Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/9073DE6CC4D311EEB0B9C867775412E6.roa
File: 9073DE6CC4D311EEB0B9C867775412E6.roa (raw, json)
Hash identifier: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=
Subject key identifier: 42:54:6F:8D:D1:E8:25:5F:42:31:36:33:C0:86:EA:F7:43:38:5D:BE
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 39
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/9073DE6CC4D311EEB0B9C867775412E6.roa
Signing time: Tue 06 Feb 2024 09:39:04 +0000
ROA not before: Tue 06 Feb 2024 09:39:00 +0000
ROA not after: Sat 06 Feb 2027 09:39:00 +0000
asID: 36905
IP address blocks: 154.126.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 09:39:00 2024 GMT
Not After : Feb 6 09:39:00 2027 GMT
Subject: CN=65c1fe37-554a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:14:4c:79:56:da:0c:c3:8c:24:ec:93:5b:
26:0b:0b:64:63:9a:2d:ba:10:2b:e7:85:49:18:24:
10:bd:c9:44:12:01:b6:d5:7e:5a:f6:8b:6f:58:b4:
2d:9b:ef:9e:14:1f:b9:38:bb:5f:34:01:c7:9c:59:
41:a3:12:3e:d2:c4:24:9f:49:35:71:fb:0e:c3:8b:
1d:fa:fc:e6:9b:ff:53:3c:ea:18:b7:19:ba:4b:4a:
05:7e:9e:01:89:8c:bb:f2:73:42:c5:cc:8e:76:91:
c7:76:b8:93:1a:b5:82:7b:7e:26:54:91:59:0c:1d:
17:66:64:d4:53:a0:f1:28:50:3c:ac:91:bc:82:dd:
38:69:a5:58:1c:1e:e0:1a:20:70:70:96:6b:1f:f4:
cb:ea:96:fb:39:4f:f1:55:30:0f:32:8c:84:81:9d:
fb:11:c1:05:36:d6:7e:22:b8:21:50:55:de:f9:99:
8e:7a:3d:8a:44:42:df:0b:aa:c4:75:40:c3:56:26:
2f:e9:85:83:31:c5:9a:56:c9:66:05:d6:11:16:2c:
bb:1d:cc:11:d9:ba:3f:73:2c:18:69:d8:ba:64:79:
6d:13:bd:37:fb:cd:1a:b6:16:e4:97:c2:14:cc:06:
5b:63:04:89:ad:c8:95:20:0f:e0:98:7a:31:bf:ea:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:54:6F:8D:D1:E8:25:5F:42:31:36:33:C0:86:EA:F7:43:38:5D:BE
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/9073DE6CC4D311EEB0B9C867775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.184.0/24
Signature Algorithm: sha256WithRSAEncryption
59:38:36:c5:a3:52:2b:3c:3a:36:5e:fd:fa:b2:72:49:8c:7b:
40:34:55:a4:e5:85:8b:7a:1d:73:ed:ca:97:47:4f:b5:35:e6:
94:c9:34:97:51:bf:12:8e:da:24:bd:9a:70:7f:98:a3:a8:3c:
4a:0d:71:52:a0:43:f1:44:29:27:ea:0e:ed:1f:f5:42:0e:14:
eb:32:0e:bc:c5:8c:46:bf:8e:5b:41:2d:fb:ea:d9:1e:f7:ea:
df:4f:bb:d9:f8:84:37:16:53:21:ab:58:4c:aa:12:14:72:df:
d6:79:84:b8:21:46:7d:8f:b4:f3:ad:bf:5a:82:26:19:6f:90:
dc:aa:83:74:a0:7f:78:a3:c5:7c:74:70:43:00:aa:4b:62:e4:
3a:b5:ca:f0:cf:7a:4e:86:ef:eb:af:5a:46:96:d0:df:e7:e3:
0f:c5:67:06:86:e7:05:cd:d0:60:f6:41:f7:35:f6:72:cb:0d:
0b:20:fb:56:27:bd:a7:56:8d:b5:cd:39:7e:c6:69:3b:b6:f5:
de:d5:22:ab:57:95:08:da:ed:a0:a6:3b:53:00:49:30:aa:d0:
b1:24:87:9f:a7:0a:5f:3a:8b:bb:77:d8:c0:14:98:d2:98:10:
49:ee:08:fe:d1:ec:d1:c1:d2:bc:e7:8f:2d:ad:c3:b3:8d:ef:
98:cd:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:33 2024 by rpki-client on console-fra.rpki-client.org