Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/56BEF2EA2F8E11EEB189580F4AD9E6FC.roa
File: 56BEF2EA2F8E11EEB189580F4AD9E6FC.roa (raw, json)
Hash identifier: JMYwMu7HovIG7q8+I6YXsx7T6SawkuINqG3zDtXzjjA=
Subject key identifier: 7A:76:83:40:66:01:A5:B9:CA:20:7A:B2:79:F5:EA:60:DD:33:3D:25
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 04F9
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/56BEF2EA2F8E11EEB189580F4AD9E6FC.roa
Signing time: Mon 31 Jul 2023 10:38:08 +0000
ROA not before: Mon 31 Jul 2023 10:38:04 +0000
ROA not after: Fri 31 Jul 2043 10:38:04 +0000
asID: 198949
IP address blocks: 196.201.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1273 (0x4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Jul 31 10:38:04 2023 GMT
Not After : Jul 31 10:38:04 2043 GMT
Subject: CN=64c78f10-27fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:58:b3:b1:ef:38:4d:a7:35:13:de:71:5a:
32:18:3d:26:ef:c5:65:25:65:73:36:e1:e6:f3:cb:
9e:8b:b1:4d:f9:06:aa:f7:37:66:34:ed:94:fa:64:
2e:45:b2:22:fc:da:43:b2:85:40:da:ff:f3:31:48:
ce:20:d7:5b:c6:29:9d:0f:64:32:0e:c1:bf:19:40:
c2:88:3e:6f:ad:9d:ea:68:be:72:43:1f:d9:3a:a4:
a8:f1:ea:d9:b9:78:81:75:91:74:00:cf:fb:25:98:
4c:1d:e6:ae:1d:49:30:39:a2:47:c6:25:02:7b:99:
81:7a:4f:7e:8a:9e:98:2a:25:38:80:77:c4:f1:06:
bd:70:55:e1:99:2c:62:7b:99:e6:bf:49:25:54:47:
24:ee:2b:15:22:43:2f:45:1a:c3:63:79:f4:c3:2a:
76:57:9a:9f:5f:ea:e5:71:34:41:b4:70:13:20:65:
3f:75:13:ed:c7:16:41:84:f3:94:31:e3:d1:35:c7:
7f:55:45:4c:2d:0a:89:59:66:3e:1f:2b:7f:8c:13:
7f:5e:4d:36:37:69:2c:e2:84:a5:2f:38:bc:96:fd:
cb:9f:9d:b5:80:5b:25:e6:54:5f:0b:e8:4a:a4:a6:
5e:61:c2:20:53:12:b2:71:1f:75:99:f7:1a:44:e3:
2b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:76:83:40:66:01:A5:B9:CA:20:7A:B2:79:F5:EA:60:DD:33:3D:25
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/56BEF2EA2F8E11EEB189580F4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.201.208.0/20
Signature Algorithm: sha256WithRSAEncryption
46:2b:10:1b:a9:a7:d5:62:31:00:7d:d2:48:82:3f:50:70:44:
f4:cf:3f:4c:eb:fe:36:ed:84:b3:f4:62:e5:70:4d:8f:a9:44:
36:a7:c5:e6:87:2f:dd:1d:a5:8e:80:95:c3:87:23:59:57:29:
67:1d:d7:f6:6f:06:84:04:8b:d3:41:00:04:f5:86:3e:06:cc:
a9:b7:16:4b:41:22:9c:85:14:06:7a:f0:71:ac:25:97:7b:04:
4f:a8:96:cf:30:8c:e7:00:4a:3f:bc:37:46:ce:12:0e:01:29:
f9:c5:e0:0d:66:78:24:6b:05:ca:30:7e:d4:53:a8:d3:bc:76:
d5:f9:2b:6d:6f:70:25:39:c1:0e:88:17:0a:8b:ec:9b:36:a9:
26:6c:1b:3e:ac:4d:75:1a:92:06:97:3b:29:2f:16:26:df:5a:
b3:d6:e9:81:83:7c:3e:bf:d3:30:a2:ed:b7:9e:3a:b7:72:01:
1c:04:68:f0:35:85:ff:00:96:d9:7b:6a:a8:04:6f:de:4e:64:
36:29:6e:b5:aa:4d:85:6b:58:ee:d4:41:39:84:34:b7:e1:62:
39:38:82:3e:d0:7f:96:78:de:c9:a7:9a:61:e9:06:59:92:20:
bf:cd:3c:d5:03:19:0a:66:4d:31:4b:c5:8a:14:a7:41:6f:9c:
49:a1:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:16 2024 by rpki-client on console-fra.rpki-client.org