Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E7D8823AA57811EFAE22F198762E951A.roa
File: E7D8823AA57811EFAE22F198762E951A.roa (raw, json)
Hash identifier: Y1U589Ibawz1GZmUd8bMTWls8U4YVlCwHcFQIpn2/hI=
Subject key identifier: AC:37:AA:AC:3D:9D:D2:B1:46:75:F4:5D:C8:AB:7B:B9:F1:E3:A0:60
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B1E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E7D8823AA57811EFAE22F198762E951A.roa
Signing time: Mon 18 Nov 2024 06:46:58 +0000
ROA not before: Mon 18 Nov 2024 06:46:54 +0000
ROA not after: Tue 21 Nov 2034 06:46:54 +0000
asID: 30431
IP address blocks: 192.142.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:46:54 2024 GMT
Not After : Nov 21 06:46:54 2034 GMT
Subject: CN=673ae2e2-8f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:34:0b:0a:bd:1a:6b:fe:25:4b:32:12:7e:
41:df:8f:85:ac:f6:58:b7:89:0b:a9:f6:b5:b2:96:
8d:26:e5:9d:fc:56:d2:7e:a2:1f:42:39:90:45:e8:
87:c7:0d:1d:56:a3:9f:4f:95:4a:68:62:01:42:a7:
5e:cc:34:ab:19:ca:af:9e:76:cf:0c:61:d6:7a:18:
14:a2:73:c7:2c:74:10:82:dc:01:f8:0d:97:8f:8c:
70:2f:ab:56:4f:54:26:e0:59:77:91:c5:c1:7b:cb:
77:ec:31:34:eb:d6:5b:01:e4:2b:18:96:2c:6b:76:
b7:1a:fd:f0:99:5e:7b:ba:c8:86:e4:ea:01:0a:9a:
84:64:37:28:04:b9:ba:c0:70:14:84:ec:ea:99:a8:
e7:33:2f:7f:ed:51:b8:e5:4a:c8:5d:e4:57:38:6a:
e2:1c:9d:3c:be:6a:2d:66:56:da:fd:e6:06:43:d3:
8a:01:89:4b:fe:19:11:bc:7a:d0:27:47:ad:a4:92:
b2:cd:f5:9a:53:f8:b8:09:19:ff:99:0d:58:cc:75:
1c:91:d5:0e:2d:03:d8:49:f8:54:b7:b5:f4:c2:75:
43:08:e4:9c:fb:ab:3d:b5:34:02:43:73:4a:3a:b4:
3b:75:20:7b:47:8b:24:57:8a:d3:69:c8:6e:aa:47:
ec:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:37:AA:AC:3D:9D:D2:B1:46:75:F4:5D:C8:AB:7B:B9:F1:E3:A0:60
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E7D8823AA57811EFAE22F198762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.230.0/23
Signature Algorithm: sha256WithRSAEncryption
71:66:32:ba:fd:bc:a6:9a:37:1f:b6:55:37:60:4e:6f:e4:77:
5f:72:37:e3:97:f1:3a:96:f4:ee:ab:bb:6b:5f:7c:73:08:31:
de:37:09:02:6e:b9:cd:f9:9c:29:1a:f5:f2:76:8f:8d:45:ea:
90:4e:4d:4a:4b:69:71:7e:a2:10:4f:c7:15:1a:39:ae:39:85:
bd:52:dd:62:ee:08:2d:f7:03:d0:17:b5:2a:be:b1:10:21:1b:
8d:a5:b6:0c:9e:7f:06:cc:22:9a:b2:1b:3d:f5:4c:26:d3:7f:
7c:7e:e4:6e:92:97:bf:36:78:c2:98:06:3d:92:74:c4:4b:a7:
be:63:33:84:49:f9:b3:73:eb:5b:76:dd:d0:67:26:c6:a4:bd:
9a:85:ec:33:8d:3a:32:e7:35:b9:c4:42:b1:ca:dd:0a:51:f8:
43:f6:aa:3c:41:6e:71:57:d2:94:f6:4d:e4:e6:bd:df:c3:9f:
1e:b8:1a:1e:1a:8a:87:51:1f:02:9a:58:4f:58:bb:7c:9f:6e:
f8:45:e8:04:5f:c2:ee:ff:78:20:2c:e4:31:84:54:27:a6:c0:
0f:15:00:a6:b8:b8:f2:d0:06:8b:d5:d2:f0:32:64:3a:3d:47:
3f:00:22:2a:0a:a6:a5:99:b9:9d:72:84:5f:67:19:b8:6e:b5:
95:fe:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:42 2024 by rpki-client on console-ams.rpki-client.org