Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/7576B97E4FFF11EF84A6EB64762E951A.roa
File: 7576B97E4FFF11EF84A6EB64762E951A.roa (raw, json)
Hash identifier: 33ok2yqrTl57C64Sr4/sUY8EF0IDi0i5pKehUOrq0+s=
Subject key identifier: BE:21:0D:20:71:9F:09:00:E1:8F:8C:D0:47:22:1B:44:63:01:6C:09
Certificate issuer: /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial: 06B1
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/7576B97E4FFF11EF84A6EB64762E951A.roa
Signing time: Thu 01 Aug 2024 12:13:28 +0000
ROA not before: Thu 01 Aug 2024 12:13:24 +0000
ROA not after: Fri 31 Aug 2040 12:13:24 +0000
asID: 3491
IP address blocks: 196.50.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1713 (0x6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Validity
Not Before: Aug 1 12:13:24 2024 GMT
Not After : Aug 31 12:13:24 2040 GMT
Subject: CN=66ab7be8-3e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a9:3d:76:63:1e:0a:1f:ce:ec:32:a5:95:27:
65:07:aa:87:75:66:13:1a:c3:57:55:9d:1c:90:e4:
04:bd:68:da:fb:63:9e:06:14:dc:67:1c:f8:f7:aa:
9f:67:2a:5d:ba:9e:8f:42:f8:8a:5e:4f:98:84:9e:
76:1b:f2:19:e8:c6:d3:f9:ad:56:9e:2a:b0:41:5f:
84:ec:d3:2a:96:0e:27:c2:cd:5d:0f:e1:79:10:62:
1d:8e:1d:ee:55:6c:b3:98:3f:75:3c:22:ec:8c:a2:
79:ac:67:5f:a2:7f:ed:3e:79:7a:dd:e4:dc:b4:d6:
15:06:8c:6d:02:b4:f2:65:b2:0b:20:1d:33:cd:9f:
01:bd:e9:95:6b:c2:93:3f:27:8c:ab:d3:79:02:4a:
03:cd:24:2a:3d:57:81:04:ea:6b:36:0d:0d:72:06:
82:50:40:6f:0d:9e:b6:78:aa:c1:c1:e1:94:01:93:
e8:53:17:0b:e8:f7:cb:24:6b:a2:8b:2c:32:82:9a:
c5:c7:5f:02:6f:52:21:5a:9c:6d:03:df:00:ae:b1:
5b:e3:11:00:de:77:38:7e:e7:85:f0:5e:c1:32:59:
a1:46:75:3f:03:79:ab:7f:67:98:50:a4:14:b8:92:
11:e9:c8:66:44:05:31:b5:ff:f3:02:d7:17:25:f6:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:21:0D:20:71:9F:09:00:E1:8F:8C:D0:47:22:1B:44:63:01:6C:09
X509v3 Authority Key Identifier:
keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/7576B97E4FFF11EF84A6EB64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.50.128.0/18
Signature Algorithm: sha256WithRSAEncryption
5e:f0:12:6a:22:17:08:62:51:c4:f4:51:ec:d9:09:a2:40:95:
5f:23:24:12:20:f6:f1:ac:d7:c7:c3:35:56:c7:3a:b9:5c:be:
db:69:e5:a0:b7:0e:23:9e:9d:01:05:bb:03:fc:5c:f2:1f:25:
ba:86:a2:e6:6a:e9:52:16:9a:97:13:bb:12:a6:d3:75:52:91:
ff:73:3a:38:27:45:72:81:89:4d:79:66:11:05:e8:f0:47:a1:
16:65:40:e8:94:2d:14:c3:92:7a:00:6d:2c:69:f5:e9:6e:b1:
32:10:65:59:ac:d4:ee:7b:eb:3b:2b:3f:7d:9f:ce:b5:39:f6:
58:70:b4:72:78:3e:d9:98:66:0d:0f:96:9c:a1:88:62:9a:b3:
18:a7:09:65:a8:c7:41:58:cb:86:ad:bb:e5:f2:87:fb:2c:6b:
ae:8b:ee:8e:63:2e:e6:89:a7:1b:dc:3e:98:95:10:58:e7:07:
fc:bc:c1:81:20:a1:01:8f:d0:25:72:b1:de:94:bc:57:0f:68:
53:92:cc:30:83:d8:a9:69:3d:bd:c8:b3:03:2a:b7:5e:d8:6f:
49:cc:ba:cb:58:ef:ec:69:ac:f0:f5:f2:ab:e9:f0:9a:54:ac:
de:ef:ca:3a:e6:7b:02:0f:23:b1:fb:86:d6:06:af:a7:ba:65:
63:80:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org