Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/96B86BD6C4CD11EEA3C61A5E775412E6.roa
File: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (raw, json)
Hash identifier: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=
Subject key identifier: A8:70:6C:31:11:FC:A9:F7:69:AE:22:EC:4A:DA:07:67:A8:91:FD:CE
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 0D
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/96B86BD6C4CD11EEA3C61A5E775412E6.roa
Signing time: Tue 06 Feb 2024 08:56:17 +0000
ROA not before: Tue 06 Feb 2024 08:56:14 +0000
ROA not after: Sat 06 Feb 2027 08:56:14 +0000
asID: 36905
IP address blocks: 154.126.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 08:56:14 2024 GMT
Not After : Feb 6 08:56:14 2027 GMT
Subject: CN=65c1f431-de0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6a:42:47:3e:d2:e5:1a:35:2b:d3:36:5c:f5:
0a:6a:7c:31:d2:12:03:94:35:34:14:98:52:28:60:
d5:16:5c:b6:1a:22:62:7e:ff:1e:04:c3:c8:8a:7b:
7c:6a:7d:23:7a:40:0e:98:54:72:b8:9e:88:82:95:
19:86:53:e4:41:ef:16:84:1b:13:14:28:0a:ea:50:
b9:7f:eb:82:65:7d:a4:e0:8a:3c:f0:97:7e:1c:88:
b9:0f:5e:cd:04:5c:e4:fc:d3:09:b7:25:85:3a:b5:
f6:25:71:b8:38:97:8b:8b:e6:8a:aa:ac:6a:83:ff:
47:a4:d2:66:a7:2b:4f:a3:7c:fa:e7:80:01:9e:78:
62:9f:7a:73:8d:1a:44:a4:ea:8a:03:f2:26:92:e1:
5c:0e:b4:d9:bd:af:d2:f7:33:4c:b9:ed:40:99:26:
00:7f:71:11:8c:03:70:6b:26:4a:ba:9d:3d:c9:53:
9a:cc:06:46:58:75:06:da:7d:80:5e:51:72:5d:fc:
f4:ce:a3:cb:19:70:1b:fe:07:d3:0b:3a:6a:19:c3:
80:5d:2a:0d:a2:38:f5:cd:d4:89:76:a3:cf:cf:41:
2d:9f:d3:f7:62:95:95:e3:75:0a:34:05:5e:ac:4c:
f5:89:a4:be:f9:40:62:39:88:0a:d6:c9:6f:dd:df:
5f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:6C:31:11:FC:A9:F7:69:AE:22:EC:4A:DA:07:67:A8:91:FD:CE
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/96B86BD6C4CD11EEA3C61A5E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.164.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2c:11:3b:73:4e:46:3b:37:41:ff:8a:1f:be:c4:b6:b3:c6:
29:7d:48:fe:43:c1:6c:52:68:b0:b2:13:5f:21:2b:af:d2:93:
d0:5f:8c:c8:2c:fe:60:8b:ae:8c:55:0f:a5:3d:49:fb:57:c0:
1f:2c:86:e2:3f:20:51:00:9b:9c:b3:28:6f:a2:5b:66:68:c6:
e9:3c:53:d9:fc:ad:06:c3:f1:c7:8d:ce:55:2c:75:76:26:08:
96:80:04:38:32:de:1f:ac:7d:33:48:aa:38:6f:5b:a1:e7:0b:
49:a7:de:48:ef:83:9e:6f:19:c2:3f:6e:50:fa:a7:9c:9e:28:
ac:19:a5:47:34:bd:ff:1e:54:65:f5:e0:bd:4b:d6:7a:b2:13:
df:90:ba:7c:18:97:04:0f:97:2e:a7:01:0b:26:6a:c4:a5:94:
4d:8e:93:28:8e:04:e4:1b:67:f2:b1:c4:13:d4:d3:3a:0f:37:
ce:f9:3c:b0:5e:78:5b:7e:c1:aa:88:bb:d0:b8:6a:22:55:92:
00:72:55:20:b8:15:6b:64:f3:00:2d:82:9b:6d:f3:04:95:ba:
8c:b7:2c:02:e8:be:18:eb:d5:d8:b7:27:94:a6:6e:76:4c:bb:
a5:f8:8d:c3:25:47:5a:e5:fa:20:68:2e:c4:8e:3d:79:ab:e3:
a5:99:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:35 2024 by rpki-client on console-ams.rpki-client.org