Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/01CC6C947E8D11EC89A79C885A40D577.roa
File: 01CC6C947E8D11EC89A79C885A40D577.roa (raw, json)
Hash identifier: qd/8XDFff1CiSxAQk1vmUsyny6ywpT4UycAJmKGe26U=
Subject key identifier: EB:F8:38:33:24:91:1A:27:50:50:47:5B:B2:A5:C7:20:B3:86:E4:12
Certificate issuer: /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial: 07
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Authority info access: rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/01CC6C947E8D11EC89A79C885A40D577.roa
Signing time: Wed 26 Jan 2022 09:47:43 +0000
ROA not before: Wed 26 Jan 2022 09:47:39 +0000
ROA not after: Tue 26 Jan 2049 09:47:39 +0000
asID: 37611
IP address blocks: 192.143.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Validity
Not Before: Jan 26 09:47:39 2022 GMT
Not After : Jan 26 09:47:39 2049 GMT
Subject: CN=61f118bf-9815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:32:50:4f:6c:70:37:31:3b:a5:35:9d:4c:
8e:5b:a8:72:56:65:7d:39:bf:3a:bb:3a:b5:5d:91:
7e:52:2c:54:68:0d:c2:29:56:2a:8c:46:42:02:8f:
50:64:68:b8:21:0f:fc:a2:b1:f3:4a:85:d1:d4:59:
42:7f:35:31:a6:67:4d:61:87:cd:c2:c0:5d:e2:c7:
39:27:32:e9:ff:2f:e6:83:aa:1d:92:2e:ac:05:a1:
4c:5e:ba:21:bb:8e:8d:cf:09:9f:fa:18:f4:51:b1:
0f:0a:9e:87:13:f4:91:24:0f:cd:f0:b8:eb:b3:4e:
8a:52:12:e5:18:40:32:df:6a:3a:04:0d:0f:b1:6d:
08:0e:06:0c:46:8c:a5:e8:9f:c1:55:9c:09:0c:b0:
06:e4:b4:3f:f3:58:b6:fb:c5:be:88:9c:ae:06:e4:
5d:3c:2c:f9:54:6d:5c:b7:68:43:fd:16:64:a0:04:
d1:d3:63:e3:75:f5:45:0b:47:41:97:5b:4b:58:d6:
1b:f1:9f:3f:d3:7a:83:1d:47:af:48:f8:9b:d8:d4:
85:67:65:e2:b4:0b:f6:02:9b:5b:a4:cd:cd:79:eb:
fd:fd:33:ee:45:a5:0b:10:db:78:e0:be:f7:04:6b:
f6:2a:81:91:b8:2a:1f:ff:97:22:65:44:ed:9a:f9:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F8:38:33:24:91:1A:27:50:50:47:5B:B2:A5:C7:20:B3:86:E4:12
X509v3 Authority Key Identifier:
keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/01CC6C947E8D11EC89A79C885A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.143.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6a:68:aa:b0:b7:c8:23:56:5a:e9:de:f2:cb:24:a7:2d:11:a9:
b2:f1:49:47:0a:58:23:0b:fd:e0:c3:47:f4:da:e4:f7:14:20:
7e:08:3e:38:cc:7b:46:75:65:98:91:0e:34:6b:39:e9:86:8d:
12:62:a9:51:ef:43:af:23:ca:ea:b7:a3:b3:74:ad:95:ce:14:
79:e6:04:4b:ee:6b:e2:56:b2:24:81:b7:7d:98:6f:be:c3:e0:
30:f1:af:b0:5d:0f:e0:b7:51:30:3d:db:20:89:72:57:bd:ab:
b2:ea:a7:77:ac:2c:94:84:54:f4:d1:2d:cf:88:e7:f2:8d:62:
b0:c6:4e:9d:6d:05:e1:f1:35:81:3d:69:2e:82:24:e4:45:72:
61:51:19:9e:11:44:e6:0f:ea:03:b5:e2:14:11:e8:7d:7f:ca:
19:2b:0f:83:06:f9:eb:ce:8c:3b:3c:5a:e9:fe:1b:70:22:62:
5a:a1:c9:a2:e5:71:01:e7:b6:d1:24:c8:d4:44:49:f8:3d:85:
8a:5d:5c:08:ea:2e:57:35:30:6f:30:8a:d1:ba:de:e5:bf:03:
07:0c:66:e3:95:85:16:3e:d5:36:d7:3d:5f:ac:ba:54:22:79:
0e:62:1c:2e:63:45:bb:69:48:a3:a5:6f:9b:fc:bc:6f:86:5e:
ed:98:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org