Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/488FB276587011EEB606753B4AD9E6FC.roa
File: 488FB276587011EEB606753B4AD9E6FC.roa (raw, json)
Hash identifier: IClcBDb9qhT93ZorIY5EHMcwSwHq87m1fossH4SrKZs=
Subject key identifier: 37:09:AF:DD:B8:32:61:3C:90:1F:37:0A:EB:46:89:AB:DA:AD:E2:96
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0D79
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/488FB276587011EEB606753B4AD9E6FC.roa
Signing time: Thu 21 Sep 2023 11:16:17 +0000
ROA not before: Thu 21 Sep 2023 11:16:14 +0000
ROA not after: Tue 24 Sep 2024 11:16:14 +0000
asID: 212238
IP address blocks: 196.251.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Apr 2024 20:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3449 (0xd79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 21 11:16:14 2023 GMT
Not After : Sep 24 11:16:14 2024 GMT
Subject: CN=650c2601-8395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d1:d2:c0:d4:50:f6:e7:c5:29:43:b6:e9:11:
97:e0:89:58:83:4e:da:c8:05:49:e1:ce:fd:1a:bb:
a1:d4:f7:89:0a:04:45:8e:d6:68:bd:34:e0:6b:f2:
45:a5:3c:43:8b:84:1b:6d:76:91:74:7e:a4:bc:5d:
a1:c2:c0:a6:d1:06:b4:fb:d1:62:3c:af:0a:52:80:
fd:10:0b:b5:b9:64:e3:7c:eb:fa:e2:ed:22:49:d9:
dc:d4:52:c2:2d:1a:4d:c8:7b:e4:35:42:fc:b0:28:
99:2e:23:39:02:2a:25:b0:bc:1d:b2:ed:38:10:e4:
d1:eb:b1:17:94:e6:82:6d:37:72:80:31:e1:91:08:
03:a4:f6:3f:43:3d:b4:ca:6f:cb:69:68:23:cf:a6:
53:0e:46:5a:8c:e6:b1:8d:9b:11:09:39:9d:b2:df:
41:a5:ba:70:a8:c8:ac:55:c8:5d:4a:be:e0:81:2d:
6e:e7:69:16:26:91:7b:5a:93:65:04:5b:d7:01:5f:
f3:1f:26:01:b2:b5:10:ba:ed:88:3f:a6:19:bf:af:
e4:01:12:c6:a8:bc:f2:1a:c1:2c:6f:6e:3d:a7:62:
77:42:a4:a8:5b:3c:d2:9a:6a:b4:de:c9:85:2e:74:
fa:c2:cd:f7:7e:d3:2f:2d:e8:96:5a:a2:9c:56:0d:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:09:AF:DD:B8:32:61:3C:90:1F:37:0A:EB:46:89:AB:DA:AD:E2:96
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/488FB276587011EEB606753B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.251.0/24
Signature Algorithm: sha256WithRSAEncryption
93:32:78:0d:48:ed:9f:be:f7:d2:f4:5e:40:f2:8a:bc:e6:97:
c9:f5:f8:07:88:5f:71:b1:2f:c9:98:a3:f7:60:a1:45:03:d5:
e0:e7:5c:af:83:db:92:96:24:ea:d3:23:48:b5:c7:e3:b5:0a:
2c:54:d0:95:57:12:bd:45:23:26:66:a6:0e:45:ad:4f:c2:89:
16:12:2d:38:b9:6f:b9:fc:cf:bd:8a:28:1c:e5:9f:04:1c:1e:
16:c4:34:86:3d:6f:c6:00:7d:da:31:4c:0c:6f:d6:a1:75:cf:
44:e5:93:48:26:24:8a:20:28:ac:00:8b:1b:55:52:0e:35:f9:
9f:52:71:9d:d9:ad:20:8e:c0:ed:e3:9e:2f:d1:c0:86:fd:4b:
d0:b3:2e:33:cc:45:46:1d:04:fd:6d:be:aa:ef:77:c9:fb:a8:
20:a4:d0:99:0f:22:97:1d:f2:7d:a4:27:d6:71:b9:bd:59:7f:
8d:18:7b:32:fe:99:90:64:df:f5:4e:d0:14:77:1a:f9:fc:5a:
31:7c:c9:05:72:5a:b0:f0:db:4c:df:62:a1:f4:e8:9f:d2:18:
12:67:ef:da:6c:ef:2d:fc:ef:3a:51:79:8e:ce:e2:82:a4:e9:
6d:26:b8:a1:30:7f:49:1c:dd:f3:ed:77:e8:ee:3c:bf:0e:e4:
05:6c:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:41:48 2024 by rpki-client on console-ams.rpki-client.org