Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8EE2/ABE4C34074C911EF8A3602AD762E951A/39AFF7BC74CA11EFB9D552B1762E951A.roa
File: 39AFF7BC74CA11EFB9D552B1762E951A.roa (raw, json)
Hash identifier: 3/FzNnEtzsY9UgUDhFMagD5Mdh37lPBV5bkghMciT+8=
Subject key identifier: AF:B8:66:29:AB:55:C7:00:E6:AD:CC:4C:CD:C5:9F:60:89:21:41:99
Certificate issuer: /CN=F36F8EE2AF/serialNumber=FD6AB8E14DE180D06C9181AE89BC390F8C416753
Certificate serial: 04
Authority key identifier: FD:6A:B8:E1:4D:E1:80:D0:6C:91:81:AE:89:BC:39:0F:8C:41:67:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_Wq44U3hgNBskYGuibw5D4xBZ1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8EE2/ABE4C34074C911EF8A3602AD762E951A/39AFF7BC74CA11EFB9D552B1762E951A.roa
Signing time: Tue 17 Sep 2024 07:55:37 +0000
ROA not before: Tue 17 Sep 2024 07:55:34 +0000
ROA not after: Sun 30 Sep 2029 07:55:34 +0000
asID: 327745
IP address blocks: 154.73.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8EE2/ABE4C34074C911EF8A3602AD762E951A/_Wq44U3hgNBskYGuibw5D4xBZ1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8EE2/ABE4C34074C911EF8A3602AD762E951A/_Wq44U3hgNBskYGuibw5D4xBZ1M.mft
rsync://rpki.afrinic.net/repository/afrinic/_Wq44U3hgNBskYGuibw5D4xBZ1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8EE2AF/serialNumber=FD6AB8E14DE180D06C9181AE89BC390F8C416753
Validity
Not Before: Sep 17 07:55:34 2024 GMT
Not After : Sep 30 07:55:34 2029 GMT
Subject: CN=66e935f9-1700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:f7:5d:eb:ca:5e:29:61:45:ce:18:ec:c8:
f6:f6:e0:70:cb:39:ea:00:42:91:22:16:54:63:31:
ef:81:85:08:81:12:e0:96:46:33:81:82:b1:dc:35:
20:11:64:29:62:ca:be:83:e9:06:70:10:c9:ce:bf:
ac:12:79:9b:3e:16:84:b6:25:3a:f8:d1:09:18:eb:
90:01:3c:1d:4b:81:35:d2:e7:85:60:b9:6e:55:dc:
46:19:e5:44:41:b2:8c:48:79:ec:3c:27:60:42:fb:
17:12:ae:45:c7:9e:37:73:a4:8e:8c:10:6f:24:ac:
6d:c3:5f:47:67:d9:95:c3:3a:ef:d5:b9:a0:11:fe:
32:42:bf:26:b2:c8:19:f6:7e:6c:f7:41:d3:59:f7:
d2:df:0c:2c:25:0c:fe:8b:54:46:2f:3b:01:99:b2:
b3:1f:5a:12:b8:f6:7b:b9:8a:a2:fb:ab:94:5a:23:
ec:89:4b:06:74:5f:34:6d:e6:d6:a5:10:e7:48:3b:
94:07:08:c9:26:6c:e2:2d:c1:ef:0d:61:3c:2b:37:
f0:9b:97:f1:fc:ea:8b:c2:c7:50:6f:12:ce:d6:c8:
fd:9d:cc:7a:7f:b7:9a:f9:6e:ac:81:29:f6:7e:d8:
45:e5:71:65:12:57:8e:20:5a:14:aa:a7:2a:e6:30:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B8:66:29:AB:55:C7:00:E6:AD:CC:4C:CD:C5:9F:60:89:21:41:99
X509v3 Authority Key Identifier:
keyid:FD:6A:B8:E1:4D:E1:80:D0:6C:91:81:AE:89:BC:39:0F:8C:41:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8EE2/ABE4C34074C911EF8A3602AD762E951A/_Wq44U3hgNBskYGuibw5D4xBZ1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Wq44U3hgNBskYGuibw5D4xBZ1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8EE2/ABE4C34074C911EF8A3602AD762E951A/39AFF7BC74CA11EFB9D552B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.73.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:a0:bf:ee:f3:87:cf:dd:84:df:48:64:f9:2b:1e:d6:97:fe:
9d:fe:02:a8:ae:bf:19:d7:50:de:93:9e:16:8b:60:d9:d3:06:
91:c9:14:76:59:74:bd:d4:b6:00:29:99:ec:38:27:36:45:63:
98:b5:25:20:d3:0f:b1:1f:5e:10:18:09:45:e4:81:8f:41:88:
75:0a:ee:8e:ce:0f:e3:a5:0e:1c:dc:16:c9:e4:99:1f:45:78:
0b:19:1c:36:1e:67:cf:25:02:95:44:d7:d6:54:74:08:d9:22:
fa:7d:90:df:90:87:5d:63:6b:78:77:8e:e9:56:b6:b1:04:08:
cf:d3:b5:19:1d:c1:80:dc:ab:31:c0:db:00:66:03:9f:d5:ea:
d0:63:d4:4b:ec:11:71:eb:bb:5c:1c:02:60:7b:1d:1e:3e:a0:
a2:e6:77:19:cc:30:cb:ae:ea:03:c9:7c:14:5e:66:c7:25:7a:
0e:d3:1c:21:52:7a:96:d6:e4:0c:93:86:7c:b7:c6:c4:ff:28:
ec:bc:f4:e1:5e:19:4c:26:dc:5b:68:7d:b7:79:7f:51:dd:15:
8d:98:d2:77:d3:1b:9b:38:08:d0:d9:4f:70:6c:22:62:4d:1d:
3d:e4:bd:37:78:33:e3:ed:70:b4:c2:3d:c3:5f:af:fd:7d:c6:
e9:ba:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:52 2024 by rpki-client on console-fra.rpki-client.org