Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/288D4C62DAF811EE99015975775412E6.roa
File: 288D4C62DAF811EE99015975775412E6.roa (raw, json)
Hash identifier: oRziezGPE9uzcap5Wyal7wNHEAWoYsn03nwn7TfFIjI=
Subject key identifier: 6F:80:56:B9:76:F8:BA:01:6E:1E:2C:9D:5B:39:DB:C3:77:04:49:AE
Certificate issuer: /CN=F36C01B9AF/serialNumber=E2FB6437B4C94D5F51221B1650563A48FF54BE09
Certificate serial: 05
Authority key identifier: E2:FB:64:37:B4:C9:4D:5F:51:22:1B:16:50:56:3A:48:FF:54:BE:09
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/288D4C62DAF811EE99015975775412E6.roa
Signing time: Tue 05 Mar 2024 13:56:26 +0000
ROA not before: Tue 05 Mar 2024 13:56:23 +0000
ROA not after: Thu 05 Mar 2026 13:56:23 +0000
asID: 25543
IP address blocks: 154.66.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft
rsync://rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C01B9AF/serialNumber=E2FB6437B4C94D5F51221B1650563A48FF54BE09
Validity
Not Before: Mar 5 13:56:23 2024 GMT
Not After : Mar 5 13:56:23 2026 GMT
Subject: CN=65e7248a-ffcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c6:18:2d:8f:4d:93:2e:aa:3e:cf:9d:93:c6:
9f:ef:f8:df:ea:25:28:16:ec:a4:52:bd:26:b6:c4:
87:76:da:9c:04:bd:47:09:64:f8:67:e0:ed:77:fe:
45:4d:38:81:47:87:f4:3c:51:d9:ff:b0:85:4b:74:
45:0c:d9:37:20:1e:e2:9c:29:a4:b4:8e:23:82:99:
5c:df:dc:ff:10:a3:0e:8b:19:16:4d:4b:25:98:8e:
0c:f9:da:9e:50:60:73:51:f2:93:1b:3b:11:a3:98:
5b:b9:5e:09:f1:cc:c7:96:75:c1:2c:64:98:8f:56:
a3:34:fc:bd:67:99:89:f5:60:a6:75:46:cc:7e:e8:
a7:1d:c0:de:fd:a3:2f:79:22:a5:73:ef:40:89:17:
c7:92:2f:19:3e:63:87:28:97:fd:bb:30:c7:bf:50:
56:52:c6:38:a1:ff:e6:bf:e6:7f:20:54:58:89:2d:
28:a9:38:f7:10:27:0c:b5:fe:0e:cd:3a:dc:ac:98:
02:00:9d:04:a8:a7:88:2a:91:09:ec:d7:e9:21:e4:
7c:83:58:f0:4c:4a:b6:0a:2e:10:ac:d0:63:9b:ec:
f2:f9:fb:b0:5f:2c:19:53:d5:d3:aa:c2:55:20:e7:
3b:23:2e:8a:62:5b:83:48:b3:42:07:1d:2e:e1:58:
bf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:80:56:B9:76:F8:BA:01:6E:1E:2C:9D:5B:39:DB:C3:77:04:49:AE
X509v3 Authority Key Identifier:
keyid:E2:FB:64:37:B4:C9:4D:5F:51:22:1B:16:50:56:3A:48:FF:54:BE:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/288D4C62DAF811EE99015975775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.160.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:87:24:e2:96:7f:30:9a:d4:ea:27:24:6a:ff:90:fa:4b:45:
27:be:f3:14:80:c1:54:36:ee:18:73:12:c6:50:bf:d8:36:de:
8c:72:bb:5e:b2:7f:9f:60:65:bf:ac:17:2a:6a:1a:43:42:66:
19:b6:08:75:5e:34:22:5f:15:3f:2e:e9:d0:7c:9d:b8:cf:3e:
17:33:f2:a6:e4:dd:51:6b:0a:27:a0:5d:13:ec:49:b7:9f:b3:
ad:19:b8:24:ec:8e:1e:4d:42:b9:97:5d:ae:0b:8e:e8:f4:ba:
4a:1b:d5:4c:1c:b9:c3:f9:9d:c7:1d:41:f6:1b:87:02:a4:0d:
a5:5c:c6:6f:e1:85:4d:f9:3e:e1:39:3c:55:df:7d:f4:02:1b:
6b:c0:3c:e7:e3:15:ed:d1:a4:27:a6:22:7e:0f:c7:e5:89:ae:
cb:b5:46:27:65:3c:f5:5e:e7:5f:8e:3b:f9:1f:3e:57:b4:4d:
c3:aa:9a:63:44:8f:e6:4f:ef:ff:ca:d9:25:91:eb:4b:5d:c6:
eb:84:94:49:d2:76:2c:20:59:f3:f2:df:b2:3f:90:fb:1d:4b:
b8:e2:a5:45:5d:93:e0:c5:da:2f:1a:e0:2a:b3:7b:a7:e4:e7:
c5:d3:b4:cf:ba:37:78:4c:5a:52:cf:f1:fd:74:f4:4e:59:a0:
02:cc:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:40:50 2024 by rpki-client on console-ams.rpki-client.org