Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1AB35ADA2E5C11EE8F2080624AD9E6FC.roa
File: 1AB35ADA2E5C11EE8F2080624AD9E6FC.roa (raw, json)
Hash identifier: Cq6th+iYFNimhoF02mVxEluO/jVVYwdGDKbmOAJDonI=
Subject key identifier: 7F:57:74:95:AF:84:37:D9:47:FC:69:3A:CE:98:6B:56:BE:E4:33:AA
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 04ED
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1AB35ADA2E5C11EE8F2080624AD9E6FC.roa
Signing time: Sat 29 Jul 2023 22:06:01 +0000
ROA not before: Sat 29 Jul 2023 22:05:58 +0000
ROA not after: Sat 30 Jul 2033 22:05:58 +0000
asID: 37119
IP address blocks: 105.174.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1261 (0x4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Jul 29 22:05:58 2023 GMT
Not After : Jul 30 22:05:58 2033 GMT
Subject: CN=64c58d49-8de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:77:5c:40:c9:a8:2a:57:0d:f2:a7:97:5b:
07:16:c1:88:e8:d6:8f:66:43:92:b7:4c:65:c0:c1:
a6:b1:26:89:a1:f3:75:bb:c6:6a:e7:0d:c1:4c:56:
44:f2:83:07:3d:82:60:83:44:94:db:04:55:32:8c:
88:54:a9:21:4b:5b:e6:ca:16:c8:8e:f8:46:c6:c2:
11:8d:db:23:42:7a:40:b1:24:17:a2:fd:db:78:05:
ea:5b:85:26:e2:39:32:fd:68:e6:8b:00:c1:7e:65:
6b:39:93:b9:b7:d5:00:82:c7:34:61:ff:9f:d8:4e:
18:d4:9e:6f:fe:e6:f1:ad:ff:fb:94:36:bb:f9:f4:
12:3e:4c:0a:26:59:45:af:7b:56:a2:72:f0:d0:c3:
d7:16:85:0c:f4:04:81:6d:1b:44:6a:58:b0:8f:ca:
95:b7:d4:29:d0:c2:81:63:d2:d8:54:40:cf:b3:48:
f3:db:db:1f:d4:07:ee:82:c5:5c:19:6f:10:b2:92:
44:9e:2f:ae:54:f4:7a:67:bd:b7:3d:49:31:50:b6:
b6:c0:59:ec:56:77:25:e8:92:7d:67:6b:ad:ff:e2:
4a:45:0c:f8:88:7b:00:10:61:87:4a:ea:b1:bf:d6:
c2:47:45:8d:f8:f5:5c:1f:19:ca:cd:41:d7:67:65:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:57:74:95:AF:84:37:D9:47:FC:69:3A:CE:98:6B:56:BE:E4:33:AA
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/1AB35ADA2E5C11EE8F2080624AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.174.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:9f:65:24:ba:e8:3c:45:04:b6:74:1f:04:a4:66:33:61:e2:
35:c7:88:a8:58:16:b1:8a:d4:dd:32:7a:82:f9:67:5a:14:9c:
e7:a0:f1:21:ab:02:e7:5a:17:78:c8:54:40:f3:ee:fc:ec:e7:
1d:22:8d:7d:79:db:b1:8b:e0:cb:25:1e:56:8c:bd:da:e4:cc:
9e:44:17:4f:49:fc:05:c0:1e:9e:a9:c4:9e:9e:08:5d:2b:22:
20:6d:c1:86:0a:61:e3:e0:49:36:5f:97:3d:7b:40:09:91:ab:
b8:af:57:b8:95:05:c9:b6:4e:d0:25:42:3b:50:94:4c:9a:75:
d2:f9:d9:d0:55:3e:e8:62:9b:9b:cd:07:38:23:c7:ca:37:62:
7b:f2:11:35:6d:c1:84:8b:83:91:ca:9f:ec:cc:3e:08:39:4f:
38:8a:72:96:82:32:c4:5b:a6:21:84:f2:05:cc:57:80:a0:90:
3b:de:31:a1:c6:10:80:63:1d:4f:36:12:03:8e:b5:68:6e:76:
64:db:bc:ef:f1:5c:da:78:73:c7:3c:79:aa:cf:b8:40:26:ee:
b1:d1:73:e5:cb:b8:80:24:0c:87:a0:f6:5a:10:c9:6e:a0:d2:
95:6d:48:82:03:7a:69:d8:b2:65:43:15:b6:a8:e9:48:b8:97:
80:3f:60:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org