Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/52716D10C4C811EEA1131155775412E6.roa
File: 52716D10C4C811EEA1131155775412E6.roa (raw, json)
Hash identifier: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=
Subject key identifier: D0:68:AF:A6:2C:CA:60:83:20:99:2B:80:68:E1:B8:2F:80:EA:6B:3F
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 07
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/52716D10C4C811EEA1131155775412E6.roa
Signing time: Tue 06 Feb 2024 08:18:35 +0000
ROA not before: Tue 06 Feb 2024 08:18:32 +0000
ROA not after: Sat 06 Feb 2027 08:18:32 +0000
asID: 36905
IP address blocks: 154.126.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 08:18:32 2024 GMT
Not After : Feb 6 08:18:32 2027 GMT
Subject: CN=65c1eb5b-5c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:5f:4a:98:62:07:5b:9a:95:cb:cd:97:4b:
3d:34:d0:17:fd:ab:03:ad:db:34:75:0b:cf:f3:87:
08:a1:a5:57:f2:47:00:ab:72:59:4b:75:06:51:94:
f3:7f:ce:ac:5e:d9:21:ee:f7:e0:1b:e1:7a:1c:41:
54:ce:89:44:40:57:40:fa:82:ce:79:70:00:09:a1:
d3:67:1c:76:43:b7:5d:bc:24:7c:da:67:ae:cb:39:
c1:95:12:54:98:d2:68:ed:33:6a:ba:61:d0:d6:b2:
c8:4a:cb:79:ca:2f:3b:9c:9d:2e:43:bb:74:c0:c2:
76:1a:30:06:ed:7c:2c:a8:99:84:f4:5c:fa:ae:c4:
de:89:c6:d9:96:63:73:a0:29:21:7c:a6:7b:13:e0:
b6:0e:e5:fb:c8:c3:3e:c2:bc:73:5c:aa:75:1d:51:
dc:65:30:17:59:e5:06:01:ef:76:b5:d0:52:8e:05:
e0:8e:ae:ea:80:16:13:03:24:85:97:6a:33:09:d4:
82:3a:6e:cf:32:cb:69:c3:ea:5a:57:82:aa:fc:b3:
15:80:c5:96:47:bd:aa:38:04:31:49:16:82:96:cc:
0f:72:7a:e7:54:5a:bd:54:11:b7:68:4e:0e:7a:56:
e4:f2:9b:6d:c5:b4:66:dd:e4:d3:70:e4:87:a3:e7:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:68:AF:A6:2C:CA:60:83:20:99:2B:80:68:E1:B8:2F:80:EA:6B:3F
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/52716D10C4C811EEA1131155775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.161.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:69:2f:f4:b7:29:f5:ff:94:b4:16:ca:d3:4a:7d:2e:3d:af:
15:e8:97:6c:99:48:57:7e:1f:2d:00:12:be:7b:38:1a:63:a0:
12:ff:66:9b:6f:06:62:1e:07:b5:f0:79:db:6c:17:de:60:ba:
76:52:ad:90:58:79:0a:fc:26:86:39:5a:62:29:61:60:b2:f5:
37:1b:3c:db:92:22:56:fc:f8:ca:b7:c7:bb:57:04:d4:19:8f:
3b:b7:d9:18:74:6d:e1:97:0e:89:6f:c6:c0:f0:8e:3b:eb:e7:
4d:14:51:bb:73:99:97:53:b8:33:ba:76:1b:03:dd:7a:07:4b:
0a:21:4f:d1:02:5e:19:e9:55:84:f3:9f:8f:39:12:fa:b8:c0:
bc:3f:49:b3:4f:d0:38:81:7a:24:ee:ce:7a:4d:83:b1:bc:7b:
82:5a:f0:08:42:dd:ee:b2:dc:0c:bb:30:3d:7e:4f:a2:df:5e:
fe:6f:21:06:d7:8e:e6:42:e6:e5:2e:b1:87:34:29:16:6b:40:
75:de:0d:55:ef:68:8c:91:f3:5f:34:47:d7:6f:65:94:d8:b3:
cf:48:5d:32:0e:b7:67:bc:a0:e7:62:e3:5d:a9:d7:ad:80:ac:
36:da:20:54:1d:2b:89:74:26:fd:e5:ac:5f:0d:c7:ad:8b:1a:
af:de:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:33 2024 by rpki-client on console-fra.rpki-client.org