Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/8BA49FD0C4D211EE9EC4EB65775412E6.roa
File: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (raw, json)
Hash identifier: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=
Subject key identifier: 85:6D:DC:BF:9C:EA:9D:02:24:2F:4E:BD:AB:BB:38:0D:07:C3:AD:2C
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 2B
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/8BA49FD0C4D211EE9EC4EB65775412E6.roa
Signing time: Tue 06 Feb 2024 09:31:46 +0000
ROA not before: Tue 06 Feb 2024 09:31:43 +0000
ROA not after: Sat 06 Feb 2027 09:31:43 +0000
asID: 36905
IP address blocks: 154.126.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 09:31:43 2024 GMT
Not After : Feb 6 09:31:43 2027 GMT
Subject: CN=65c1fc82-13f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:76:91:96:09:54:62:28:62:ba:c0:84:31:
b5:21:fd:24:7a:ba:6d:32:76:ef:49:4a:89:0b:be:
02:2d:b1:e4:52:d7:ba:fa:71:94:e7:77:be:6b:3d:
93:79:be:3a:a0:0e:02:87:10:78:5e:a6:3f:6a:fd:
28:3b:f6:6b:f6:8f:c6:80:15:6f:32:ad:61:53:c5:
f2:92:7b:4e:c0:ce:1b:bb:64:6d:18:c1:b5:f8:20:
bd:3c:e2:17:1d:9a:9c:c8:f8:ac:19:67:f7:11:6f:
3b:c8:38:11:db:a5:9d:7b:07:93:b9:ba:0f:12:79:
a5:02:8d:c1:c1:d4:6e:3e:d1:23:1a:11:bc:e3:d8:
a8:80:9f:54:85:bf:46:2e:a4:3b:65:9c:11:af:83:
7a:85:b5:ba:65:aa:5f:e4:c3:a6:e4:e8:18:39:ea:
51:6d:79:d2:4a:b7:71:29:01:6e:b9:6a:0e:17:af:
2b:a5:2e:3f:b1:80:7f:45:2b:78:53:8c:63:4f:24:
a7:d7:0d:8a:d8:54:97:0b:60:97:e6:f9:cb:29:62:
ac:e2:10:48:f7:76:30:1b:69:e3:3d:39:da:e3:dd:
ad:7a:21:35:ce:30:64:3e:8b:ee:ac:fc:e2:43:d2:
e8:2d:d0:9b:6f:8b:f8:78:bd:ae:ff:45:97:e8:56:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6D:DC:BF:9C:EA:9D:02:24:2F:4E:BD:AB:BB:38:0D:07:C3:AD:2C
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/8BA49FD0C4D211EE9EC4EB65775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.179.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:51:6f:08:5c:5d:a7:e0:0d:7b:0c:1d:d0:00:ed:21:3f:30:
6f:f3:24:b4:74:ad:50:86:2e:7a:21:ae:7a:37:37:92:7e:7e:
fc:b9:a6:e7:96:da:e4:6c:d1:7a:b1:26:3e:87:18:3d:2a:4d:
e1:ab:31:5e:39:ab:b1:66:0c:d3:12:da:e3:c5:0e:53:35:33:
cc:18:16:b2:0a:47:f9:0b:e9:18:f1:c4:e1:9b:93:96:e7:e1:
94:33:3a:4b:29:16:85:51:a5:6c:ef:e6:4f:a5:90:d7:d0:59:
a9:5f:c8:06:d4:a9:0b:a2:18:a6:ad:62:ed:22:56:ab:08:8e:
28:af:16:85:8f:9e:81:71:9f:06:3a:9e:58:92:33:6e:b9:f4:
08:a6:d7:bd:ae:46:11:6b:54:9a:14:5c:ed:8c:89:af:3b:24:
73:84:30:f4:72:b5:15:91:2b:51:b7:23:24:95:f7:70:cc:75:
56:55:76:06:b7:0a:4a:2c:b3:5d:6a:04:6a:25:38:ec:36:49:
13:36:23:3d:cc:39:58:b4:e3:cf:35:e3:c6:81:8f:ec:06:fb:
40:a6:63:e0:87:35:2b:3e:e9:15:3c:7f:25:74:e7:8e:a8:e9:
8b:44:e7:7c:30:8a:79:12:74:d9:96:1e:08:61:17:5f:07:2f:
33:eb:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:33 2024 by rpki-client on console-fra.rpki-client.org