Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CCA4074A9DD611EF9ACB3860762E951A.roa
File: CCA4074A9DD611EF9ACB3860762E951A.roa (raw, json)
Hash identifier: drFxby30JIgDGbbhpX9NRRvSXquE12Niuf6KLL5fjjY=
Subject key identifier: 68:9A:40:CD:C1:BA:6F:AD:2A:5A:08:4D:34:78:2A:00:59:05:BC:43
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AC5
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CCA4074A9DD611EF9ACB3860762E951A.roa
Signing time: Fri 08 Nov 2024 13:38:55 +0000
ROA not before: Fri 08 Nov 2024 13:38:51 +0000
ROA not after: Wed 08 Nov 2034 13:38:51 +0000
asID: 6206
IP address blocks: 192.142.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2757 (0xac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 8 13:38:51 2024 GMT
Not After : Nov 8 13:38:51 2034 GMT
Subject: CN=672e146f-33b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ac:7b:ba:4c:18:c0:22:73:c7:0a:a7:12:1d:
e7:ef:15:94:99:d0:58:d5:69:e0:cc:1c:6a:ca:c1:
15:52:47:a4:9f:f9:4e:2f:a4:be:cc:e6:49:4f:f7:
3d:b5:10:06:ff:36:e7:14:0e:84:f0:e6:be:5f:14:
a2:e2:41:94:d6:42:c8:27:fa:55:ed:c7:5e:6a:72:
4f:1a:60:ba:c4:fa:9f:35:db:18:ad:6c:58:df:c1:
94:4b:37:f9:ff:7d:13:e9:4c:d5:d0:34:04:ef:4c:
84:9c:f2:f8:f4:ab:a6:15:e1:28:dc:1c:12:a2:7a:
36:32:5e:7f:1e:ac:ab:37:c8:1c:82:74:b9:17:6c:
e5:71:91:d6:49:08:38:3c:d7:21:dc:db:b0:e5:0d:
97:6d:77:8a:dc:0d:63:a0:5e:e8:f5:a1:e5:5d:cc:
eb:15:24:13:d4:58:ec:76:ef:12:f7:e3:b8:f2:f1:
05:14:c6:9a:9e:7f:ce:20:27:86:e8:da:62:da:5f:
54:5c:18:55:81:56:24:bc:06:54:eb:e4:5e:c4:bc:
02:19:d3:1d:70:c4:1a:b2:db:67:6f:53:5b:b3:dd:
05:b5:bd:26:16:1b:0f:89:39:30:47:5c:65:8c:c1:
ee:81:79:18:f0:84:7c:a6:d2:86:ba:a0:ef:51:9e:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9A:40:CD:C1:BA:6F:AD:2A:5A:08:4D:34:78:2A:00:59:05:BC:43
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/CCA4074A9DD611EF9ACB3860762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3c:b8:b1:f2:a3:55:91:2c:8d:cc:67:16:79:b1:4a:ad:1a:
4c:01:30:96:13:eb:a5:46:cb:2f:a6:3b:48:96:c1:9c:40:c4:
c1:f7:22:33:9a:c5:4d:72:dd:e9:9c:5c:84:ac:9f:4a:7a:50:
fe:d4:6f:bf:3d:ce:60:c2:df:b9:aa:ac:06:af:8f:49:b4:c3:
a7:93:d4:77:74:e9:44:fa:43:7b:56:cf:4f:1b:70:db:29:44:
91:07:2c:46:bb:a3:e9:da:36:02:13:7b:f8:12:24:81:9a:59:
08:d8:94:a5:3e:df:da:ff:f5:18:7e:12:7f:b6:16:19:e5:2b:
e4:89:7b:c2:fe:25:4f:d3:1f:b5:72:35:6a:af:1e:c9:03:e6:
dc:55:57:f8:5b:da:a0:2a:36:6a:aa:df:13:94:73:9d:db:61:
d7:b4:96:93:ed:20:1c:0a:36:d7:6c:cb:2e:a1:96:bf:8c:9f:
13:10:42:18:de:32:11:44:d5:c9:1c:61:1a:7e:63:96:a8:e6:
0c:61:0b:30:20:68:22:40:e4:4f:28:38:52:49:87:ea:3f:1f:
ea:4f:3d:20:e3:19:65:7e:a0:f1:7c:cd:da:b3:7b:34:24:3b:
03:ef:fd:6a:2e:7e:87:4b:ee:5a:e6:8d:83:32:c5:d7:ac:69:
73:f3:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:42 2024 by rpki-client on console-ams.rpki-client.org