Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/1A50080EC4D411EE9683B268775412E6.roa
File: 1A50080EC4D411EE9683B268775412E6.roa (raw, json)
Hash identifier: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=
Subject key identifier: F7:26:84:D5:E5:90:A5:D2:21:92:62:F2:3D:61:5A:FE:47:65:47:EF
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 41
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/1A50080EC4D411EE9683B268775412E6.roa
Signing time: Tue 06 Feb 2024 09:42:55 +0000
ROA not before: Tue 06 Feb 2024 09:42:51 +0000
ROA not after: Sat 06 Feb 2027 09:42:51 +0000
asID: 36905
IP address blocks: 154.126.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 09:42:51 2024 GMT
Not After : Feb 6 09:42:51 2027 GMT
Subject: CN=65c1ff1f-af13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:fa:c7:f5:00:be:ac:d4:1a:44:14:11:9c:
9b:e3:2d:4d:69:c5:0f:50:34:8a:ec:2c:ba:86:39:
88:4b:21:50:46:57:4d:2e:c1:7d:09:ec:6b:8d:5c:
38:17:01:fc:9f:4d:b7:47:82:cd:8c:d0:83:5e:13:
50:e8:ef:6e:0d:37:09:a0:eb:c1:ff:71:94:0f:05:
e8:7e:9b:d7:6f:d7:37:0b:37:06:75:8c:b3:ac:8f:
76:11:5c:4b:6e:a4:ab:a8:52:06:cc:93:c0:87:12:
01:2b:9d:71:66:72:09:95:e5:cb:12:bf:26:09:ea:
8b:91:ad:69:91:08:04:07:06:ba:73:0d:f5:b6:f0:
ed:f5:b9:7e:b8:91:93:95:ab:5a:ee:50:4a:c1:ac:
18:01:e2:d7:fb:73:70:5c:8d:8e:d4:58:2d:ec:be:
49:e2:29:98:7f:96:28:96:2d:43:47:93:a3:ee:6b:
0d:21:e6:d6:92:89:f2:61:a4:c1:38:4a:af:a2:51:
8d:de:c9:f8:11:6b:06:e4:a9:60:81:d7:d0:eb:fc:
a1:f0:ac:a2:1b:0d:11:f5:88:55:e6:5c:66:bc:f6:
1f:de:15:6b:17:5c:cd:df:12:24:57:9b:ab:06:a4:
66:ea:e9:3a:a2:d2:1a:ef:9a:b0:52:ad:50:e6:c0:
f4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:26:84:D5:E5:90:A5:D2:21:92:62:F2:3D:61:5A:FE:47:65:47:EF
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/1A50080EC4D411EE9683B268775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.189.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:03:a1:48:d9:79:a1:31:db:9b:f7:89:7c:46:c8:0f:bb:48:
66:a5:0e:dc:73:d0:ee:e4:81:ae:cb:f2:90:66:75:f5:55:cc:
d3:24:66:d8:6a:d5:bd:d9:06:6e:02:ec:97:cf:6d:9f:f5:83:
87:5d:0c:f5:98:15:00:10:17:ab:66:ae:85:d9:ef:8d:90:c7:
53:91:db:aa:5e:d3:50:5a:57:fa:e4:ef:a6:30:f5:30:16:19:
96:f9:b8:f9:fe:a6:da:85:8d:1b:76:ad:59:01:de:e3:15:a7:
44:ae:ed:c5:99:7e:49:82:1a:43:3c:b1:9a:ac:f6:11:b3:ec:
83:ad:dc:d7:92:07:32:b0:40:a9:e6:56:77:df:f9:f7:84:99:
ac:cf:94:bf:e0:0a:a8:2b:30:85:6f:13:61:78:6c:9c:54:86:
28:18:61:4a:ab:e9:56:3f:07:4e:77:86:be:2b:04:ac:d6:fd:
2d:f5:c0:69:b8:a3:ed:d2:e9:b4:1a:0d:18:80:41:0b:a3:01:
c7:d4:0c:a2:92:04:de:8e:ae:a7:59:a3:16:bc:d7:5b:d3:d2:
ca:26:a6:3e:50:5a:82:e4:d2:87:60:ec:0c:52:4b:b0:ae:7c:
28:82:95:95:5c:79:1b:ed:29:cf:19:14:a9:0e:77:2d:c3:7f:
e3:a5:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org