Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/9E1AF0A0FD4711EC9F068D84F1222468.roa
File: 9E1AF0A0FD4711EC9F068D84F1222468.roa (raw, json)
Hash identifier: OYRutMVdajDes19ouQX0+Ka7gsMW8d0EizZoOQK96fk=
Subject key identifier: 61:56:59:19:DD:E8:6A:6B:E5:DD:3C:CC:47:7A:10:23:50:84:F2:84
Certificate issuer: /CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Certificate serial: 09EA
Authority key identifier: 4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
Authority info access: rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/9E1AF0A0FD4711EC9F068D84F1222468.roa
Signing time: Wed 06 Jul 2022 16:20:58 +0000
ROA not before: Wed 06 Jul 2022 16:20:53 +0000
ROA not after: Wed 24 Jul 2024 16:20:53 +0000
asID: 6083
IP address blocks: 192.94.246.0/24 maxlen: 24
192.96.24.0/24 maxlen: 24
192.96.25.0/24 maxlen: 24
192.96.26.0/24 maxlen: 24
192.96.27.0/24 maxlen: 24
192.96.28.0/24 maxlen: 24
192.96.29.0/24 maxlen: 24
192.96.30.0/24 maxlen: 24
192.96.31.0/24 maxlen: 24
192.96.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2538 (0x9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Validity
Not Before: Jul 6 16:20:53 2022 GMT
Not After : Jul 24 16:20:53 2024 GMT
Subject: CN=62c5b66a-3889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:a4:94:98:27:cb:c1:bc:c2:48:ac:b6:f3:
1b:86:21:8e:9a:f1:e9:c3:79:98:68:6b:e4:65:a4:
df:8f:4c:b0:f7:93:10:49:78:a8:23:92:f3:87:30:
3d:1c:e3:bb:97:1f:c8:cb:d4:31:5a:3d:0d:17:15:
98:03:9f:00:2f:ae:44:7f:20:eb:53:b8:4b:eb:b3:
0e:d8:c7:28:f5:9c:b9:f6:f9:e1:06:fe:8b:ab:2d:
7f:0c:ef:36:2d:fc:2e:b6:22:d5:c2:6e:b0:ca:57:
a7:b9:d5:6b:df:5b:3d:11:4b:19:e5:8b:d3:08:19:
2d:04:6d:b4:f9:44:f8:73:dd:1d:03:62:36:76:35:
e1:4a:19:4c:74:ae:d2:58:1c:e9:6f:d2:4e:d5:8a:
b0:2e:d4:bf:09:e1:da:0f:28:32:cc:ba:9e:b9:a7:
23:31:f0:f6:2e:39:98:53:9c:96:ca:32:ce:49:d1:
8f:72:2f:79:88:fe:48:7d:68:d9:02:3d:ac:0c:db:
9e:30:6f:4b:8f:c3:ba:e6:af:f4:56:44:d7:f6:2d:
c1:f3:c9:d8:9c:5d:e4:bb:88:8f:a8:eb:9f:77:d1:
0e:80:55:65:8e:39:ec:ea:02:c2:12:18:fc:7a:c1:
4b:32:2e:47:cd:06:02:4d:e3:7a:43:ce:61:0f:00:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:56:59:19:DD:E8:6A:6B:E5:DD:3C:CC:47:7A:10:23:50:84:F2:84
X509v3 Authority Key Identifier:
keyid:4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/9E1AF0A0FD4711EC9F068D84F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.94.246.0/24
192.96.24.0/21
192.96.177.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b3:79:bf:27:0e:ac:c5:e9:2a:73:13:e2:48:3b:33:d7:3b:
2a:3f:ec:41:e5:b1:7b:78:8b:25:39:9b:ae:ff:ca:fe:d5:09:
f5:41:78:aa:6e:1f:a3:26:e7:04:50:8a:5a:a0:15:43:98:9f:
4e:5e:f7:ac:e9:b6:2b:03:ad:c5:c1:89:98:c2:48:d6:09:2b:
50:4a:3e:77:11:71:70:97:ed:30:57:b6:c0:d9:45:d0:07:77:
78:95:b9:b5:84:42:ac:7f:a7:42:00:1d:d2:9d:1d:ca:a8:57:
82:e1:83:9e:ce:52:16:24:8d:54:1d:37:85:2c:6f:aa:77:66:
6d:99:d4:0e:ec:73:f4:59:ff:35:5a:86:42:7b:fc:cf:a5:13:
3a:e0:dd:c2:63:87:60:c2:f0:22:de:3f:8d:f1:ac:17:2d:4c:
89:ba:f7:7a:42:61:79:5a:d8:7c:61:38:e3:e0:55:44:fe:16:
49:cb:e0:aa:27:68:1b:0a:d3:3c:c4:dd:7a:6b:eb:0c:03:e9:
be:33:d3:df:33:0e:fa:07:fb:2b:ec:b6:66:c4:3d:ed:c6:44:
fd:ef:86:c4:e6:6f:3c:10:89:0d:16:cc:d0:a5:d9:66:1d:c5:
18:bb:b0:7e:77:e0:d3:02:2a:fa:a7:08:c8:1e:e1:3f:df:47:
43:cc:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:38:18 2024 by rpki-client on console-ams.rpki-client.org