Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/C7D92E1869B911EE953F70484AD9E6FC.roa
File: C7D92E1869B911EE953F70484AD9E6FC.roa (raw, json)
Hash identifier: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=
Subject key identifier: 7E:AA:14:2A:DB:B0:BB:58:CE:0C:C3:58:1C:6E:30:06:9D:17:32:18
Certificate issuer: /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial: 06
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/C7D92E1869B911EE953F70484AD9E6FC.roa
Signing time: Fri 13 Oct 2023 11:15:14 +0000
ROA not before: Fri 13 Oct 2023 11:15:10 +0000
ROA not after: Wed 13 Oct 2027 11:15:10 +0000
asID: 37513
IP address blocks: 196.12.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Validity
Not Before: Oct 13 11:15:10 2023 GMT
Not After : Oct 13 11:15:10 2027 GMT
Subject: CN=652926c2-385c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:14:86:4b:a9:b7:c6:b2:b6:6b:c2:17:5b:
6e:62:52:25:91:0f:fd:9c:fe:d6:00:bf:a8:0c:ac:
a6:51:c5:85:79:d6:b6:7c:ec:17:e1:ec:fe:aa:c5:
68:1c:e0:31:22:db:3f:88:c0:a2:ee:51:9f:27:a1:
dc:20:96:dd:6e:1c:9e:65:13:76:dc:53:96:f5:87:
dd:e0:8b:f9:69:27:ea:a8:62:9a:7c:84:80:d2:ac:
f6:84:30:5a:00:a6:8f:d9:1b:5d:44:48:3a:eb:26:
ca:79:d0:ee:68:cc:7e:1c:b2:62:9a:b1:8e:3a:b7:
a3:07:98:84:30:b9:9e:4b:6d:0f:6b:73:cf:75:76:
4c:41:4d:24:b6:03:6c:06:f0:ca:ac:86:fa:a6:bf:
bf:d6:e4:86:f6:44:81:36:51:0c:a4:ac:1d:39:ca:
c9:ca:49:95:61:2b:ea:10:4c:3a:ed:98:16:32:5f:
6f:27:df:ef:69:15:35:ff:d9:90:64:d2:30:ef:b5:
96:e6:08:31:58:7a:12:3d:9a:b3:ca:63:70:e2:9e:
f1:06:0e:f3:4b:43:cd:13:6c:7e:10:cf:7f:47:c5:
8a:a9:99:24:7f:36:f0:57:8a:87:83:cb:f0:36:e2:
31:5c:15:c3:44:72:71:92:6b:f6:dc:8b:86:5b:27:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AA:14:2A:DB:B0:BB:58:CE:0C:C3:58:1C:6E:30:06:9D:17:32:18
X509v3 Authority Key Identifier:
keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/C7D92E1869B911EE953F70484AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.12.10.0/24
Signature Algorithm: sha256WithRSAEncryption
10:67:4c:55:30:88:70:4c:c5:24:8b:c3:7e:56:14:98:6b:c8:
76:fb:a1:eb:7a:d8:1f:20:8d:66:51:ab:05:0d:fb:82:6e:c1:
a3:74:7e:ac:f5:56:f8:fb:c6:c6:b1:d3:27:dc:ee:8d:32:19:
d9:ad:9e:ec:ac:c4:4a:49:cf:bb:35:96:54:02:47:9c:be:06:
c5:e1:7e:00:3b:c3:71:57:15:10:98:ee:fc:b3:1a:e1:0e:bb:
75:b6:82:4b:f3:45:f4:bc:48:34:79:d3:16:14:56:5b:3d:3d:
d3:d3:1c:af:dd:a3:d0:29:5c:af:7f:dc:d8:40:9d:ee:83:4a:
8c:16:6a:ee:65:e1:fc:75:e7:d6:af:f9:75:ef:2b:a5:9e:29:
a9:e6:81:cc:18:44:a0:61:59:b0:c3:9f:86:72:30:15:39:53:
d1:50:87:8e:45:76:2a:59:a7:bc:d7:de:ab:fb:e7:4b:42:e7:
93:a6:bc:14:cb:ea:cb:de:bf:ae:ae:f8:82:c0:42:83:00:24:
d3:c3:1d:d7:f0:9d:f2:71:87:7c:7b:42:bb:77:85:d5:70:e8:
4a:07:4b:65:e6:2a:bb:49:fc:24:77:7d:be:f6:db:e1:39:51:
09:2f:8e:91:fe:35:d7:4a:43:7e:d5:c2:4d:74:1d:44:96:31:
1f:7a:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:34 2024 by rpki-client on console-fra.rpki-client.org