Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6F5CE49471B711EF90534576762E951A.roa
File: 6F5CE49471B711EF90534576762E951A.roa (raw, json)
Hash identifier: BgRkQXMw8DsXi+GYyDBhHIyuFyaoPgVKDqSnZODTYRU=
Subject key identifier: 0D:ED:BC:98:86:C0:54:58:20:6B:53:31:CC:33:4E:80:3D:14:25:7F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 11F4
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6F5CE49471B711EF90534576762E951A.roa
Signing time: Fri 13 Sep 2024 10:03:33 +0000
ROA not before: Fri 13 Sep 2024 10:03:30 +0000
ROA not after: Sat 12 Sep 2026 10:03:30 +0000
asID: 212238
IP address blocks: 196.251.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4596 (0x11f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Sep 13 10:03:30 2024 GMT
Not After : Sep 12 10:03:30 2026 GMT
Subject: CN=66e40df5-fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:48:38:51:39:7d:c4:35:57:56:21:d1:26:
15:89:7e:5c:aa:6c:76:38:b4:22:f0:94:19:c0:e9:
98:af:33:4d:1d:81:0c:b0:aa:3d:b3:b0:5a:45:d7:
b9:36:53:1a:b7:a9:e0:4f:3d:2b:75:84:aa:15:b5:
87:ee:93:f1:b6:33:d4:4e:64:7c:c1:a5:0d:e4:29:
b3:b6:d1:58:35:88:b9:ff:da:de:bb:75:e7:3a:55:
c9:74:01:ea:4d:99:08:41:c3:63:48:52:12:15:12:
4a:96:cc:0e:14:45:1f:5f:96:2b:a3:38:2f:5d:0e:
ff:16:40:30:17:3c:e5:7b:c0:b8:e1:cf:ff:53:a6:
1c:9f:14:80:f5:a1:da:dd:cc:d6:6d:85:76:5d:13:
19:7d:4d:ec:2f:3c:f2:48:7f:dc:3a:93:b2:2f:27:
2b:8c:71:1a:d5:49:d7:47:8b:6c:f4:d3:9b:9b:40:
5d:35:eb:48:29:51:58:20:c1:c4:76:4f:bd:79:80:
ab:ac:5d:9d:99:9c:1b:5e:e2:1d:76:4f:77:b7:61:
86:e5:78:8d:38:5e:18:0b:d4:5f:56:5b:1c:dd:cc:
58:6c:dd:81:a2:4a:87:37:dc:0c:5e:3e:79:e4:df:
af:a3:ff:41:4a:16:98:db:fa:7f:52:b9:c8:94:e1:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:ED:BC:98:86:C0:54:58:20:6B:53:31:CC:33:4E:80:3D:14:25:7F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/6F5CE49471B711EF90534576762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.251.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:0d:7f:56:70:39:4b:3d:0e:0b:02:e2:92:46:76:cc:d2:00:
fd:52:10:40:d6:f0:c5:b0:68:bb:f6:86:b4:32:a3:7a:e9:eb:
47:96:26:b2:1d:81:24:f3:b8:3b:a3:97:4f:bd:6e:f3:c5:d1:
ee:17:44:e0:b0:03:94:7e:a1:69:2f:1a:b3:98:c0:91:ed:7f:
90:4f:e2:0e:ff:55:78:6b:2f:71:18:ea:c8:26:b5:39:5c:67:
74:53:46:a4:8c:75:e2:a1:c1:01:64:b5:e6:f6:c8:cb:6d:ab:
0d:31:ea:55:77:31:3e:a2:8f:56:ea:ed:80:3d:dd:16:8e:7a:
6d:e3:fb:79:7f:ef:c1:79:76:d8:f5:c9:6f:a9:7a:2f:83:59:
fb:f5:69:1d:9d:07:05:b5:0f:c6:9d:92:2f:86:92:1a:fb:f5:
5b:00:d5:17:d5:20:92:43:ae:1b:d7:d3:a1:39:3c:4e:08:ed:
f1:2c:2a:25:0e:d1:8c:a6:8f:b9:1b:a9:36:81:6f:d4:4e:44:
c3:c6:7f:e0:a2:70:01:63:ac:27:cc:3c:10:6f:5b:68:db:c3:
84:e3:74:d8:6c:93:71:90:ae:33:16:bb:01:6c:2c:a5:eb:c5:
14:aa:54:79:44:4a:99:95:a3:d7:3a:49:ea:b5:0b:3a:18:0b:
b8:5e:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:16 2024 by rpki-client on console-fra.rpki-client.org