Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D7302FF83A8811ED958D28BEF1222468.roa
File: D7302FF83A8811ED958D28BEF1222468.roa (raw, json)
Hash identifier: Y0C9lvUZQG+Pg1hgG3gT3+erm5dlwwMaH5ELj8zs1Tk=
Subject key identifier: E5:44:3F:AC:A2:48:30:CC:61:3B:D2:A8:B5:AF:FD:C9:BF:A6:31:AB
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0587
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D7302FF83A8811ED958D28BEF1222468.roa
Signing time: Thu 22 Sep 2022 15:11:32 +0000
ROA not before: Thu 22 Sep 2022 15:11:28 +0000
ROA not after: Wed 08 Sep 2032 15:11:28 +0000
asID: 212238
IP address blocks: 192.142.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:16:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1415 (0x587)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Sep 22 15:11:28 2022 GMT
Not After : Sep 8 15:11:28 2032 GMT
Subject: CN=632c7b24-d14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:f5:f8:9c:9c:ff:5d:e8:9e:aa:1a:1c:a0:
b3:ed:75:ba:04:78:d8:3d:3a:c0:b8:4c:d4:a4:90:
70:e4:5b:d2:af:7b:ef:91:41:00:a2:fd:46:e9:e2:
4f:d0:8e:f1:1c:e7:95:67:23:5c:df:e7:74:9b:31:
8a:f0:1e:04:59:f9:3b:6d:38:19:a7:b3:17:17:6d:
19:41:8e:33:de:bd:b2:7b:56:26:77:3f:86:0a:db:
d7:c8:c6:7c:63:0f:1a:2b:af:bb:e9:01:a5:5d:8a:
fa:a1:8c:24:6e:73:ce:dc:2b:57:eb:b5:01:05:ff:
46:a8:d5:9f:b0:15:d4:d2:dd:5c:3d:90:d2:35:97:
16:74:91:a2:3d:56:a1:65:79:09:ff:e2:15:ce:87:
68:25:11:e5:a7:34:4c:64:b8:8f:7e:42:d3:31:84:
6b:a1:fe:e6:82:ee:17:7a:b6:11:62:23:87:ca:84:
ed:76:f9:05:28:38:4c:33:2d:26:26:81:15:43:45:
82:a3:26:55:eb:71:94:f0:27:ab:93:e4:6e:c4:38:
c6:e3:19:d9:8b:58:92:3f:3f:06:59:57:9e:cc:05:
32:c6:f2:09:55:37:2e:0c:76:92:ff:f2:5f:7f:26:
d2:d0:bb:f0:0c:64:a3:01:d6:87:6b:87:4f:34:01:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:44:3F:AC:A2:48:30:CC:61:3B:D2:A8:B5:AF:FD:C9:BF:A6:31:AB
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/D7302FF83A8811ED958D28BEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.18.0/23
Signature Algorithm: sha256WithRSAEncryption
17:89:fc:a0:7b:43:0d:e4:9d:2a:39:79:0e:b1:b7:b2:31:6e:
bf:3d:3a:04:b0:19:ab:74:a0:ea:19:30:82:e0:92:af:09:9f:
6a:a6:4f:54:02:26:f5:cd:d4:f8:4c:7c:8c:e9:a0:fe:2f:8b:
68:b7:ad:06:3a:30:1a:8f:54:c3:9c:ef:5a:f7:2e:70:6d:92:
41:9b:34:66:41:28:b1:97:4e:56:5f:64:b3:da:1f:08:f4:50:
fc:80:e5:34:55:a2:26:77:27:f7:55:e0:be:c9:e8:70:bf:74:
b6:c2:9d:26:c1:70:a6:26:89:04:a2:8c:35:02:f8:ea:d0:43:
8f:74:b1:39:e0:38:e0:a0:bd:4f:d0:0b:b0:62:f2:5c:9f:42:
01:f9:50:00:b5:d9:76:b8:8f:cf:06:5c:2f:48:60:27:21:4a:
88:e5:46:7e:09:43:a1:05:1a:77:c2:84:83:f6:7c:64:61:cb:
70:ab:c4:b3:8e:99:81:13:0b:26:df:9b:f4:78:18:e4:4c:59:
57:af:ff:10:0b:c1:99:f4:1d:d3:2c:d8:e8:b8:64:db:8f:2a:
60:3b:b6:b0:4e:e0:63:4b:cb:4d:be:ab:98:c0:46:30:4c:39:
e2:36:b2:ea:3d:32:45:e6:28:05:e1:89:56:43:7e:cc:ff:c9:
b7:32:52:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:00:24 2024 by rpki-client on console-ams.rpki-client.org