Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/526F2A62732611EEA96ED8714AD9E6FC.roa
File: 526F2A62732611EEA96ED8714AD9E6FC.roa (raw, json)
Hash identifier: Ukkb5AVQsO1Gjuu3k0PEd18RL/gRcbSRynh/B4Aa3tQ=
Subject key identifier: 84:F6:F1:08:CC:FA:95:8B:C3:20:C6:8F:79:55:E0:B0:7D:FB:C2:F7
Certificate issuer: /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial: 01CE
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Authority info access: rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/526F2A62732611EEA96ED8714AD9E6FC.roa
Signing time: Wed 25 Oct 2023 11:04:52 +0000
ROA not before: Wed 25 Oct 2023 11:04:48 +0000
ROA not after: Fri 25 Oct 2030 11:04:48 +0000
asID: 25818
IP address blocks: 69.67.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Validity
Not Before: Oct 25 11:04:48 2023 GMT
Not After : Oct 25 11:04:48 2030 GMT
Subject: CN=6538f654-02ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:69:d0:51:0a:5d:7b:8c:e9:23:e6:1f:a8:
3b:f4:1e:37:98:a4:e2:93:32:73:ff:b2:11:b2:01:
52:6e:6a:df:57:9d:f5:1d:3b:27:9e:83:22:06:20:
35:af:1e:3b:69:2b:7e:9a:47:e0:b2:10:8c:19:92:
39:c4:0f:57:79:32:22:e6:9d:43:0b:d9:6a:1f:28:
49:54:cc:78:7b:8f:f4:b3:9d:d6:40:3d:99:b1:88:
f1:4e:b6:47:e7:8f:ac:b9:7c:08:c2:2e:05:12:ac:
57:16:82:75:e3:f9:76:b5:ec:33:38:2d:a1:73:96:
85:6b:ae:c1:bf:2a:38:af:14:0e:d9:31:3f:bc:02:
9e:6a:3b:34:40:09:58:41:98:33:eb:6e:e9:61:85:
6b:ba:2d:8b:63:d2:75:a5:83:0a:a8:9a:55:76:65:
f9:6a:e4:8a:ed:01:a0:a9:af:ce:03:94:2a:40:d6:
97:2b:86:b1:79:69:23:77:53:03:69:39:79:64:64:
e6:48:c7:e1:9a:ec:69:c7:66:5d:62:04:68:55:ad:
3b:65:02:0d:5a:97:71:dd:d5:9e:e3:82:a4:1d:50:
bb:28:63:2d:00:63:98:e7:77:f9:d8:ae:e7:52:34:
99:5a:ae:83:85:65:dc:2b:ac:f0:c7:c7:a3:76:62:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F6:F1:08:CC:FA:95:8B:C3:20:C6:8F:79:55:E0:B0:7D:FB:C2:F7
X509v3 Authority Key Identifier:
keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/526F2A62732611EEA96ED8714AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
69.67.32.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:79:2f:c3:36:88:54:6f:52:fd:0e:97:84:6d:34:6a:c1:49:
54:12:e5:a9:ad:82:87:b2:26:ec:ac:a2:25:11:e6:bf:43:c5:
2c:5a:50:9a:48:c0:01:55:de:b1:cb:90:8f:56:d6:15:4a:64:
0e:fa:73:d4:16:79:42:d5:9e:a0:c8:b4:d6:73:3c:66:3b:d2:
42:75:c7:4a:0e:49:23:02:9d:db:e0:b0:d2:ed:a7:01:f4:bb:
53:89:78:3e:6d:2f:7b:72:a0:b5:2e:79:f4:ae:74:f1:bd:73:
45:30:8f:68:d1:f9:26:1c:0b:1f:aa:ea:43:1b:d0:df:54:bb:
ad:9b:3e:8f:43:49:00:25:ec:6a:c1:f4:46:6a:5d:fa:67:ce:
d5:5b:3a:ce:81:1d:b1:60:54:a5:fd:8b:ca:38:d3:b6:e3:d2:
96:ed:ed:3e:1d:c0:0a:14:e1:b6:24:2a:c7:30:21:f9:2f:8c:
83:a9:37:84:3c:57:85:a5:57:63:e4:9a:20:62:5a:47:39:91:
71:f5:49:00:c7:14:0b:ed:6b:78:a0:0c:ef:b4:9f:a3:a0:ed:
ff:91:fb:6b:04:8f:5a:a4:bf:49:92:c7:1a:10:1e:e8:a8:5a:
60:d0:8a:d3:ee:27:67:70:1d:91:d2:66:ec:5c:6c:23:1f:80:
fa:39:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:57 2024 by rpki-client on console-fra.rpki-client.org