Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E23329D0A36511EF9441C48C762E951A.roa
File: E23329D0A36511EF9441C48C762E951A.roa (raw, json)
Hash identifier: +GLwz2smicueG3rWGW9iaK8uKnBn73dOFZzT+k22qk4=
Subject key identifier: 48:F2:25:EF:C0:CC:74:85:8E:4F:9A:D3:79:D2:91:9D:0C:DC:56:17
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AE3
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E23329D0A36511EF9441C48C762E951A.roa
Signing time: Fri 15 Nov 2024 15:25:45 +0000
ROA not before: Fri 15 Nov 2024 15:25:41 +0000
ROA not after: Wed 15 Nov 2034 15:25:41 +0000
asID: 214036
IP address blocks: 192.142.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2787 (0xae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 15 15:25:41 2024 GMT
Not After : Nov 15 15:25:41 2034 GMT
Subject: CN=673767f9-1a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:a2:f5:7b:0b:84:44:d8:ee:32:24:2b:63:
ab:7e:02:0a:50:d0:d9:1f:bc:3a:2f:a9:af:31:f9:
8e:09:e7:07:5d:01:2e:a9:53:e1:09:04:6d:65:0a:
21:e3:e7:67:73:a0:a2:a0:c2:71:c9:0d:99:9b:37:
3c:0c:ee:ea:e0:7d:ca:a0:56:ad:03:b7:53:64:06:
30:87:43:4b:c2:e1:c0:0f:b1:49:e2:53:6a:7c:96:
f3:cb:c2:d7:38:70:7f:a5:5d:1a:ba:b9:b8:bb:97:
76:fb:83:36:53:22:77:ce:de:c6:09:a7:10:82:7b:
93:0d:9a:89:36:e9:8e:90:ca:de:ea:a8:9a:0d:84:
21:e9:2a:80:1d:ee:cd:5d:a5:70:d2:d2:cd:4a:c1:
2f:ee:a3:9d:e6:2b:ef:b8:6c:9b:e4:89:08:28:e7:
db:cd:b1:3b:9e:98:66:c1:89:0f:e3:84:15:d8:d1:
37:01:42:98:97:0e:b5:b6:d7:28:0e:9f:1d:e3:0b:
c6:fb:a4:06:6d:aa:d0:a9:bd:a1:1e:d7:e8:e6:dd:
db:e2:53:b1:96:3f:46:b4:44:5f:d4:61:2d:6d:ce:
cb:b7:45:73:38:f2:de:a4:c5:7b:70:ad:f2:aa:e0:
20:44:12:fc:41:33:f1:6b:49:c0:26:0f:c2:d6:c6:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F2:25:EF:C0:CC:74:85:8E:4F:9A:D3:79:D2:91:9D:0C:DC:56:17
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E23329D0A36511EF9441C48C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.10.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6d:ad:b0:29:da:64:69:9d:aa:ee:38:e2:16:6f:de:9f:9d:
1b:c2:8b:19:dc:5f:42:ec:2e:6e:af:f9:ca:b8:cb:6f:37:c5:
45:2c:04:19:f2:cc:97:2d:bb:b1:e5:92:21:8b:72:bd:51:b6:
7f:b8:b1:0d:8d:a9:b6:8f:d4:06:77:c9:72:29:4c:01:42:28:
eb:f9:03:cc:b0:6f:8c:bd:e7:70:95:a2:ab:c0:39:10:17:54:
f3:82:b4:aa:49:73:1a:b5:55:a7:e4:78:a4:5c:c2:d8:2e:04:
54:ac:0a:cf:fb:1b:d7:db:00:bf:fd:ab:a5:14:44:b2:21:c1:
86:72:16:92:cb:29:64:9e:7e:c9:be:08:18:9e:eb:3a:dc:13:
eb:c0:ef:ab:bb:86:be:3f:de:f2:b9:c7:99:28:92:07:a5:2c:
08:f7:32:6c:25:22:35:dc:31:3b:44:3b:c5:04:e7:6a:f8:2b:
ad:7a:b7:f8:06:81:d1:d4:9f:43:2c:16:ce:4a:f1:d9:4c:54:
6a:5b:cf:6c:1f:4f:3e:2a:25:30:3b:48:8b:a1:5f:c1:49:a8:
a5:ea:cb:a6:67:63:ed:a0:29:95:df:8e:18:7d:b5:7e:e6:12:
ad:4c:20:bd:44:e9:7f:58:e9:93:26:8f:4d:e1:16:20:85:7a:
7e:9f:77:39
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yNDExMTUxNTI1NDFaFw0zNDExMTUxNTI1NDFaMBgxFjAU
BgNVBAMTDTY3Mzc2N2Y5LTFhODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzx6L1ewuERNjuMiQrY6t+AgpQ0NkfvDovqa8x+Y4J5wddAS6pU+EJBG1l
CiHj52dzoKKgwnHJDZmbNzwM7urgfcqgVq0Dt1NkBjCHQ0vC4cAPsUniU2p8lvPL
wtc4cH+lXRq6ubi7l3b7gzZTInfO3sYJpxCCe5MNmok26Y6Qyt7qqJoNhCHpKoAd
7s1dpXDS0s1KwS/uo53mK++4bJvkiQgo59vNsTuemGbBiQ/jhBXY0TcBQpiXDrW2
1ygOnx3jC8b7pAZtqtCpvaEe1+jm3dviU7GWP0a0RF/UYS1tzsu3RXM48t6kxXtw
rfKq4CBEEvxBM/FrScAmD8LWxttBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUSPIl
78DMdIWOT5rTedKRnQzcVhcwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4L0UyMzMyOUQwQTM2NTExRUY5NDQxQzQ4Qzc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjgowDQYJKoZIhvcNAQELBQAD
ggEBADVtrbAp2mRpnaruOOIWb96fnRvCixncX0LsLm6v+cq4y283xUUsBBnyzJct
u7HlkiGLcr1Rtn+4sQ2NqbaP1AZ3yXIpTAFCKOv5A8ywb4y953CVoqvAORAXVPOC
tKpJcxq1VafkeKRcwtguBFSsCs/7G9fbAL/9q6UURLIhwYZyFpLLKWSefsm+CBie
6zrcE+vA76u7hr4/3vK5x5kokgelLAj3MmwlIjXcMTtEO8UE52r4K616t/gGgdHU
n0MsFs5K8dlMVGpbz2wfTz4qJTA7SIuhX8FJqKXqy6ZnY+2gKZXfjhh9tX7mEq1M
IL1E6X9Y6ZMmj03hFiCFen6fdzk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:42 2024 by rpki-client on console-ams.rpki-client.org