Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CAA05E9E2E4C11EEA0C6F3354AD9E6FC.roa
File: CAA05E9E2E4C11EEA0C6F3354AD9E6FC.roa (raw, json)
Hash identifier: AjQ+8U0bAmDC4WuAKpsiT74PGOquGw/QrcFLJJk97oE=
Subject key identifier: F1:7D:51:39:FB:F5:84:AF:C3:ED:3E:59:35:1F:67:6F:D8:34:A3:FB
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 04AB
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CAA05E9E2E4C11EEA0C6F3354AD9E6FC.roa
Signing time: Sat 29 Jul 2023 20:16:25 +0000
ROA not before: Sat 29 Jul 2023 20:16:21 +0000
ROA not after: Sat 30 Jul 2033 20:16:21 +0000
asID: 37119
IP address blocks: 105.169.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1195 (0x4ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Jul 29 20:16:21 2023 GMT
Not After : Jul 30 20:16:21 2033 GMT
Subject: CN=64c57399-6a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:55:ba:39:c5:67:fe:08:8b:70:e4:0e:06:
44:a8:14:a8:95:68:4b:a9:bb:08:5b:5a:a7:06:08:
a3:53:8a:f7:47:84:9d:5b:74:3d:fe:e8:19:2f:0e:
cf:d7:18:1e:5a:e6:b1:75:3b:b8:37:9e:e9:da:1d:
dc:14:e7:d2:25:83:2f:89:a2:41:7a:54:76:52:bf:
07:73:c6:40:9c:9e:06:98:cb:5f:00:7f:ad:a5:23:
be:f6:54:74:23:32:6e:c9:04:d2:57:67:e1:d8:2c:
29:6b:5e:cb:27:19:9e:77:39:74:44:30:e6:45:d3:
62:86:fe:f9:1c:cb:88:24:bd:c5:8d:1f:95:fd:34:
d6:eb:d5:bc:db:41:ae:d2:98:fe:22:29:31:9e:ad:
8c:40:13:5b:f8:c8:67:bb:5e:0e:87:7a:ce:f7:90:
b6:66:9d:7e:4d:15:ee:c5:03:af:be:7d:19:dc:18:
dd:3c:5d:e4:8b:78:98:d0:2a:0f:c8:be:2a:b7:29:
0a:42:c9:41:f3:80:33:ab:79:12:8d:93:98:0e:0a:
9a:42:19:f3:8d:28:22:c9:75:c0:7a:20:ff:94:5e:
b5:dd:a8:54:18:97:6e:98:c9:16:b6:8d:02:50:c2:
06:a4:d7:4b:42:31:85:6b:7a:41:9e:4e:d2:ca:a0:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7D:51:39:FB:F5:84:AF:C3:ED:3E:59:35:1F:67:6F:D8:34:A3:FB
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/CAA05E9E2E4C11EEA0C6F3354AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.169.96.0/19
Signature Algorithm: sha256WithRSAEncryption
47:3e:6e:9e:81:b3:3a:2b:6f:6e:5a:52:d7:8e:e3:b3:4e:d4:
35:6e:d3:5f:e1:19:0e:ff:d2:27:8d:12:71:46:5c:2f:71:35:
0a:f6:62:40:88:05:08:ef:b4:d6:40:43:3a:ea:ff:fb:c1:51:
c0:83:46:2a:c4:c3:38:5c:fb:c2:3a:80:06:25:2a:03:4e:21:
55:e7:ae:74:ff:9a:a5:cc:1a:bc:b0:6a:ea:7d:3e:dd:2f:e2:
92:3d:84:82:52:a6:82:41:30:16:bc:b7:e6:ca:5e:4b:fe:08:
28:08:ae:5e:54:52:8b:73:3d:1d:fd:b3:64:f8:e9:cb:cb:53:
d5:0c:9c:76:c1:cd:a6:2f:31:ce:a4:54:c3:77:2f:85:aa:24:
4c:30:85:40:8b:12:2a:3b:60:08:a0:2e:8b:cc:75:fc:fd:78:
f3:33:8d:ba:c9:3e:6e:01:dc:69:84:97:d0:13:2a:81:d2:bf:
b0:c1:a7:af:97:d9:38:1c:2f:39:23:f3:87:63:b1:86:95:a6:
0d:e3:8b:76:ee:99:90:ea:4d:97:e1:26:24:8b:46:f5:3c:67:
d7:0b:04:89:8a:30:e3:60:e1:d6:4c:bb:28:a2:f3:ea:df:3f:
de:2c:b5:64:12:8b:0c:21:ff:be:52:4a:45:7c:e0:f4:78:38:
58:a5:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org