Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/8067F0207FD711EFBF8541BB762E951A.roa
File: 8067F0207FD711EFBF8541BB762E951A.roa (raw, json)
Hash identifier: Kmkp9sDKLjld1I/1LDCmjPC0EteNsXcKQLhGKa3YnMU=
Subject key identifier: 1F:93:70:E8:B9:B9:8C:6D:4D:81:5C:37:DD:B4:75:3C:27:94:84:8A
Certificate issuer: /CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
Certificate serial: 07D1
Authority key identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
Authority info access: rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/8067F0207FD711EFBF8541BB762E951A.roa
Signing time: Tue 01 Oct 2024 09:28:22 +0000
ROA not before: Tue 01 Oct 2024 09:28:17 +0000
ROA not after: Wed 01 Oct 2025 09:28:17 +0000
asID: 328174
IP address blocks: 80.88.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl
rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
Validity
Not Before: Oct 1 09:28:17 2024 GMT
Not After : Oct 1 09:28:17 2025 GMT
Subject: CN=66fbc0b6-caa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:9e:dc:e6:3a:08:c0:37:99:21:3c:66:15:
49:95:23:4c:f7:77:40:84:6b:94:74:b6:4e:46:f0:
d2:5e:f7:1a:34:e1:31:e7:37:d0:ab:b9:be:e7:c9:
9b:1f:4b:3b:48:6a:99:eb:25:da:e6:27:e2:db:d4:
c4:b4:5b:87:84:78:7f:4f:c4:ee:b8:73:ee:33:f5:
f6:cf:c2:11:69:1c:64:ef:d1:23:36:a2:e8:29:96:
c2:10:f1:a0:fc:b3:a4:c7:25:ba:41:96:0f:85:8d:
83:de:31:05:2e:6e:7c:e9:9f:88:af:6a:86:cc:c0:
cc:c3:31:fc:10:db:ad:22:15:b2:4d:e7:33:ef:6e:
39:ea:de:86:82:4f:46:e8:55:c2:82:8f:21:fe:3b:
29:2c:1b:72:cd:a9:c9:55:ef:e2:17:eb:ef:f2:00:
44:f9:a7:e0:d1:5b:06:0e:c7:d8:4a:0c:70:5c:7d:
7c:33:52:92:eb:47:5c:0a:b0:38:fe:5f:48:94:9a:
45:0d:b2:cb:51:0d:f4:d7:9b:93:ca:8f:a8:50:a2:
d2:28:da:cb:ea:03:e0:e7:ed:c8:e0:22:21:b9:0e:
50:fb:4f:36:bc:1b:4b:a8:05:d4:57:3a:a5:68:7a:
2a:cb:38:74:bb:04:ff:63:e1:c4:cf:1b:9c:87:c0:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:93:70:E8:B9:B9:8C:6D:4D:81:5C:37:DD:B4:75:3C:27:94:84:8A
X509v3 Authority Key Identifier:
keyid:A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/8067F0207FD711EFBF8541BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.88.11.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f1:fb:3e:23:52:ef:2a:bf:8b:b0:c9:54:87:31:cd:32:f0:
1a:e5:3c:ee:c0:f4:e9:93:75:98:41:5b:98:de:75:24:e4:3a:
01:b7:fb:88:06:eb:1e:a2:81:fc:54:f6:40:5f:48:16:35:df:
73:f8:2a:24:9b:53:74:94:1d:15:e5:61:9c:51:99:50:fc:db:
71:06:29:9e:34:51:5e:6f:28:22:80:f3:a9:d9:e4:bc:a7:39:
fa:ba:84:7b:cf:24:94:30:47:a8:44:26:e2:c0:57:2f:77:c2:
33:b1:8b:91:62:97:6c:b4:2e:3f:86:d4:d9:f9:6f:40:e5:46:
50:ac:ff:df:31:70:52:21:06:1f:e3:49:af:a1:72:4b:bc:82:
49:ab:0f:1d:ea:61:ef:ff:60:b6:6f:2c:9e:6f:94:6c:57:19:
82:c9:e0:3e:1a:8e:28:4f:e9:70:07:52:46:3c:39:00:65:52:
56:cb:d5:98:28:ed:ee:37:a9:f3:92:69:f0:ca:85:dd:b4:bf:
78:2e:b4:f5:b2:d7:69:7f:8c:8f:c0:79:ff:9c:fa:1f:2e:7d:
5c:4d:ec:51:41:a8:60:f4:08:5e:ad:7d:de:4b:06:53:c7:e5:
9d:86:84:dc:d0:af:8b:3d:32:f9:db:14:7d:7e:ad:21:b5:69:
af:14:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:27 2024 by rpki-client on console-fra.rpki-client.org