c:7c:cf:0e:9c:75:d8:09:ff:
bc:89:46:c8:0f:3a:30:27:41:40:9e:21:4d:2f:fb:97:88:f8:
a0:6c:4a:2a:af:29:c2:6f:29:ec:a8:41:35:aa:8e:0d:f8:49:
b2:91:4c:ea:d0:d6:86:fd:34:d9:42:e4:0e:5a:11:3a:7a:7f:
fd:63:ea:9e:1e:77:85:9d:21:6b:0e:2a:09:b1:23:3b:9a:0e:
bc:9a:ee:93:15:ca:58:a8:25:55:a0:85:33:bd:c1:78:27:db:
d0:74:57:11:33:80:5b:7a:11:76:a7:f4:f5:0c:79:77:3c:cd:
42:57:b5:7c:58:ea:5c:bd:88:dc:4e:9a:30:ba:21:31:08:3f:
b1:71:eb:f9
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDExMTgwNjMxMDRaFw0zNDExMTQwNjMxMDRaMBgxFjAU
BgNVBAMTDTY3M2FkZjJjLTdlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDWFisDASZuDy3S7bP4HENKUUqPff5xTfootSZW8h0Kb6Z3czToez3e1WB
9NS8EQEMSOLbGCUDm8FI6hDZzc3OZQ1P7kLPGfWL2W33dvdWh1l+jo09BslDpeF5
ZEL0PGAPP/C96pwxI1HlqT95Azjd4IBQUABp0I7NvmDTMPBRyypF6XMXaPiKc/Of
nmWj8NbtqXcDI43YiPRSS1CFUW5KQ/j2Kwu8H2g9DMRjZ2Zxv1qPy4SmrDEEagsu
l5ABZ86uC/2WBNGMFXZDfxBZeRe2MydGUOLXWayw026K0H7nTxqHn/8LG2geYMmi
vxINrScY8k/gaBwv2Cq29t23OBLDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUErhj
xv68MPcnXH6JOM+tpnAiKHUwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0IyMDc3MTY4QTU3NjExRUY4ODBFMEU4Qzc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjmowDQYJKoZIhvcNAQELBQAD
ggEBALiMTHfrJVoOGcqWGE8w31FqONUga7Wk55ytiMlpNumnoj+2oiy2/fRz6e8+
owNle5ZS0YWe8qs0dt65xypECahdYtr4NXUFLD0ZNZJuWvgMS+PCS0h7zogHYsoH
N9BzwOHBNdfaK0MLE0/abYWGqgmUna1J10x8zw6cddgJ/7yJRsgPOjAnQUCeIU0v
+5eI+KBsSiqvKcJvKeyoQTWqjg34SbKRTOrQ1ob9NNlC5A5aETp6f/1j6p4ed4Wd
IWsOKgmxIzuaDrya7pMVylioJVWghTO9wXgn29B0VxEzgFt6EXan9PUMeXc8zUJX
tXxY6ly9iNxOmjC6ITEIP7Fx6/k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org