Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BC35A160A57511EF999C7E85762E951A.roa
File: BC35A160A57511EF999C7E85762E951A.roa (raw, json)
Hash identifier: TAvhiYYsat3q3eYvlXFlMwX2XxxhK2fLG8Qz1v9f7vM=
Subject key identifier: 6B:1E:67:D3:CA:5A:D5:B2:B9:BB:51:60:E0:61:2E:63:B1:90:B8:69
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AF0
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BC35A160A57511EF999C7E85762E951A.roa
Signing time: Mon 18 Nov 2024 06:24:16 +0000
ROA not before: Mon 18 Nov 2024 06:24:12 +0000
ROA not after: Tue 14 Nov 2034 06:24:12 +0000
asID: 30431
IP address blocks: 192.142.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:24:12 2024 GMT
Not After : Nov 14 06:24:12 2034 GMT
Subject: CN=673add90-defb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:10:bb:26:cb:c2:c8:33:15:d3:51:cb:a7:cc:
ff:98:e5:f2:5c:0b:9e:21:fe:8d:ef:cb:bb:36:25:
6b:38:6b:31:9b:6b:d6:6b:93:5a:a5:59:10:7b:42:
12:f8:76:f6:84:2b:37:4a:af:2b:fa:b8:a0:93:12:
3a:70:5f:04:4a:df:aa:4a:4f:9e:77:27:e5:cf:0a:
6e:29:d9:5e:ce:18:e5:03:d1:29:1c:3c:50:0c:83:
42:7e:bc:26:ff:3b:73:f6:5c:75:81:cd:49:2e:1f:
a1:f6:f6:ef:2f:5f:4c:9f:b9:ff:77:7c:ea:6d:a1:
8e:43:ab:e3:bc:68:1e:5f:5a:68:72:bb:c7:f8:e8:
00:17:7a:f4:71:9d:8b:87:50:f3:93:df:e6:7d:fd:
31:15:db:a8:e6:f1:31:32:d6:1f:4a:99:4f:10:af:
7d:62:94:11:68:35:2b:4f:26:1f:5d:b7:bb:f6:40:
8c:43:b2:4e:47:a6:50:bb:79:37:11:38:8a:eb:1a:
25:ac:90:6f:6a:38:f1:c3:fe:67:f1:82:34:7f:0c:
00:34:60:b6:3a:70:e1:f8:e2:14:b6:f3:91:df:9b:
13:ec:b6:52:00:cb:3a:c9:96:f3:43:3e:96:c9:5c:
c8:b1:b0:f9:b9:14:91:fd:1a:87:51:9f:1d:9a:a5:
2f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1E:67:D3:CA:5A:D5:B2:B9:BB:51:60:E0:61:2E:63:B1:90:B8:69
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/BC35A160A57511EF999C7E85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:83:54:78:b4:18:e1:6e:10:15:62:ab:37:5e:ff:81:f4:75:
5a:ea:de:70:4a:13:5a:bf:97:49:fb:6c:6c:af:bc:07:8c:66:
70:96:4b:7d:b4:25:db:df:86:f0:b8:ed:9a:c9:24:c1:b6:18:
69:0d:b2:1a:e5:14:91:43:cd:71:cb:f3:03:2c:3b:5d:04:33:
f5:c2:33:54:0e:86:3c:72:4b:e5:b5:9f:05:d9:69:2d:fa:09:
74:39:27:4d:0c:3e:75:4e:c8:29:71:09:f6:1d:2f:62:09:6f:
3a:06:6f:5b:34:8e:32:27:55:6d:2a:76:90:6a:92:55:79:61:
3e:8c:52:38:0d:3a:4e:7b:92:9d:d4:52:b3:d9:dc:f0:5e:31:
db:89:47:2a:99:22:90:e7:fa:29:85:88:5c:21:3a:24:79:83:
7e:08:7a:8a:59:a2:d7:e7:68:1b:31:2d:3c:a6:b7:17:9c:5e:
0f:dd:18:71:40:14:15:50:87:5b:01:d4:81:5f:49:51:63:ea:
d2:df:80:56:b7:37:3c:b8:d5:11:d6:29:1a:cf:a7:6d:31:6d:
72:3d:5b:25:a9:85:5c:f3:c7:03:81:a7:6e:2d:22:09:7b:af:
1e:df:ad:40:f4:d2:fb:fb:27:1f:75:fe:43:7d:c9:5d:10:f4:
1d:8d:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:42 2024 by rpki-client on console-ams.rpki-client.org