Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/CCB4D870C59311EE927FFFA7775412E6.roa
File: CCB4D870C59311EE927FFFA7775412E6.roa (raw, json)
Hash identifier: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=
Subject key identifier: 49:A6:36:F2:63:42:BA:EF:6F:84:B8:14:80:54:49:D5:71:24:85:AC
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 49
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/CCB4D870C59311EE927FFFA7775412E6.roa
Signing time: Wed 07 Feb 2024 08:35:08 +0000
ROA not before: Wed 07 Feb 2024 08:35:04 +0000
ROA not after: Sun 07 Feb 2027 08:35:04 +0000
asID: 36905
IP address blocks: 154.126.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 7 08:35:04 2024 GMT
Not After : Feb 7 08:35:04 2027 GMT
Subject: CN=65c340bc-f82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:6c:39:46:d7:a4:79:0e:bf:ad:81:7c:21:
78:a6:84:78:3e:09:7c:71:ba:05:d3:42:9f:1a:76:
23:b3:44:68:1b:12:44:c9:8a:1e:80:cb:96:c4:27:
6b:6d:a9:4e:6f:bf:6f:57:d5:d1:f9:bc:3a:7d:89:
58:72:bf:df:ad:6a:3b:d2:d8:fd:47:a9:5a:e1:e0:
e1:18:d3:2f:55:2d:bc:6b:5a:69:4d:ff:d3:0b:ce:
6a:e2:43:cd:37:79:09:ec:5e:29:69:c8:fd:73:3b:
f3:c0:5a:91:9e:ca:d7:83:e2:f6:99:5c:3b:7b:1b:
1e:4f:80:df:58:78:82:3d:98:12:ea:f4:a7:d3:36:
2e:14:d6:cf:7d:30:6f:0b:30:55:95:89:ce:18:b3:
7d:41:bf:21:5f:a0:0b:30:d8:39:46:19:e3:e2:90:
1b:5c:f0:fa:ff:c3:02:c4:7d:14:1c:c8:96:7d:64:
ba:b6:e8:c4:e7:2a:47:65:c9:4d:62:b4:8c:59:f2:
a8:42:4d:02:8e:aa:a6:00:ed:93:5d:4f:43:b2:50:
11:f1:e4:e0:d2:0f:0f:a5:dd:4d:ae:38:16:b0:23:
36:00:55:b5:7f:8d:49:f6:b1:b2:e7:19:ec:b5:3e:
ee:1c:5c:d8:7b:48:6d:e6:28:8d:1f:f4:88:50:6f:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A6:36:F2:63:42:BA:EF:6F:84:B8:14:80:54:49:D5:71:24:85:AC
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/CCB4D870C59311EE927FFFA7775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.160.0/19
Signature Algorithm: sha256WithRSAEncryption
99:af:5f:ef:2c:ac:3b:ff:a6:11:99:5e:be:58:59:32:7b:13:
40:f9:01:75:0f:af:34:ec:17:84:be:9a:b1:ad:3d:e0:3e:6d:
0e:88:38:8b:05:22:49:8f:4e:bf:8f:40:33:12:00:d0:14:c0:
ba:2c:89:16:a0:d5:9f:9e:63:57:c7:a7:6a:5e:e6:f4:0a:45:
1c:af:11:fb:b4:c2:09:2b:55:b0:f2:ae:4f:0f:ce:a0:f5:0c:
a8:d0:99:44:66:2f:62:f2:4d:7b:b1:83:72:db:99:1b:b2:db:
9f:7d:59:b3:78:ce:05:a6:60:75:5d:ae:f9:7c:f5:3d:3b:c1:
a2:89:43:8c:92:90:5e:ad:5b:bb:84:0f:2d:38:f8:f2:49:37:
4c:48:fe:f2:d0:12:bc:82:a4:bd:45:85:c3:45:d6:87:56:be:
a5:8f:fe:3a:35:d5:33:97:e6:ac:fc:e6:7e:01:e0:0b:18:3f:
5d:51:6b:2d:a2:60:ba:bd:c0:f0:ce:ee:3d:4e:7c:a3:47:64:
50:aa:be:2b:0c:1d:b0:25:ab:43:63:8a:c1:8c:bc:10:82:97:
a2:14:7a:00:53:c6:f9:0d:2e:d6:0a:0c:12:ba:7a:61:da:c1:
66:b5:05:47:b6:5a:c6:77:3e:c4:a8:22:4e:ed:b4:12:00:11:
6e:b1:ce:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:35 2024 by rpki-client on console-ams.rpki-client.org