Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/226005C0C99E11EE8229D66A775412E6.roa
File: 226005C0C99E11EE8229D66A775412E6.roa (raw, json)
Hash identifier: fztcGGjZDl2A7WS5DFatscmgH/f3R5t75XLV1PV1STQ=
Subject key identifier: D0:93:37:FB:15:47:58:92:29:23:39:9A:30:01:3E:D2:75:16:07:40
Certificate issuer: /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial: 0591
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/226005C0C99E11EE8229D66A775412E6.roa
Signing time: Mon 12 Feb 2024 11:59:11 +0000
ROA not before: Mon 12 Feb 2024 11:59:08 +0000
ROA not after: Wed 12 Feb 2048 11:59:08 +0000
asID: 37098
IP address blocks: 154.66.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1425 (0x591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Validity
Not Before: Feb 12 11:59:08 2024 GMT
Not After : Feb 12 11:59:08 2048 GMT
Subject: CN=65ca080f-27f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:db:9f:4a:78:1e:32:f5:77:e0:2c:46:1c:74:
20:06:00:68:45:02:0d:c1:24:28:d4:99:29:84:53:
b0:a4:fe:5e:15:f3:40:c6:71:f8:fe:42:99:0d:29:
44:03:5e:c7:c3:7c:8d:b5:54:d3:4c:e8:12:7e:f3:
d9:97:58:8b:7a:5d:36:f3:cd:3a:ee:98:55:f0:d8:
a4:5e:0e:b3:ed:1e:9a:46:95:01:7d:0f:10:a5:45:
88:68:18:c7:85:1b:fa:0f:29:02:07:99:e9:a1:86:
61:6c:b1:38:d0:e5:3a:f6:19:59:20:a0:36:7a:42:
65:1b:4d:8a:b5:ee:73:fe:3a:16:b3:19:90:16:39:
d2:56:51:18:9f:80:82:43:9b:ad:d8:96:e5:da:d2:
4f:78:d8:38:b2:a2:0f:8a:0d:49:49:0c:bc:52:cb:
41:5f:fe:16:79:49:f5:99:52:44:10:13:b8:bc:43:
d4:22:e0:03:d5:9f:3a:88:57:aa:95:72:96:8e:28:
16:79:df:80:74:b8:d0:3a:aa:c9:c0:d9:89:1d:0d:
b9:84:d8:19:42:d8:94:c2:77:5d:86:e6:2c:47:9e:
4d:69:66:97:8c:64:fa:21:46:8c:c4:42:16:53:04:
af:f7:d4:ea:a4:08:b2:6d:2d:51:f6:d3:48:28:c8:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:93:37:FB:15:47:58:92:29:23:39:9A:30:01:3E:D2:75:16:07:40
X509v3 Authority Key Identifier:
keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/226005C0C99E11EE8229D66A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.126.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:85:f2:86:b6:06:e1:4e:6b:a8:64:b3:95:02:4f:79:91:0d:
ec:7a:05:8b:b4:05:cd:93:02:81:5c:5b:aa:55:5f:24:31:0a:
30:9e:37:4d:8f:d1:f6:93:40:27:cb:7b:90:55:3c:5f:63:48:
55:34:ea:23:7b:15:57:04:07:c6:31:ca:91:5c:36:d3:39:15:
fd:16:0c:94:a3:e5:16:31:81:3a:ef:1d:7f:e4:7b:76:a6:3e:
46:93:f5:8b:82:55:bc:61:e4:d7:fd:a7:29:96:fb:03:09:28:
0a:a3:d1:c4:dd:8b:3a:1c:ce:fe:ff:e7:59:8d:05:35:79:b7:
9b:bd:8d:f8:fc:f6:d4:1c:08:dd:99:9e:bc:2b:7f:a7:9b:02:
50:b8:f5:9f:37:76:6f:23:c4:1d:16:6b:48:52:3f:95:3f:02:
f7:24:38:e7:47:06:48:8d:df:c0:d4:02:7c:a2:1e:9a:79:ca:
a1:89:49:6f:28:3b:2e:1b:ba:f9:a2:1a:ec:d6:ea:e0:5a:d7:
8a:5c:f5:e4:d7:86:7c:00:0a:d7:be:f7:ef:a8:e3:88:09:c3:
91:08:b9:04:49:80:ed:c3:f3:67:93:e3:27:04:cd:48:c1:9d:
c9:ac:5b:38:f5:64:8a:ea:64:b2:5d:5e:43:fd:d2:63:eb:71:
4b:9a:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:14 2024 by rpki-client on console-fra.rpki-client.org