Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/3145EA5A8D4311EF9CF7F061762E951A.roa
File: 3145EA5A8D4311EF9CF7F061762E951A.roa (raw, json)
Hash identifier: ThX67wYUKN+i+boktaN2Xiib8opZnnqBFpksjA7hm/0=
Subject key identifier: 38:43:C5:BC:25:73:CB:36:0F:CC:94:2D:EE:FB:7C:CE:5D:BB:E4:04
Certificate issuer: /CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Certificate serial: 27
Authority key identifier: 1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
Authority info access: rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/3145EA5A8D4311EF9CF7F061762E951A.roa
Signing time: Fri 18 Oct 2024 11:22:00 +0000
ROA not before: Fri 18 Oct 2024 11:21:56 +0000
ROA not after: Wed 18 Oct 2034 11:21:56 +0000
asID: 37680
IP address blocks: 155.93.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Validity
Not Before: Oct 18 11:21:56 2024 GMT
Not After : Oct 18 11:21:56 2034 GMT
Subject: CN=671244d8-e6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:48:9a:a7:94:2b:53:56:8c:cf:e9:79:c8:
89:e3:8a:c9:12:6e:30:63:23:9a:8e:d3:c9:32:49:
53:85:95:e6:97:9a:e4:95:cb:e2:da:9b:ae:84:72:
f6:5f:aa:54:7f:43:94:45:d1:93:ad:0b:6c:bd:5b:
06:d4:1d:0d:b9:04:fa:d0:20:29:25:e1:db:be:80:
3d:51:1d:ad:c2:26:12:55:d2:36:f0:13:a5:2b:34:
4c:98:0f:40:80:66:07:c9:e9:79:b1:de:84:e7:7d:
05:cd:37:e7:8d:45:fc:90:0a:e6:c2:41:e7:38:2a:
0e:ea:84:eb:e4:e5:5d:dc:bc:01:cb:f5:60:8d:e4:
6d:1b:d6:fc:11:01:08:b0:df:c9:89:6a:4a:92:cf:
ab:3b:3b:54:32:51:f5:e4:23:86:4a:d9:79:76:11:
78:77:e4:3e:1c:d2:6e:ee:84:64:ea:1b:bb:1d:d6:
94:3b:af:4e:21:61:ed:32:53:eb:4c:cd:7f:b0:1c:
29:1d:8e:9b:6a:7e:07:84:95:09:7c:33:14:18:94:
f0:46:24:05:a2:4b:83:16:55:0b:11:ec:f7:66:8c:
c4:53:0f:3b:76:a4:08:72:23:74:62:f1:b1:8a:dc:
df:90:9a:d2:77:07:e2:1b:de:17:a4:58:ad:7d:ff:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:C5:BC:25:73:CB:36:0F:CC:94:2D:EE:FB:7C:CE:5D:BB:E4:04
X509v3 Authority Key Identifier:
keyid:1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/3145EA5A8D4311EF9CF7F061762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.93.240.0/20
Signature Algorithm: sha256WithRSAEncryption
17:7e:92:df:5e:0d:ae:2c:9c:1f:f9:82:6d:7d:37:6e:5d:be:
6e:f0:f8:8d:85:99:98:ba:77:65:99:4a:93:05:29:09:bb:02:
cd:76:c5:f5:5b:12:1e:4c:fd:e8:e2:54:c5:94:47:b9:03:de:
c2:f5:a6:5a:61:42:97:7c:02:cb:b6:4b:8d:e4:ae:f2:16:ed:
9e:3b:4c:85:7f:fa:15:a3:42:87:48:69:25:c2:c9:05:34:58:
47:f7:c5:e3:6c:ea:07:6c:fa:af:f8:9b:d7:c3:5c:42:9c:5f:
96:72:65:01:cd:93:5e:e5:d8:15:98:10:40:f2:33:57:8f:7a:
84:4f:45:09:07:81:2d:7c:3e:dd:6a:04:b0:9e:a5:3e:d6:c3:
8b:7f:89:b1:7b:80:ce:30:3b:fb:5a:5b:9d:fc:c5:bc:60:2c:
d9:fb:30:14:f8:01:9b:3a:90:14:37:84:14:42:37:e2:13:81:
03:43:ed:34:d4:f4:70:e3:bc:08:f0:53:57:52:f7:7a:50:b1:
bc:de:5d:22:e4:6f:ff:a8:be:37:a6:05:40:8b:e7:22:f4:78:
15:ee:72:05:5d:97:df:f2:0f:a9:ae:64:d9:84:a2:2b:f6:56:
6b:44:7e:b7:ba:42:86:2a:b4:04:a7:4c:3f:3a:1b:f0:bd:17:
a1:81:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:52 2024 by rpki-client on console-fra.rpki-client.org