Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/DF0FB1A6864B11EFAA421C60762E951A.roa
File: DF0FB1A6864B11EFAA421C60762E951A.roa (raw, json)
Hash identifier: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=
Subject key identifier: 35:D5:E6:DC:EE:7F:27:47:6C:FC:BD:0E:CF:91:74:37:F2:CC:8C:94
Certificate issuer: /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial: 0803
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/DF0FB1A6864B11EFAA421C60762E951A.roa
Signing time: Wed 09 Oct 2024 14:36:30 +0000
ROA not before: Wed 09 Oct 2024 14:36:25 +0000
ROA not after: Mon 30 Oct 2034 14:36:25 +0000
asID: 8346
IP address blocks: 196.207.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051 (0x803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Validity
Not Before: Oct 9 14:36:25 2024 GMT
Not After : Oct 30 14:36:25 2034 GMT
Subject: CN=670694ed-8248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:7b:61:f4:1a:0e:6d:3a:df:ae:75:ff:48:
7a:a1:81:75:e8:19:69:71:41:00:94:73:06:19:36:
ae:cf:81:5f:c5:7f:19:3b:9d:28:a1:72:88:ab:0b:
57:df:ad:31:21:70:4a:c2:3c:d8:ab:1b:21:ad:2d:
57:cc:28:64:cd:a1:6a:6e:cc:2d:ba:d7:62:1d:da:
9e:55:65:17:7f:1e:8b:f0:51:72:96:fc:cb:b7:e0:
d0:8b:ee:6c:1f:a3:48:f1:95:14:24:3d:c6:bd:83:
af:1f:07:4d:3c:71:27:33:61:93:15:63:e1:19:af:
fa:17:37:c5:f9:52:f7:80:a6:da:68:ba:ae:eb:c8:
5b:1a:d6:8b:83:90:e9:c3:95:ba:31:1c:9d:01:33:
5f:c3:08:ad:a4:c3:64:4d:1e:3f:d4:07:0b:1b:71:
ca:89:8f:31:5c:47:73:68:95:10:8a:3e:20:1e:ec:
6a:21:6a:33:e0:30:24:e5:be:03:6d:c4:a4:d4:cc:
c7:5e:21:29:c6:c7:92:35:14:41:91:2b:98:f7:7a:
f8:eb:4d:01:ba:b9:ed:78:bf:cf:5c:90:8c:10:15:
5e:5c:e6:a9:49:2d:36:e5:c0:df:3e:02:4c:f7:84:
48:ab:48:29:5d:29:0d:06:ab:5a:59:e3:31:3d:84:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D5:E6:DC:EE:7F:27:47:6C:FC:BD:0E:CF:91:74:37:F2:CC:8C:94
X509v3 Authority Key Identifier:
keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/DF0FB1A6864B11EFAA421C60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.207.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:50:61:be:b4:e1:59:cc:4b:7a:f7:fc:64:86:b6:52:ad:fe:
f6:92:41:f5:e2:9b:26:b2:10:34:d7:a2:e4:53:37:01:c0:ba:
24:7c:cc:98:1e:c9:5f:91:f9:8a:e9:32:4a:ab:ad:7c:01:ba:
8e:4b:d8:75:a6:69:53:6a:89:17:01:0f:3a:be:11:fb:99:e6:
cf:5d:a3:fd:1e:78:73:1d:a9:60:af:46:8c:ad:37:fc:c3:2d:
fa:d6:5a:70:5f:c9:4c:80:64:38:bb:eb:fb:88:0f:89:0a:d5:
4e:7a:9d:ff:db:42:ae:6b:06:8a:4d:36:df:57:2d:f8:06:7c:
56:b3:19:a8:8d:3c:50:fe:be:02:56:dd:2b:29:4e:b0:78:bd:
ab:dd:f9:08:b4:0f:34:82:52:70:c1:91:ac:22:a2:07:21:66:
4e:9e:67:cb:89:c1:ac:1f:33:07:47:ac:cf:cb:a8:24:de:c4:
bb:d6:0f:ea:c2:48:c8:71:46:b7:86:02:97:2e:4a:8f:71:61:
51:91:21:5d:58:81:63:9b:0a:bd:57:c9:13:97:29:49:b9:81:
db:38:43:dd:24:42:57:29:40:75:a5:c4:d4:60:d2:f9:e5:d4:
ae:d2:bc:19:fc:cb:31:3b:8d:09:8d:7f:88:0f:b0:26:a2:6f:
23:05:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:21 2024 by rpki-client on console-ams.rpki-client.org