Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/6943C2245A1C11EF8AD3AB9F762E951A.roa
File: 6943C2245A1C11EF8AD3AB9F762E951A.roa (raw, json)
Hash identifier: 4I82hmzIVlcUSpjIKbPk3aHDkUVJd1jgQcDFX1IaaAM=
Subject key identifier: DC:96:8A:9C:5A:90:E0:0F:FA:C7:B5:EC:49:86:0E:5C:0A:D0:D9:E4
Certificate issuer: /CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
Certificate serial: 20
Authority key identifier: F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
Authority info access: rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/6943C2245A1C11EF8AD3AB9F762E951A.roa
Signing time: Wed 14 Aug 2024 09:05:54 +0000
ROA not before: Wed 14 Aug 2024 09:05:51 +0000
ROA not after: Mon 14 Aug 2034 09:05:51 +0000
asID: 37114
IP address blocks: 212.96.17.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
Validity
Not Before: Aug 14 09:05:51 2024 GMT
Not After : Aug 14 09:05:51 2034 GMT
Subject: CN=66bc7372-1b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:b5:3e:28:72:f2:ef:b3:3a:28:3f:3e:4c:
1a:d8:c3:c6:b3:25:df:e4:a4:62:62:1c:b5:7a:e6:
ac:39:42:9d:7c:18:03:ac:bd:3b:df:07:d4:76:65:
ae:fd:4e:d4:48:aa:3f:b8:b0:64:5e:34:10:00:3e:
ed:29:eb:1d:ac:52:59:32:d2:04:c2:92:73:03:8b:
33:45:81:0c:fe:dd:2e:4c:1c:76:27:59:a8:17:b2:
ba:dd:6c:12:9a:c2:38:7f:9a:8d:36:b2:d5:2a:e0:
f1:31:ac:c7:95:32:ee:09:49:f7:bf:22:a6:f1:8e:
68:d9:a1:78:d5:9b:72:b5:17:71:a0:c5:c7:1e:ac:
ed:67:51:cf:7c:b4:f5:d7:94:43:e0:bb:fb:1b:10:
13:6c:c6:1b:d7:95:ed:7e:8e:40:7b:64:61:70:f8:
cc:42:cb:0c:99:c4:e8:3a:bc:1f:99:c4:fd:57:05:
11:5f:60:e0:fb:c9:70:21:3f:54:73:bc:06:d7:40:
70:65:4d:0a:ed:c3:e4:ac:8b:84:48:b1:08:36:35:
fe:dc:ef:15:b0:40:e5:e1:4f:20:a4:33:24:36:1d:
63:f1:df:49:d2:dc:09:96:a2:9c:8f:3b:78:45:ec:
53:1e:ff:83:2e:98:e6:c9:5e:7b:0c:38:eb:8f:80:
f8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:8A:9C:5A:90:E0:0F:FA:C7:B5:EC:49:86:0E:5C:0A:D0:D9:E4
X509v3 Authority Key Identifier:
keyid:F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/6943C2245A1C11EF8AD3AB9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
212.96.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:4b:a3:30:30:8a:19:76:5b:2f:62:70:88:bf:fb:6a:10:d2:
85:c0:7f:53:4b:80:54:b7:5e:d4:04:7b:c4:26:78:69:d3:d2:
87:7c:17:66:1b:b9:f7:ec:20:05:1c:34:0e:69:6b:20:1a:d9:
1f:26:05:92:d9:e5:53:fc:06:4b:8a:0c:67:3a:14:ad:f8:71:
55:23:49:03:10:7b:64:99:92:27:cf:76:7e:da:13:b8:d1:51:
b9:24:95:08:f5:ab:75:9f:6c:d6:64:eb:2d:15:dc:d7:6a:e9:
19:91:82:6b:cb:c8:bb:9b:7f:59:ea:a6:c4:d1:c9:d1:a1:dc:
e7:96:df:71:35:86:3f:71:71:1a:fb:68:64:42:89:30:81:f4:
f0:4c:8a:f3:7c:1a:64:e8:7f:4c:c4:43:af:b4:5f:75:5e:1d:
f0:27:e2:0c:d5:e6:26:7f:c9:0f:95:5c:80:e9:58:6d:92:8c:
d3:39:e7:12:f7:e5:a1:71:35:e8:6b:3d:40:7b:9b:b2:97:98:
86:61:30:d8:45:49:71:bc:99:99:9c:d0:48:64:6a:7c:ea:1d:
4f:c2:93:74:42:97:2d:ab:fc:3a:e5:cd:2a:65:0d:57:da:4d:
79:1c:cb:45:63:52:e8:69:2e:90:0e:a9:de:5a:8e:e2:85:07:
83:d3:92:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 06:21:06 2024 by rpki-client on console-ams.rpki-client.org