Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/194AE2C6ABF611EF88B07F68762E951A.roa
File: 194AE2C6ABF611EF88B07F68762E951A.roa (raw, json)
Hash identifier: 5+3LH8NkWE6SnJs1tlWQUx4q3hQ5ZJVxyQ9XDacvpr8=
Subject key identifier: F1:66:3A:B6:4B:25:8A:2D:88:1A:5A:78:82:90:51:11:2A:80:33:64
Certificate issuer: /CN=F36772B4AF/serialNumber=47FABEFD432CB1F470AFA5C71BCA3D55467F1A00
Certificate serial: 02
Authority key identifier: 47:FA:BE:FD:43:2C:B1:F4:70:AF:A5:C7:1B:CA:3D:55:46:7F:1A:00
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/R_q-_UMssfRwr6XHG8o9VUZ_GgA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/194AE2C6ABF611EF88B07F68762E951A.roa
Signing time: Tue 26 Nov 2024 12:58:15 +0000
ROA not before: Tue 26 Nov 2024 12:58:11 +0000
ROA not after: Sun 27 Nov 2044 12:58:11 +0000
asID: 328739
IP address blocks: 154.115.160.0/19 maxlen: 19
2001:43f8:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/R_q-_UMssfRwr6XHG8o9VUZ_GgA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/R_q-_UMssfRwr6XHG8o9VUZ_GgA.mft
rsync://rpki.afrinic.net/repository/afrinic/R_q-_UMssfRwr6XHG8o9VUZ_GgA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 03:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36772B4AF
Validity
Not Before: Nov 26 12:58:11 2024 GMT
Not After : Nov 27 12:58:11 2044 GMT
Subject: CN=6745c5e7-a260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:50:f0:5d:a4:c9:c9:b7:c4:0a:ab:a4:d4:96:
8a:46:50:80:b0:5b:f6:e6:b4:4f:a9:d3:79:bf:cf:
c7:ab:39:cf:da:82:f5:6b:ee:d9:51:0e:85:de:55:
22:93:c9:51:a7:e5:fb:79:e5:88:5f:eb:ae:2a:8d:
f1:d9:0a:ea:6c:f0:c3:c0:29:52:38:ca:e9:42:47:
43:12:08:7c:92:66:11:01:15:7b:3c:58:95:50:04:
9c:a4:a6:c2:82:a6:72:1c:ea:a7:30:e8:ba:58:97:
f9:6c:1d:04:b6:28:fc:b5:73:c0:60:15:6d:68:2a:
d6:4e:7e:06:7b:cf:d9:ad:df:95:19:2b:17:e8:ec:
6b:5f:a1:a3:09:37:c8:93:4e:45:cc:c9:81:7c:6d:
23:0e:0a:3e:8f:7e:9b:f8:8b:cc:87:91:81:9a:90:
67:f2:3c:f7:fb:bd:e7:03:0d:fe:17:62:bb:26:d6:
8c:e8:1a:da:27:b3:02:96:ce:c1:27:82:69:4f:c7:
d6:ae:f0:83:38:02:11:61:e8:65:4f:81:0d:c8:f1:
28:52:dc:bd:1a:2e:bc:58:83:df:45:37:c1:ef:98:
7b:c7:85:88:95:d9:18:00:8b:a4:7f:20:55:59:62:
71:9c:09:50:4c:dd:8c:e6:89:95:7c:46:b5:38:08:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:3A:B6:4B:25:8A:2D:88:1A:5A:78:82:90:51:11:2A:80:33:64
X509v3 Authority Key Identifier:
keyid:47:FA:BE:FD:43:2C:B1:F4:70:AF:A5:C7:1B:CA:3D:55:46:7F:1A:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/R_q-_UMssfRwr6XHG8o9VUZ_GgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R_q-_UMssfRwr6XHG8o9VUZ_GgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36772B4/3402ACACABF111EFBCD9B94A762E951A/194AE2C6ABF611EF88B07F68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.115.160.0/19
IPv6:
2001:43f8:1000::/48
Signature Algorithm: sha256WithRSAEncryption
69:14:ea:e0:b9:ed:77:d7:c8:b8:ed:99:8f:25:2b:c0:70:5e:
f7:a7:b3:4a:4a:20:7c:a4:aa:78:8b:dd:4e:e3:65:81:20:e5:
0d:21:d3:98:1a:8d:8f:84:e6:3d:b3:ce:02:d7:ed:fe:c3:5d:
d0:93:c2:0a:65:aa:bc:20:5c:94:90:cb:71:af:91:cd:40:5f:
22:cf:0d:b9:c5:1d:66:66:32:ec:01:39:f6:7e:2f:eb:8f:91:
95:5c:39:ed:1a:a2:21:61:f2:a2:2c:f0:37:70:6a:2f:e5:d8:
52:14:06:6d:29:84:3c:f9:88:ee:20:67:2e:db:b0:5a:62:23:
28:fb:da:1c:de:5c:9d:a2:5a:b4:35:77:1c:ad:ea:59:32:2d:
62:29:76:3e:3c:17:e2:b1:05:88:d4:41:77:29:85:55:d6:04:
ad:d2:33:c3:67:d2:97:de:1d:84:35:dd:e1:d1:7d:63:45:18:
13:57:67:fe:4e:51:2f:b9:a3:b6:76:42:7d:87:db:94:1a:35:
15:0d:6e:d0:a6:8f:d8:e8:a1:cc:df:77:b7:b3:c6:1e:aa:e8:
97:3e:b7:9a:75:4e:e9:d6:98:77:5c:91:37:44:e9:4e:37:88:
30:8d:02:f7:b0:1b:2a:ea:dc:58:cd:c4:16:79:d2:0b:7d:10:
64:2b:81:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:58:21 2025 by rpki-client