Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/2FBF38828D4611EFB77A0873762E951A.roa
File: 2FBF38828D4611EFB77A0873762E951A.roa (raw, json)
Hash identifier: vEjrTLv4wD2q4aem1TCkPD8stGKWE+r2SuTHo54Rzvc=
Subject key identifier: F4:8D:D2:62:E6:29:B1:99:3B:D7:A6:0E:92:EE:AF:8A:61:F1:A0:49
Certificate issuer: /CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Certificate serial: 33
Authority key identifier: 1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
Authority info access: rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/2FBF38828D4611EFB77A0873762E951A.roa
Signing time: Fri 18 Oct 2024 11:43:26 +0000
ROA not before: Fri 18 Oct 2024 11:43:22 +0000
ROA not after: Wed 18 Oct 2034 11:43:22 +0000
asID: 37680
IP address blocks: 155.93.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.mft
rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FC6C8AR/serialNumber=1A8185FCF63D079B206A34A8B99487A59D818E5D
Validity
Not Before: Oct 18 11:43:22 2024 GMT
Not After : Oct 18 11:43:22 2034 GMT
Subject: CN=671249de-abeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:68:32:10:7c:72:81:3e:f8:74:a5:77:e2:
21:08:34:f5:a0:f5:71:86:26:ed:23:9a:c6:3a:0f:
85:35:79:0c:62:57:ab:aa:fb:82:89:d2:bc:96:5c:
20:7f:d1:4f:4e:08:14:4b:0e:20:a3:9f:dc:cb:2e:
e4:00:a3:09:5d:d9:48:00:b9:66:d5:db:e4:c1:1d:
53:76:d7:54:75:49:3f:b2:62:f8:2f:2a:bc:65:41:
4c:ca:35:d7:ef:04:9d:34:c1:e0:a7:82:75:a4:42:
e4:30:51:a1:bb:7c:8c:e2:1f:a8:8a:19:fe:98:6a:
7a:2b:74:d7:f4:26:97:c2:82:ad:38:04:11:81:15:
e9:9f:04:23:0a:31:0d:1f:40:92:1a:e6:21:d2:a7:
18:54:d8:23:58:00:f7:71:34:51:6b:f1:de:ff:6d:
8d:91:6c:21:42:53:1a:63:d0:36:6a:ca:30:69:81:
76:cf:0d:5d:83:32:41:a8:1d:ea:cf:05:65:45:3c:
0a:19:e8:0d:fb:d6:43:08:de:4c:e5:e4:11:62:4f:
16:b7:38:dd:27:0c:29:72:45:0f:5d:1b:8a:3e:b1:
34:68:b7:03:6b:f4:5f:e1:ab:a7:85:75:3b:27:81:
aa:c9:e4:7e:83:b9:83:d1:34:5f:37:b9:58:b5:20:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8D:D2:62:E6:29:B1:99:3B:D7:A6:0E:92:EE:AF:8A:61:F1:A0:49
X509v3 Authority Key Identifier:
keyid:1A:81:85:FC:F6:3D:07:9B:20:6A:34:A8:B9:94:87:A5:9D:81:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/GoGF_PY9B5sgajSouZSHpZ2Bjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GoGF_PY9B5sgajSouZSHpZ2Bjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC6C8/BCADBE8C70E311EFB4AB1745762E951A/2FBF38828D4611EFB77A0873762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.93.176.0/20
Signature Algorithm: sha256WithRSAEncryption
d0:24:6a:0a:85:e9:69:51:b9:62:d5:35:5b:87:b4:17:ed:f6:
1d:d7:3b:e7:23:ad:ff:fb:b9:10:b5:84:99:09:f3:a8:d9:06:
af:41:e5:3e:ee:11:17:27:52:b9:9e:a4:c9:3c:2c:fb:85:a4:
76:d1:77:d3:cd:bc:52:6e:41:4d:88:d1:62:6e:b5:3e:56:f7:
04:99:2b:6a:bd:56:c4:9d:eb:2f:21:5b:82:32:92:c7:69:47:
6e:63:e7:42:fb:20:ee:4b:85:b6:08:f9:75:58:99:3d:6a:5a:
2e:2f:d9:12:4d:04:a4:ec:ff:bc:da:31:3f:41:15:5d:e2:79:
6a:e7:9b:91:8d:ba:81:99:9f:21:17:a3:27:a3:bb:fc:47:16:
30:5d:49:a9:6b:c3:d1:05:34:bb:54:01:fa:45:93:c0:eb:3d:
b2:29:bb:b8:b7:96:7b:07:fb:9e:cf:49:fa:84:fe:89:df:36:
99:61:ab:c2:ef:b6:64:61:99:8d:ac:ab:fb:7e:22:78:8c:ae:
4f:b1:ea:38:bc:97:62:05:56:81:4a:c1:46:43:d9:a9:b1:e7:
da:9e:5d:60:1e:18:65:d9:a6:61:cf:9a:2c:22:24:76:59:e3:
8b:45:c3:9d:20:28:17:ee:8a:39:cc:bb:f4:41:b4:7e:0e:d0:
bb:f2:2f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:32 2024 by rpki-client on console-ams.rpki-client.org