Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C352F09C5CE411ECA3B295BE5A40D577.roa
File: C352F09C5CE411ECA3B295BE5A40D577.roa (raw, json)
Hash identifier: rJGjAMRBD5BuVANVtOKRHd8MaNCdZAe59Noo5myMZoY=
Subject key identifier: 8D:E0:C8:3F:63:6B:0A:18:2C:F3:94:2B:10:AC:40:D5:41:87:79:30
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 03E9
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C352F09C5CE411ECA3B295BE5A40D577.roa
Signing time: Tue 14 Dec 2021 13:50:14 +0000
ROA not before: Tue 14 Dec 2021 13:50:10 +0000
ROA not after: Wed 16 Dec 2026 13:50:10 +0000
asID: 53107
IP address blocks: 192.142.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1001 (0x3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Dec 14 13:50:10 2021 GMT
Not After : Dec 16 13:50:10 2026 GMT
Subject: CN=61b8a116-2f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:f4:9c:15:bb:60:78:f7:97:e2:e5:24:77:
f2:52:a5:f6:65:0d:49:f0:3d:9d:b1:3f:26:4c:e8:
2e:fb:3a:40:af:c1:9d:79:74:b8:00:2c:14:f2:82:
d6:8f:c5:21:56:eb:ab:e7:c7:25:21:29:8f:c7:5e:
2a:7e:4c:57:cc:76:c5:aa:1b:10:e8:6a:7d:02:e5:
05:7e:82:b4:b3:20:9c:45:0e:f5:12:23:00:1d:b7:
27:14:20:61:4b:65:02:b1:1c:05:24:22:ab:8e:41:
29:f2:2a:ba:22:1d:5e:28:4b:e3:4f:56:45:d8:ec:
23:04:d5:71:2c:75:95:8f:08:98:5e:e6:08:34:ff:
51:68:d4:89:bc:2c:a3:c1:f0:e4:b3:0a:70:7b:d9:
6e:6f:a7:73:cf:a4:db:c1:9b:0b:c6:65:c3:6c:9d:
23:fa:1c:58:16:a5:f6:86:9d:4d:2c:f4:2c:5b:4f:
d4:54:61:f0:4c:f1:5e:a1:85:fc:e4:c1:6a:96:bc:
b2:d4:27:79:6f:aa:31:d8:6b:95:15:d4:d8:51:ca:
3a:6f:af:61:27:20:5f:53:b7:8a:42:dc:9d:9d:99:
79:ec:86:e5:a2:5f:c4:42:94:7b:73:a5:bd:b8:be:
bb:28:43:3d:c2:c8:34:9b:a6:c0:41:63:b2:96:84:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:C8:3F:63:6B:0A:18:2C:F3:94:2B:10:AC:40:D5:41:87:79:30
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/C352F09C5CE411ECA3B295BE5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.230.0/23
Signature Algorithm: sha256WithRSAEncryption
03:99:2f:a8:e6:ab:06:ea:9a:91:1c:20:b1:a9:cd:9a:ab:5a:
72:f4:ef:08:3f:e7:c7:1d:a1:3b:c1:9f:9c:eb:29:d7:71:cb:
69:e4:59:b2:9e:70:f1:de:8a:45:73:11:e1:7b:d3:97:43:52:
1c:56:b8:25:16:2f:82:9e:a9:a3:93:d5:0d:d0:bb:1b:d0:73:
7f:4e:c0:a6:e4:2f:88:47:83:f9:69:04:4f:c5:dc:73:83:30:
e9:a6:bd:a0:26:37:a0:48:5c:47:2e:9c:b5:17:ee:6f:7a:f0:
9e:d9:15:c6:95:e8:14:7c:ef:e8:86:82:d1:a4:a0:26:a5:50:
58:64:41:01:fc:f1:21:d5:b8:8c:83:ab:73:1a:ef:48:c1:ef:
6b:a1:10:20:88:78:f6:9c:a2:cd:a8:47:74:d2:e2:f3:e7:31:
a2:14:51:0b:e9:17:ef:d8:c7:9b:54:01:61:ee:d6:df:8d:27:
4f:78:26:24:4e:41:cb:f7:17:ee:4d:2e:cc:03:af:5f:53:a2:
0d:0f:8c:cf:f3:69:44:c3:3a:1c:2e:3d:f8:64:35:b3:bd:cb:
aa:9f:e5:12:7b:f7:14:4e:af:39:18:a3:10:cc:55:51:66:b5:
76:53:f4:3a:52:4b:c9:33:98:eb:ae:89:97:b0:37:01:8a:82:
c7:ba:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:37:47 2024 by rpki-client on console-fra.rpki-client.org