Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/D505C1903E8F11EFAE9EEE8B762E951A.roa
File: D505C1903E8F11EFAE9EEE8B762E951A.roa (raw, json)
Hash identifier: NwidDV20CYZEDHZ6t+ZNN3IKmoqOlGtHrBQtSGaeJsg=
Subject key identifier: 8A:E8:00:D2:58:28:B0:5D:A0:B6:7E:DE:BC:4D:17:96:FE:D7:90:75
Certificate issuer: /CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Certificate serial: 0193
Authority key identifier: EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
Authority info access: rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/D505C1903E8F11EFAE9EEE8B762E951A.roa
Signing time: Wed 10 Jul 2024 07:41:35 +0000
ROA not before: Wed 10 Jul 2024 07:41:24 +0000
ROA not after: Wed 10 Jul 2030 07:41:24 +0000
asID: 9129
IP address blocks: 195.202.64.0/19 maxlen: 24
217.199.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Validity
Not Before: Jul 10 07:41:24 2024 GMT
Not After : Jul 10 07:41:24 2030 GMT
Subject: CN=668e3b2f-1942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:d5:ed:49:75:5e:2b:28:3d:dd:7a:32:b4:
30:64:51:37:19:12:2e:72:52:e0:88:c2:21:41:e3:
4c:10:f7:30:02:e4:1a:f0:20:ba:da:e3:19:3a:ac:
fd:56:5f:c4:33:ed:f3:b0:1e:47:3b:8b:f1:ba:38:
78:50:b1:b8:e8:0e:94:d1:3e:3b:df:c0:ee:ca:ae:
7f:a3:d9:5c:b5:27:0f:7d:4d:60:ff:55:17:27:38:
f6:e1:2b:cd:4b:00:46:33:ae:25:64:75:55:d4:75:
57:86:9a:22:1c:3b:de:68:c6:ec:9d:69:d7:f5:7d:
a8:00:0b:84:bd:1b:79:ea:10:c7:b0:ca:74:8c:a1:
1e:f2:c3:91:47:2b:cf:81:13:55:85:9c:25:50:08:
6f:66:d7:17:66:c7:b2:9d:99:5f:c7:1a:ee:19:eb:
15:5a:6a:8f:af:9c:9f:1f:bf:a3:db:9a:8a:8d:84:
b7:95:38:c9:6b:c0:b8:ee:2d:86:52:a6:55:8e:23:
2d:c5:f5:40:d8:65:66:04:3e:d8:3e:89:64:a0:e9:
7c:04:f1:f0:fb:87:66:fe:68:84:9e:b1:8a:83:a3:
d0:cd:ac:e7:b9:32:b8:4e:61:fe:0a:86:9e:18:23:
59:67:64:4d:b7:e2:e6:75:00:24:21:1c:5f:93:85:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E8:00:D2:58:28:B0:5D:A0:B6:7E:DE:BC:4D:17:96:FE:D7:90:75
X509v3 Authority Key Identifier:
keyid:EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/D505C1903E8F11EFAE9EEE8B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.202.64.0/19
217.199.144.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:5e:63:0b:9b:e4:e9:dc:cf:6c:ef:a6:f0:b4:a1:7a:41:f3:
55:76:13:42:05:71:32:26:66:c9:25:d1:0e:0a:d4:1a:4b:ec:
e9:e1:07:f5:f6:e1:ce:77:53:12:35:6f:80:3d:12:85:af:bc:
4c:3a:85:4a:fd:d1:5e:ab:90:0c:d4:5b:73:1e:a0:d6:0b:43:
1c:e5:18:76:ff:31:20:fe:5f:1d:85:6c:65:a8:43:04:d0:53:
d8:c3:36:82:88:61:c8:de:0f:e1:e5:5b:63:52:c2:91:7f:f6:
6f:f3:15:ee:09:d1:3c:02:ed:62:cd:f5:3a:e1:6f:8f:2c:39:
7c:78:ae:ad:23:2d:7a:0c:78:e9:3b:fa:f7:1c:a4:ea:d0:14:
2d:9f:78:2b:2c:cc:84:4b:63:d0:9b:ca:b0:0c:24:84:e1:ac:
d6:63:f7:ae:40:f1:64:b4:71:a9:1a:dc:0b:95:59:6f:dd:e6:
78:9b:a2:95:2b:1f:2a:8e:30:55:f0:ca:fb:c8:de:94:ff:74:
ba:62:b1:6f:8d:95:58:f6:35:ec:96:4e:5a:72:93:ac:07:3f:
6d:c5:1b:f3:bb:fb:94:91:37:27:b6:0b:40:32:d1:79:56:ad:
22:ea:2a:81:86:49:bd:ca:38:fd:47:04:8a:ac:2e:78:c1:4e:
9f:5f:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:17 2024 by rpki-client on console-fra.rpki-client.org