Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/B3F2595EC4D311EE97A2CE67775412E6.roa
File: B3F2595EC4D311EE97A2CE67775412E6.roa (raw, json)
Hash identifier: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=
Subject key identifier: 3D:98:71:12:52:54:5F:A3:A8:52:23:30:57:A6:EF:E6:FA:64:21:22
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 3B
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/B3F2595EC4D311EE97A2CE67775412E6.roa
Signing time: Tue 06 Feb 2024 09:40:03 +0000
ROA not before: Tue 06 Feb 2024 09:40:00 +0000
ROA not after: Sat 06 Feb 2027 09:40:00 +0000
asID: 36905
IP address blocks: 154.126.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 09:40:00 2024 GMT
Not After : Feb 6 09:40:00 2027 GMT
Subject: CN=65c1fe73-e4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:54:fa:20:c5:6b:87:7f:95:59:9b:ed:bf:
90:01:07:9a:41:49:26:dc:c9:2f:e9:24:90:d5:c7:
e8:4d:d7:cc:74:9a:06:3c:21:f3:b4:5f:90:b0:c9:
e6:24:01:da:7b:44:b8:14:b1:ce:45:3a:bf:39:26:
41:34:f2:0d:67:8a:2c:64:e6:b0:c6:86:eb:c1:4e:
b7:c3:d4:47:04:9a:67:d3:76:fa:3d:0d:84:5f:2b:
19:a0:01:bc:c5:57:70:9a:49:d7:d4:a6:56:75:5c:
5e:fe:c3:f5:92:62:7b:b1:27:03:8c:aa:86:ff:7c:
54:fd:c1:6f:ed:80:db:e9:90:8f:0a:43:3b:24:d4:
28:72:67:9e:77:5a:85:61:f4:d8:d1:4c:4b:e2:bd:
80:b7:72:46:4c:aa:93:37:c7:a8:a6:74:e6:9e:cc:
35:28:a9:c9:59:57:06:da:02:2d:e1:c0:06:fc:11:
80:50:5e:8d:80:55:0e:78:84:3a:58:0d:82:e3:6e:
90:67:b4:a1:c9:a3:12:a2:70:85:93:ec:fc:1b:ad:
f8:76:0f:b0:65:99:ac:87:04:96:d7:2a:5a:a4:b0:
32:63:49:25:e3:34:a1:93:9d:b8:ff:4f:b3:8b:88:
09:21:48:30:08:1a:e8:93:67:da:4c:fa:d2:0d:e9:
f5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:71:12:52:54:5F:A3:A8:52:23:30:57:A6:EF:E6:FA:64:21:22
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/B3F2595EC4D311EE97A2CE67775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.185.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8a:ac:64:39:96:5c:8d:13:94:c9:5b:08:d0:c4:69:9a:2d:
a2:90:bd:4b:62:97:c3:79:3c:20:54:dc:60:f9:b3:7e:b8:5d:
9a:8d:e1:f5:20:eb:8b:72:81:97:dd:f4:99:9c:be:90:35:75:
a8:2a:a0:79:d6:bc:86:27:04:d0:58:bd:bd:8d:47:e0:1a:c4:
5d:89:e8:38:cc:75:df:7c:eb:0f:a6:47:fd:aa:ae:6b:2e:6f:
b6:10:00:b0:96:4c:85:51:9e:8e:cd:28:cc:55:ca:e2:e5:fd:
27:0f:38:7e:4e:f9:50:0b:6b:c5:76:55:1e:20:c3:cb:1c:f0:
46:64:1f:5f:4c:56:e3:52:20:17:ef:93:fd:65:0d:7e:61:0c:
e2:8b:c2:0f:33:89:4f:9f:86:b6:2e:d6:4c:ea:9c:eb:77:15:
fa:4a:9d:f5:c8:b3:f0:a5:a6:84:cc:8d:9a:ab:2b:58:80:d5:
6e:ad:f3:93:16:5a:44:01:4f:79:7e:ff:2f:1c:3a:d0:40:f0:
55:a5:8e:1e:53:ab:71:be:32:ce:33:b5:78:a2:d5:cd:27:2f:
72:90:d6:ec:45:dd:f1:36:0c:d1:2e:43:72:ad:3e:29:df:0d:
7f:a9:cb:c6:61:f5:84:71:c9:5e:94:14:7a:f0:dd:06:46:91:
c8:73:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org