Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E44B1EC233B111EF97C6336A762E951A.roa
File: E44B1EC233B111EF97C6336A762E951A.roa (raw, json)
Hash identifier: 4AF79ac2O1qxvr9vqf+XsoFd9MBZaDMRtzofPaobW0Y=
Subject key identifier: 88:CD:22:4C:1D:22:0B:EA:46:7A:BE:F9:1A:01:5F:5B:C1:2C:93:8A
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 111B
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E44B1EC233B111EF97C6336A762E951A.roa
Signing time: Wed 26 Jun 2024 11:47:41 +0000
ROA not before: Wed 26 Jun 2024 11:47:37 +0000
ROA not after: Fri 26 Jun 2026 11:47:37 +0000
asID: 212384
IP address blocks: 196.251.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 08:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4379 (0x111b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Jun 26 11:47:37 2024 GMT
Not After : Jun 26 11:47:37 2026 GMT
Subject: CN=667bffdc-36d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:68:ae:b9:9d:59:74:5a:46:6d:1e:88:78:
4f:8a:d3:d7:9d:0b:80:6e:72:95:fe:11:f8:a5:b1:
01:dc:e7:14:23:92:75:23:3c:29:93:9c:72:a7:cf:
2f:17:10:4b:eb:9c:f9:f2:c6:a6:56:b1:ef:9f:d8:
56:f4:7c:e5:1f:cf:62:60:7a:a0:1a:de:72:d7:4b:
51:13:3b:b8:68:ef:3d:61:7c:b1:c6:2d:50:22:d1:
b1:b2:ae:14:c6:31:37:03:df:c6:62:b5:4f:90:4d:
95:ec:fd:88:5e:a6:29:d3:f4:58:d3:70:1c:af:b5:
2f:62:99:c7:80:4b:9a:bc:52:1f:66:74:ad:14:01:
51:4b:a9:b0:12:9d:a7:b5:39:bc:ed:6c:b3:bc:5a:
40:eb:a3:29:bd:92:8d:93:52:70:fc:83:a7:32:b6:
39:e0:34:b0:fb:cf:ce:36:d7:46:a8:7c:ce:1f:e5:
73:f7:54:68:ab:d9:78:86:fc:f6:80:d3:c5:b7:31:
aa:74:58:77:16:1f:5d:49:c6:21:46:4c:03:b8:5c:
f8:52:cc:ba:59:1b:f1:89:ca:40:ce:58:e7:30:8f:
88:33:68:8e:a9:3c:b4:96:47:b8:26:79:d3:7d:96:
fc:8e:62:ed:32:17:37:a8:18:73:31:00:ef:fb:a4:
22:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CD:22:4C:1D:22:0B:EA:46:7A:BE:F9:1A:01:5F:5B:C1:2C:93:8A
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/E44B1EC233B111EF97C6336A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.249.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:27:68:35:42:2a:ae:47:6e:25:59:d9:64:54:79:cc:46:0e:
b1:4c:74:e3:c0:9b:a5:f9:b9:1e:87:61:ad:8e:da:06:b4:05:
19:6a:05:39:7a:c2:86:54:31:02:b9:a7:36:c0:ef:0d:40:30:
e3:23:75:61:d4:db:02:9a:45:0a:b1:8d:08:2a:13:ec:fa:b4:
64:e1:8c:09:b0:70:b7:44:29:2c:65:c6:17:08:58:50:c2:d4:
4f:49:41:72:8c:e6:26:98:09:8d:19:95:bf:90:87:11:f6:b9:
c4:3a:6e:4a:3f:cc:61:77:74:1e:e8:5b:f1:f9:3c:72:ae:72:
d5:e5:0f:29:2b:7c:88:c5:54:ff:02:33:e6:86:61:3d:66:5e:
9c:af:eb:92:73:3d:d2:f1:b7:c1:32:4f:0d:b7:ae:b2:85:a7:
a5:58:43:d4:df:95:19:26:b4:0d:ef:2d:a3:6a:e9:b0:e5:18:
27:4a:91:1f:d6:b8:b0:da:a3:6f:5c:8a:a9:dc:2e:f2:93:22:
b1:ab:b4:a1:05:3b:dd:61:a1:c3:93:14:73:41:20:e5:ee:a2:
47:db:d0:4b:95:fe:8b:63:78:66:a5:e3:84:a2:d7:7c:4e:e4:
a7:a4:f3:e2:47:c1:5d:cb:81:c2:31:57:43:8c:03:2f:79:85:
3a:28:9b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:59 2024 by rpki-client on console-fra.rpki-client.org