Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/7F1695F2871411EF981CC64F762E951A.roa
File: 7F1695F2871411EF981CC64F762E951A.roa (raw, json)
Hash identifier: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=
Subject key identifier: 41:5D:89:9B:23:0D:E7:9E:44:54:77:8B:B4:D1:75:A3:F0:41:F8:87
Certificate issuer: /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial: 02
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Authority info access: rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/7F1695F2871411EF981CC64F762E951A.roa
Signing time: Thu 10 Oct 2024 14:32:37 +0000
ROA not before: Thu 10 Oct 2024 14:32:34 +0000
ROA not after: Tue 10 Oct 2034 14:32:34 +0000
asID: 328233
IP address blocks: 80.88.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Validity
Not Before: Oct 10 14:32:34 2024 GMT
Not After : Oct 10 14:32:34 2034 GMT
Subject: CN=6707e585-f809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b4:e2:e6:bd:42:20:e6:d6:01:7a:20:35:54:
d8:d8:40:ac:9f:9c:93:7a:9a:1c:af:ed:73:85:d9:
a2:1d:b5:7b:da:1d:44:1c:1b:fd:b2:d9:16:74:d6:
04:91:8e:c1:e0:13:9a:b9:6d:83:8d:83:2a:fb:cf:
7a:66:ea:33:51:c3:1e:59:18:4b:c0:0f:41:ca:ae:
9b:96:87:31:9f:d8:0d:c4:aa:8b:2f:6f:a2:ab:c7:
79:31:04:3d:d4:42:53:2d:31:d6:31:d3:bd:bb:6e:
99:31:a3:19:fc:14:94:84:93:b1:c8:1e:2c:41:6a:
c1:f5:ad:fb:38:ff:3e:27:90:cb:ea:3b:ea:0e:5b:
dd:64:b9:68:fa:be:6b:e4:1b:12:65:34:24:36:37:
37:c8:e2:66:3b:99:5b:97:26:57:99:ea:b7:f4:79:
8a:d7:cd:d2:1f:6b:61:55:5e:55:2c:53:7c:09:72:
52:9d:6c:9b:9b:e4:74:2b:7c:90:e1:eb:e5:30:61:
15:27:7f:b5:37:7b:b8:be:e4:1e:9d:25:b1:ae:27:
91:ee:b4:1e:64:f3:0f:03:65:0a:29:17:cd:8a:60:
c6:13:eb:43:7d:86:93:42:56:8d:14:5e:83:74:c3:
b1:ec:d5:72:84:55:f3:ba:23:2e:16:f1:b2:c0:4a:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:89:9B:23:0D:E7:9E:44:54:77:8B:B4:D1:75:A3:F0:41:F8:87
X509v3 Authority Key Identifier:
keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/7F1695F2871411EF981CC64F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.88.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ae:d0:36:40:f7:9e:bd:e0:d9:29:9c:fc:ef:5f:1a:fb:b9:
63:d5:0a:72:b8:44:1a:e0:bb:7b:a7:8d:1c:b0:7d:a6:72:b3:
93:27:89:fc:87:b1:34:a7:a5:a7:f2:1b:d4:4b:64:b8:ce:71:
33:bc:30:1c:ed:54:e3:01:dc:1e:1f:fd:d1:23:ce:4b:a1:2a:
83:bc:0a:7b:3b:b5:21:4d:04:23:ca:8f:a9:29:7f:15:05:31:
3f:e7:ed:1e:36:98:01:46:cc:df:8b:71:99:0d:5a:36:7d:d2:
4e:08:a3:82:41:f9:56:14:a7:f1:9d:53:63:3a:8d:a5:d6:ea:
1a:6a:83:8f:4c:a4:4d:1a:51:7f:7c:de:0c:d5:87:01:c8:82:
16:00:d0:7a:70:ca:59:a3:08:37:a4:ca:d6:45:7f:93:c6:48:
14:77:3f:9d:89:e5:83:10:e7:a1:7a:52:4b:8f:41:c1:d1:39:
8f:be:83:58:ee:fa:97:9e:60:de:a9:38:52:a6:ed:9b:c4:8e:
c4:49:f1:cb:4f:e1:59:99:02:02:ab:1b:04:ae:0c:68:9e:7c:
1f:a3:17:9f:83:bd:a1:7d:bc:c1:4f:dc:81:ff:f6:fd:c1:d4:
1f:ba:79:31:50:59:c3:cd:41:1a:2b:19:33:1c:7d:07:c1:0c:
12:dc:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 04:24:29 2024 by rpki-client on console-fra.rpki-client.org