Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F4B4EF7E9DD611EF82AC4E62762E951A.roa
File: F4B4EF7E9DD611EF82AC4E62762E951A.roa (raw, json)
Hash identifier: nYEJut9su/f4SE8h9lqes033tt0coRNu16RGhO+Kcds=
Subject key identifier: 71:4E:6B:FD:B1:DE:6C:54:3D:62:47:AD:16:9C:AE:E4:71:14:ED:E6
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 0AC7
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F4B4EF7E9DD611EF82AC4E62762E951A.roa
Signing time: Fri 08 Nov 2024 13:40:03 +0000
ROA not before: Fri 08 Nov 2024 13:39:59 +0000
ROA not after: Wed 08 Nov 2034 13:39:59 +0000
asID: 6206
IP address blocks: 192.142.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2759 (0xac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Nov 8 13:39:59 2024 GMT
Not After : Nov 8 13:39:59 2034 GMT
Subject: CN=672e14b2-3b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:f9:01:1a:cf:c8:f5:5f:80:4c:c6:44:96:
10:4a:5b:c2:f7:89:59:7f:a2:a1:b4:79:a5:b9:c4:
de:63:2d:38:68:67:ff:94:f1:bd:84:d9:fa:7e:56:
3f:39:f2:76:a7:88:d4:2d:ca:c8:75:06:81:fb:3e:
44:d2:88:15:88:ba:b2:24:5c:89:49:15:8f:d8:ab:
6d:c0:5c:be:9b:43:eb:1f:e7:54:6c:34:60:3d:24:
e9:79:80:04:64:9c:66:b3:2e:4f:ec:37:8a:9f:f5:
f6:ee:35:3f:55:71:d5:0a:3f:26:1f:fa:e2:39:91:
7f:ad:9d:5d:49:91:80:f2:51:fe:c6:a4:21:72:ed:
90:29:18:47:4e:f5:61:64:9d:77:34:ae:d0:8c:93:
b2:ca:a8:e9:d4:76:93:21:36:17:be:b7:02:b1:14:
1f:f8:a8:f2:95:26:d9:53:3e:0a:01:b2:19:f0:e3:
0e:61:ee:43:46:c7:a5:72:a4:8e:7b:cc:19:1e:a7:
e3:e3:b5:32:66:a2:58:15:c3:6c:ea:0f:da:16:dd:
74:f7:fd:61:4b:d9:a5:21:e0:dc:85:7d:c3:e7:34:
0c:05:3a:89:73:4b:ee:4b:cc:bb:9e:61:f6:d4:f0:
31:8c:d9:b0:8f:7e:cc:df:96:b1:36:84:2e:35:74:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4E:6B:FD:B1:DE:6C:54:3D:62:47:AD:16:9C:AE:E4:71:14:ED:E6
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/F4B4EF7E9DD611EF82AC4E62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.5.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8b:50:b2:dd:76:cd:8c:e4:f6:df:db:d7:8b:13:44:19:e1:
9e:ae:c5:5e:45:91:cf:40:83:1f:f8:2f:50:ff:6c:e2:24:b5:
02:db:35:44:0e:87:36:83:37:bf:10:d9:cd:1e:dc:74:ba:ee:
62:b6:10:b9:9f:bb:f3:0c:7a:73:0e:32:1c:61:32:9c:e8:cd:
c4:57:58:41:e1:59:8c:56:4e:65:fd:fe:bb:3e:00:36:5c:64:
f0:34:26:d1:a7:c0:ec:39:dd:9b:6f:7e:40:10:e2:d2:27:64:
39:ac:e4:b4:05:ca:e0:c9:ab:c7:bf:51:44:23:48:be:f2:da:
5f:6e:98:c4:21:30:23:58:fc:d8:bd:9e:9d:bc:77:83:f9:7c:
57:2a:fc:bf:34:a5:fd:07:b2:85:3e:df:31:b2:00:c4:76:15:
70:30:2d:e2:77:4f:90:47:f1:28:c2:fa:96:0a:9e:ed:37:ad:
86:ba:df:c3:b6:b0:01:7f:22:c3:e4:c2:19:41:a5:7c:d7:a9:
95:2a:34:2a:c6:a2:4b:b9:f1:e8:2a:a2:6e:96:c5:97:9a:2a:
91:1f:0e:14:ff:92:24:3b:ea:92:b7:25:80:43:96:b7:bd:69:
19:d2:d7:3c:ad:af:b8:15:46:89:19:3c:3a:13:57:c1:bb:4d:
d7:19:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:42 2024 by rpki-client on console-ams.rpki-client.org