Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E9047198A57611EF91562A8C762E951A.roa
File: E9047198A57611EF91562A8C762E951A.roa (raw, json)
Hash identifier: nH+bjlse3Ez8VM32p7hsxMIC+FMtqbFzprkvxslja0I=
Subject key identifier: 37:02:F8:57:3B:7F:C3:12:DC:C7:06:C8:AB:94:4E:62:3A:B2:F8:7A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0B00
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E9047198A57611EF91562A8C762E951A.roa
Signing time: Mon 18 Nov 2024 06:32:41 +0000
ROA not before: Mon 18 Nov 2024 06:32:37 +0000
ROA not after: Tue 07 Nov 2034 06:32:37 +0000
asID: 30431
IP address blocks: 192.142.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2816 (0xb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 18 06:32:37 2024 GMT
Not After : Nov 7 06:32:37 2034 GMT
Subject: CN=673adf89-b2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:14:d9:6f:d4:d9:8a:a9:56:32:4d:93:4c:
2b:4b:fb:52:ba:cf:10:49:0f:73:1b:f6:5c:ce:c5:
0c:99:eb:8a:14:ce:d6:65:e1:b0:f4:ee:08:e7:19:
a9:24:96:ef:a4:ce:f8:8f:c1:dc:8c:e8:08:4b:c9:
8b:cc:7c:50:24:d4:4a:97:9b:14:b7:1f:ec:9d:4e:
88:08:57:24:24:63:d2:b2:f0:7c:98:00:28:7c:dc:
42:42:67:b6:70:5c:9c:4e:36:00:28:bf:38:1d:14:
59:c2:4e:ee:d4:86:e4:99:26:be:43:11:63:d8:84:
18:f2:18:29:fd:22:2b:42:0d:45:27:27:3b:34:08:
82:8d:9b:24:00:48:51:c1:c3:31:46:7b:e0:a3:c9:
8f:15:73:c5:b6:9b:e1:31:f6:c7:dd:6e:c6:1e:a9:
5d:dd:dc:4b:0c:93:6e:a6:54:f6:da:bf:e9:d4:fa:
b8:15:2a:61:06:8c:05:c9:ae:82:a5:af:05:c0:ca:
34:56:33:65:0c:4f:36:65:b9:62:9c:62:03:1f:55:
08:69:01:59:a8:4b:6e:e9:f2:b5:bc:5c:45:61:c7:
46:98:ea:ae:67:10:2b:08:5f:b6:35:87:a4:35:11:
7f:56:17:3c:aa:c1:7c:c6:cc:6d:af:90:11:38:1e:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:02:F8:57:3B:7F:C3:12:DC:C7:06:C8:AB:94:4E:62:3A:B2:F8:7A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/E9047198A57611EF91562A8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.136.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:8f:42:35:9b:07:88:8c:c5:4b:96:c2:95:15:28:29:8c:f3:
e0:20:0e:32:2f:2a:fe:06:07:2f:f3:c4:11:ad:b7:ab:4c:e6:
f9:ba:20:77:65:6c:b0:a9:5f:5c:a4:a2:55:f7:43:e4:da:11:
5b:39:ac:5f:8c:d6:96:03:71:80:38:59:8c:ef:1d:22:b1:0a:
c0:62:97:8d:92:f9:ff:45:ad:db:6b:46:fd:36:ba:0e:43:3a:
0a:e9:5e:04:7c:96:1a:ea:66:17:61:68:96:7b:ed:b8:97:61:
a7:5a:fb:96:f4:6b:ca:8b:f3:df:71:7e:57:cd:80:30:0f:d5:
57:d3:25:aa:df:7e:86:26:37:7f:fc:54:90:ad:27:3a:a9:f9:
17:c7:8b:23:e9:67:e5:97:2c:d3:9c:37:ba:35:50:64:e6:db:
66:c8:5f:34:5a:4a:01:71:4f:2c:ec:f2:89:85:54:12:f7:9a:
a1:76:d7:59:28:7a:71:95:dd:a9:8e:d5:0b:69:a0:26:2c:69:
88:1a:f0:6a:16:f1:4d:15:0c:42:b2:55:16:3d:55:03:eb:fa:
9f:46:d7:2d:3d:3d:f6:d0:a2:5a:b7:b4:09:37:bc:7b:d7:86:
75:69:e3:6a:25:8f:61:eb:bc:32:87:81:9d:b5:48:b9:cf:3f:
84:76:ab:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org