Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/95C2E55CC4CE11EEB298E25F775412E6.roa
File: 95C2E55CC4CE11EEB298E25F775412E6.roa (raw, json)
Hash identifier: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=
Subject key identifier: 8C:83:54:25:02:D0:B2:A2:9F:58:07:EF:46:0C:21:33:9A:53:72:C9
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 1B
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/95C2E55CC4CE11EEB298E25F775412E6.roa
Signing time: Tue 06 Feb 2024 09:03:25 +0000
ROA not before: Tue 06 Feb 2024 09:03:21 +0000
ROA not after: Sat 06 Feb 2027 09:03:21 +0000
asID: 36905
IP address blocks: 154.126.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 09:03:21 2024 GMT
Not After : Feb 6 09:03:21 2027 GMT
Subject: CN=65c1f5dd-87df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f0:2f:1f:16:0f:25:3f:6c:1b:62:4a:83:79:
a6:a6:37:5e:40:e8:7b:47:9c:b7:ff:e3:9b:2c:0b:
1a:9d:a7:59:af:2a:97:05:0b:f9:c6:45:a2:8b:4b:
fc:8f:2f:10:2b:8e:a6:90:84:b0:0a:d9:1b:58:1e:
62:cc:81:62:58:01:39:d0:0d:fe:b0:7c:e2:25:81:
6f:a8:90:24:22:d2:fe:5c:44:71:d5:7b:bd:48:96:
06:fc:f6:0b:f6:c5:33:f8:fc:06:55:bf:38:06:7f:
2b:b0:84:75:c6:ce:56:2c:2c:4f:a0:92:61:a3:e8:
c7:a4:29:f0:26:09:f8:7d:10:30:76:62:ba:68:60:
15:9e:2a:36:c1:de:2d:1b:ad:2b:90:bb:e7:13:ad:
d7:49:be:b6:c9:b4:41:53:0a:81:96:77:90:0c:39:
76:9f:8c:dc:69:00:fa:a8:2c:a2:de:46:bb:12:20:
b5:98:49:2f:be:f7:ec:f0:f1:1f:1f:b4:32:e0:0c:
d4:e3:77:e9:cc:ca:6c:51:5f:33:c4:eb:af:d8:35:
a6:d5:89:10:2a:d3:71:1c:89:fe:6a:78:6b:ae:af:
ec:49:58:c1:eb:3d:49:9a:68:b9:03:16:d6:90:21:
02:cd:d7:73:21:f3:40:8c:0c:80:6f:1a:d0:7e:75:
75:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:83:54:25:02:D0:B2:A2:9F:58:07:EF:46:0C:21:33:9A:53:72:C9
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/95C2E55CC4CE11EEB298E25F775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ae:c6:0f:56:85:97:f6:e8:41:b5:b4:2f:33:fb:c0:9b:32:
dc:96:f2:f3:c8:d7:df:43:e3:3c:55:23:79:65:34:6d:57:95:
f5:70:e5:92:52:7d:b7:fb:b0:a0:57:71:8f:15:58:b2:cc:19:
c1:fd:4b:8c:76:ec:5b:4e:71:3d:00:90:86:04:61:6e:7b:fb:
1d:58:36:1b:05:1a:45:78:dc:35:bc:72:ae:b8:77:68:c5:ba:
6c:b4:bd:b7:2f:61:58:5b:b5:00:1c:5d:39:2b:d7:0a:77:39:
13:ed:47:13:7d:4a:30:5a:76:dd:1e:3d:66:83:a7:b8:c1:47:
d9:a2:3e:93:97:32:ea:10:ce:87:be:fc:ba:de:aa:96:70:9c:
e8:91:66:c3:9d:fb:e9:75:d8:7f:75:e2:4b:41:39:d3:78:3f:
8c:58:56:c6:71:e7:5f:a6:0e:9d:77:f4:9e:64:4c:30:b1:74:
9f:0a:e5:5b:40:1f:bf:82:cb:ff:d8:c1:ac:f3:08:ec:18:41:
f4:9c:90:c8:76:5e:99:e6:5f:3a:cb:0a:9b:45:f0:a6:43:cf:
40:07:fb:63:79:2c:72:4f:32:a5:e0:dc:c3:0f:f5:62:c8:35:
69:7c:1c:80:f4:33:b3:f2:43:c8:0b:71:cb:82:24:8d:29:09:
42:ff:76:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:33 2024 by rpki-client on console-fra.rpki-client.org