Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/FAD1EE98C4D311EEB8EF5B68775412E6.roa
File: FAD1EE98C4D311EEB8EF5B68775412E6.roa (raw, json)
Hash identifier: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=
Subject key identifier: D5:28:4E:B1:C7:B9:DB:11:8D:25:31:B3:D4:54:54:1E:9D:6B:1F:24
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 3F
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/FAD1EE98C4D311EEB8EF5B68775412E6.roa
Signing time: Tue 06 Feb 2024 09:42:02 +0000
ROA not before: Tue 06 Feb 2024 09:41:59 +0000
ROA not after: Sat 06 Feb 2027 09:41:59 +0000
asID: 36905
IP address blocks: 154.126.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 09:41:59 2024 GMT
Not After : Feb 6 09:41:59 2027 GMT
Subject: CN=65c1feea-8417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:9c:88:0c:a5:40:9c:20:ab:1c:83:64:46:
4f:18:c0:0f:b4:f4:70:b3:8e:42:d6:02:e0:5b:43:
7d:ce:a3:34:fd:c7:84:fa:04:d2:de:cd:3d:be:0a:
09:bc:4a:0a:fa:e0:0a:b4:9f:b3:26:36:af:3a:b6:
cd:29:2b:3b:69:89:93:94:9c:4f:05:1a:01:69:30:
75:e9:c2:f4:cf:3e:e5:6c:f1:45:bd:3f:65:0f:33:
e7:89:dc:a9:a0:7a:66:a4:67:2b:e6:68:a4:b7:63:
2a:70:4d:43:1d:9a:51:fe:c5:b1:c7:ea:4f:95:d6:
f3:46:79:6b:4e:f5:0f:98:a5:16:ae:24:39:ae:ac:
63:60:46:9b:e7:c4:84:32:44:28:42:25:b7:18:e8:
ba:28:d2:17:1e:82:21:ee:d9:5f:5c:7b:5c:39:b3:
e0:f8:5e:aa:f3:42:3b:80:08:85:d6:d3:75:ca:da:
ce:a5:92:20:33:8b:70:8d:d8:19:b9:21:17:88:10:
22:5a:13:0c:10:ff:1d:6c:b6:be:17:fd:d6:2e:07:
29:bc:a1:24:89:a7:43:ac:f3:6b:4b:fa:a5:a1:0c:
1f:f9:eb:ae:4d:33:13:b8:50:d5:21:70:df:57:24:
5b:3f:58:8b:95:4f:e8:f4:89:2d:93:39:fc:46:50:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:4E:B1:C7:B9:DB:11:8D:25:31:B3:D4:54:54:1E:9D:6B:1F:24
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/FAD1EE98C4D311EEB8EF5B68775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.126.188.0/24
Signature Algorithm: sha256WithRSAEncryption
76:c7:83:83:90:68:2b:07:60:b7:78:a2:64:50:e7:db:44:07:
a6:19:75:db:a2:a8:fb:a1:7b:16:d8:b7:db:87:35:9a:97:8a:
a3:cd:fa:1f:db:06:ad:b2:2e:a1:bd:d3:07:dc:90:4c:bf:f2:
1d:fa:fa:df:c9:50:58:58:35:33:61:2c:90:92:fb:79:ac:e7:
46:66:b4:d3:cb:f1:8a:9f:65:63:27:c7:23:43:ce:03:10:80:
c1:68:14:cd:1c:5c:cd:87:ac:fb:81:43:52:c7:a7:f3:fb:dc:
b4:fc:d6:17:29:7f:52:39:c9:db:68:d3:b5:54:31:57:9a:b6:
ac:c4:63:06:e1:18:79:9f:39:d2:94:5d:db:06:e9:c5:44:74:
3b:3c:fb:64:d6:ce:74:c1:e6:1d:00:e4:93:bf:15:01:1e:a9:
4b:38:93:23:5c:7e:cf:ca:c9:9a:13:fa:78:6d:2f:6c:b1:f3:
15:40:80:fd:06:70:9d:41:83:b4:0c:18:d2:6f:59:c2:fd:af:
4b:b2:41:96:84:75:78:2b:24:f9:33:c4:96:83:5d:81:13:96:
c7:ff:83:38:ca:d3:bc:37:97:44:df:21:15:b2:d8:3e:f9:a1:
90:76:e4:69:7a:45:75:3a:03:aa:bc:9b:f3:b3:66:64:fc:4a:
21:7f:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:38 2024 by rpki-client on console-ams.rpki-client.org