Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6D90DEC6CAA111EEA7B6588A775412E6.roa
File: 6D90DEC6CAA111EEA7B6588A775412E6.roa (raw, json)
Hash identifier: YpxioxbICGbc7bU0ll0zV+o2CyLLdt0hTJ8vgg412cE=
Subject key identifier: 98:DD:21:7F:DF:0A:91:CF:7B:E6:51:EF:BA:4B:4D:85:68:91:15:C0
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 0F44
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6D90DEC6CAA111EEA7B6588A775412E6.roa
Signing time: Tue 13 Feb 2024 18:55:17 +0000
ROA not before: Tue 13 Feb 2024 18:55:14 +0000
ROA not after: Fri 13 Feb 2026 18:55:14 +0000
asID: 26737
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3908 (0xf44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Feb 13 18:55:14 2024 GMT
Not After : Feb 13 18:55:14 2026 GMT
Subject: CN=65cbbb15-6a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:93:c0:37:29:57:9b:60:4f:95:5c:b6:c8:
f4:a5:b2:0f:77:a5:5d:cc:75:02:f4:a2:87:d8:54:
57:21:d6:40:76:8c:8a:c2:37:9f:46:58:5c:ca:77:
26:a8:66:30:8a:bc:fa:b1:13:d2:b8:11:49:51:91:
76:c3:7a:97:c3:9b:bb:46:95:2a:9a:20:77:47:c8:
da:3c:b8:14:d2:fb:54:b9:e2:fb:67:1b:53:08:5b:
ff:84:b4:45:11:bc:d2:00:1b:e7:1a:48:57:af:04:
a4:db:a4:89:68:16:b3:06:5e:f1:c8:f4:90:0f:65:
13:05:9c:f7:0a:47:7f:d5:a3:85:9e:eb:86:86:d3:
a6:fd:6c:1d:3f:ae:c5:76:f0:c0:1f:0e:87:b9:3c:
72:b5:a1:90:bf:ee:d6:f5:22:64:a0:94:a5:f6:d2:
1a:b3:c5:a7:d3:d7:83:42:4a:f2:45:da:be:a8:73:
48:c2:05:cb:b0:f6:36:c5:e0:2d:28:99:8a:31:ba:
c9:22:30:c4:83:b0:c6:5c:67:f4:cc:f1:75:b0:45:
2c:2b:e1:f2:63:cb:2d:9c:08:d7:4e:d1:96:94:22:
66:01:db:58:43:0d:6c:ff:58:c5:d9:2f:92:7b:db:
aa:ad:41:50:f7:ce:8d:bc:27:b4:51:6b:e0:31:1d:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:21:7F:DF:0A:91:CF:7B:E6:51:EF:BA:4B:4D:85:68:91:15:C0
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6D90DEC6CAA111EEA7B6588A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b4:81:7f:81:99:30:85:09:9f:49:6d:f9:31:91:a1:fe:69:
59:f4:78:05:01:0e:46:3c:5e:3d:01:a2:63:b9:ea:19:4e:d1:
88:9d:13:30:76:e9:d1:93:fa:d3:a6:56:5f:7d:6e:e1:d3:4b:
d1:66:fd:7b:f0:5e:e3:e9:a4:2e:d2:31:fd:ff:ce:15:28:ac:
51:a4:68:92:25:4d:d1:be:50:c7:6e:40:b9:a7:7b:9c:7e:9c:
4c:31:31:9f:04:96:2b:23:63:6c:6c:bf:a2:07:19:22:88:ad:
d4:fc:16:41:5d:92:7d:56:1e:41:05:73:ed:95:8f:cd:39:fd:
ee:a9:ac:45:8b:de:ed:69:78:a3:9b:ab:09:53:16:57:92:bf:
54:f6:84:f6:ac:95:b4:fe:8e:cf:2d:38:7e:07:bc:73:aa:c9:
e1:a3:a6:a7:b1:c9:5f:73:ec:c4:4e:ad:48:ce:47:aa:64:c6:
5e:03:52:96:38:df:12:bb:90:7c:a3:aa:80:06:8f:4a:51:b4:
40:ca:58:36:89:d4:ba:af:0a:e4:d9:a1:da:e6:05:34:ee:59:
72:3c:07:74:a7:9b:25:f4:88:13:32:24:53:e0:95:73:d1:11:
c1:6e:eb:ea:d7:27:13:f7:4f:5f:ab:09:ce:a9:c0:d6:52:6c:
11:d4:a4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:41 2024 by rpki-client on console-ams.rpki-client.org