Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/B68CCC76A68211EFA7605193762E951A.roa
File: B68CCC76A68211EFA7605193762E951A.roa (raw, json)
Hash identifier: hVK4/Rx1S8B8kokV3evOakeSn1xgDl+NOOvc1/7Zypc=
Subject key identifier: 69:10:09:88:38:5C:29:7A:9C:EF:88:F9:33:1C:34:9C:94:1A:90:BE
Certificate issuer: /CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Certificate serial: 04
Authority key identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
Authority info access: rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/B68CCC76A68211EFA7605193762E951A.roa
Signing time: Tue 19 Nov 2024 14:29:41 +0000
ROA not before: Tue 19 Nov 2024 14:29:37 +0000
ROA not after: Thu 26 Nov 2043 14:29:37 +0000
asID: 328404
IP address blocks: 169.255.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Validity
Not Before: Nov 19 14:29:37 2024 GMT
Not After : Nov 26 14:29:37 2043 GMT
Subject: CN=673ca0d5-f2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:fa:a1:a6:fa:bb:9d:99:32:73:c2:83:9b:
66:d5:15:2e:eb:18:e5:dd:05:3f:f6:9e:8a:be:b2:
9b:5f:f5:33:2e:01:17:ca:51:8b:a5:64:ae:e4:f1:
9c:84:ba:24:a0:f4:66:17:a4:d3:06:93:f5:c7:5d:
b0:df:39:b3:d9:ad:7d:33:5d:d8:e6:40:7d:ae:a9:
fb:7c:36:ca:dd:8a:7a:d0:bc:b8:2a:5d:99:27:3a:
a4:84:8b:6e:1c:f9:5a:6b:71:3c:c3:74:47:2b:3c:
c3:10:e0:9b:a3:56:e0:e0:2e:af:2d:0a:0f:6d:c6:
76:a2:ca:0b:fb:05:21:db:f8:52:bc:f5:95:ca:7a:
a2:a5:e5:14:4f:bd:f8:b6:43:c2:a8:fa:49:14:32:
2d:06:50:23:02:96:1c:a9:42:f6:aa:04:97:13:99:
f5:71:58:47:77:f9:4e:77:d8:b6:34:64:93:ec:dc:
52:30:6a:3e:c8:01:31:58:80:a7:bf:ce:92:cb:cf:
f5:68:ac:05:2a:a8:3e:83:a5:7f:b4:8a:f7:f7:18:
1d:b6:5d:5a:49:45:bc:6c:d4:e2:b0:ac:3c:8d:9a:
d8:42:03:64:c4:5f:61:99:ec:61:83:42:8f:d3:c6:
76:f2:f6:da:7e:36:4e:37:d8:83:b2:69:72:b2:42:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:10:09:88:38:5C:29:7A:9C:EF:88:F9:33:1C:34:9C:94:1A:90:BE
X509v3 Authority Key Identifier:
keyid:1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/B68CCC76A68211EFA7605193762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.192.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:4d:42:36:49:19:a9:13:cf:b0:44:b3:5d:36:46:1e:54:81:
00:63:a3:66:62:41:a6:6c:ff:63:9a:ae:c5:36:43:5f:a6:37:
de:02:34:d7:4f:29:5f:b3:13:bd:ee:a6:23:23:ba:cc:7d:4e:
d3:aa:64:48:c1:c3:ab:36:76:2e:24:b1:ea:1f:64:72:ee:10:
7c:db:c3:d0:b2:a6:71:d6:34:71:76:dc:8a:a9:cc:2a:74:a5:
de:6e:0c:6f:ce:42:ca:de:c7:80:33:cf:ea:e0:92:ea:bb:95:
90:fe:cc:16:49:85:f9:10:70:dd:5b:85:8f:7b:7f:0e:be:c6:
db:9d:17:fe:02:c2:4f:09:ee:21:22:2d:6e:ad:59:0a:b4:48:
d3:93:d9:c4:97:c7:1e:95:77:5b:c2:4b:36:20:b7:d3:83:38:
e9:80:c6:d0:93:a1:70:3d:a4:59:9e:08:89:cc:79:86:a3:69:
41:7d:a7:e7:3a:a0:fd:02:24:34:32:a8:3a:75:80:55:e5:27:
6f:d7:28:6f:72:4a:de:fd:d6:d4:63:a8:ef:52:80:95:4a:b2:
2c:18:e8:57:c0:61:c9:cf:7b:c6:bd:55:50:ab:4b:ed:f5:d5:
48:c5:16:45:5d:93:d1:b5:9e:d9:6e:21:17:48:80:6d:5a:e4:
a2:cf:38:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org