Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/F4602E7A7D7A11EFAF08EC65762E951A.roa
File: F4602E7A7D7A11EFAF08EC65762E951A.roa (raw, json)
Hash identifier: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=
Subject key identifier: 92:92:2C:7D:AE:E3:1F:1B:7F:3D:12:39:99:FE:5E:BA:19:9B:9D:DA
Certificate issuer: /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial: 0BE2
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Authority info access: rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/F4602E7A7D7A11EFAF08EC65762E951A.roa
Signing time: Sat 28 Sep 2024 09:20:51 +0000
ROA not before: Sat 28 Sep 2024 09:20:47 +0000
ROA not after: Sun 31 Dec 2034 09:20:47 +0000
asID: 327966
IP address blocks: 169.239.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Validity
Not Before: Sep 28 09:20:47 2024 GMT
Not After : Dec 31 09:20:47 2034 GMT
Subject: CN=66f7ca73-8e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:91:d8:27:6f:ff:f6:29:9c:4c:e5:3c:8c:
08:f2:c8:31:05:52:17:a3:92:58:a1:27:42:b2:bf:
b6:db:57:07:37:d4:c1:b7:6a:6d:ec:f5:60:db:00:
96:0b:c8:b2:4b:09:67:b6:c0:54:6f:d7:4a:d4:2c:
b5:0e:fc:c1:6e:d7:73:a9:da:2c:a2:03:0a:0b:92:
c4:ce:20:9d:5f:c5:9d:86:23:80:74:60:98:5a:81:
8c:37:ee:d8:ab:50:76:84:46:19:d5:3a:2e:1b:5e:
b8:17:a1:9f:44:97:ac:12:33:56:f7:cd:76:98:88:
92:8b:d6:e3:ff:95:19:d6:5f:8e:d9:08:80:90:2f:
6a:24:1d:32:47:73:26:35:73:e5:a5:9f:45:df:66:
a1:e4:21:2c:c4:5b:58:a5:8b:be:33:0f:45:25:f7:
a4:3e:77:d3:bd:e0:63:74:a9:8a:53:c1:22:bd:45:
d3:53:5e:d5:70:6c:92:2d:b0:f6:45:ec:9c:c7:4a:
c4:a8:63:42:1a:a9:43:c5:8d:14:3e:c5:e9:94:08:
dd:0b:4a:09:7b:e3:56:ce:8a:9a:fc:86:d2:5a:2f:
f8:a2:8c:02:aa:3c:ec:2d:b5:82:09:79:1f:13:b6:
29:16:fd:86:dd:ae:6d:48:2e:f1:05:19:b9:c3:78:
19:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:92:2C:7D:AE:E3:1F:1B:7F:3D:12:39:99:FE:5E:BA:19:9B:9D:DA
X509v3 Authority Key Identifier:
keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/F4602E7A7D7A11EFAF08EC65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.239.164.0/22
Signature Algorithm: sha256WithRSAEncryption
55:9a:f4:4f:b3:41:3c:34:14:bc:e3:78:7f:a4:c7:10:45:5f:
df:d9:39:8f:1c:fb:b4:92:52:6f:39:fe:a4:6b:52:60:23:e3:
c3:29:8b:74:77:1d:74:4c:6f:7e:c8:01:7e:67:0e:e9:f0:d3:
f4:f8:20:69:96:de:ae:bf:79:4b:36:1d:b8:6b:18:17:49:06:
9c:6f:c7:6d:70:33:97:9d:de:69:05:83:ad:88:bf:c5:b4:40:
9b:0a:09:39:11:da:51:cf:87:c0:34:e6:dc:7b:1a:10:2a:b4:
5e:25:4b:98:b2:f7:d1:6c:60:c3:f9:cc:24:51:e1:80:5d:c7:
c5:fe:be:dc:45:03:9c:1d:3c:9a:50:3b:11:aa:f5:9e:49:50:
d7:af:fd:3f:7e:d6:71:e1:0c:af:8f:a7:a9:d2:57:d2:de:fb:
3e:5c:02:c6:ba:17:4f:ca:9b:bf:60:ff:91:24:2a:f8:4a:da:
b1:b5:c0:63:4f:b8:8e:89:b3:92:c6:37:1f:3c:f0:72:19:33:
36:5b:57:3c:c5:56:ef:17:b9:f8:72:f4:f1:ed:ab:ef:25:de:
70:f5:96:d9:e7:b9:f9:c7:08:00:4c:a4:08:d0:b3:1f:3d:d2:
43:34:ce:d5:2e:91:ab:34:f4:18:f9:ad:eb:75:9a:d7:04:96:
de:43:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:47:22 2024 by rpki-client on console-ams.rpki-client.org