Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/26269DCA72B611EE9357D27B4AD9E6FC.roa
File: 26269DCA72B611EE9357D27B4AD9E6FC.roa (raw, json)
Hash identifier: 3dxlO5s8fNKCH44Y68PDmZ1AV7fsyAT+xEMp3eJtEIU=
Subject key identifier: C6:8E:98:9B:B7:65:EC:FA:15:21:11:B2:16:52:0F:7D:7B:CC:CD:A8
Certificate issuer: /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial: 02
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/26269DCA72B611EE9357D27B4AD9E6FC.roa
Signing time: Tue 24 Oct 2023 21:41:55 +0000
ROA not before: Tue 24 Oct 2023 21:41:52 +0000
ROA not after: Thu 24 Oct 2024 21:41:52 +0000
asID: 0
IP address blocks: 196.60.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 02:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Validity
Not Before: Oct 24 21:41:52 2023 GMT
Not After : Oct 24 21:41:52 2024 GMT
Subject: CN=65383a22-f0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:b2:77:7c:77:e1:c7:84:1c:af:e0:a1:57:
65:8b:1a:36:41:ed:ac:ee:91:48:c3:ce:a3:ab:2a:
88:7a:2a:8d:f1:51:c1:87:08:d4:08:63:da:8e:d3:
23:f0:48:77:52:ba:ce:f8:3a:31:43:12:39:87:a6:
6f:5e:f8:94:aa:06:3e:51:94:ac:4b:ca:11:ad:a5:
51:b7:04:ff:d3:42:62:cb:0d:67:9f:ef:52:55:8b:
02:1b:d0:38:41:2f:cb:76:1b:87:01:cc:da:6e:dd:
83:5c:fa:83:5f:e6:92:71:ab:1a:c6:9b:a6:7b:d7:
9b:65:e4:cc:2e:3c:84:9c:e1:e7:c5:84:a8:7d:de:
84:75:2d:78:b0:1b:18:ea:68:71:82:fd:be:b4:62:
de:64:e9:62:15:4b:6a:4e:a3:7e:c3:14:ec:97:80:
94:35:fa:1a:6b:48:b0:52:eb:d8:46:c4:70:a4:21:
5a:02:54:f1:7e:bd:c7:20:6e:59:e9:aa:8b:2c:40:
7f:92:51:d6:bc:22:a1:2f:2a:73:1d:f5:0d:19:62:
46:ab:ef:01:99:9b:4b:4f:23:7c:98:14:13:61:e3:
c3:5e:e2:f3:c4:f5:dd:bf:0c:c1:0e:95:de:10:15:
7c:9e:71:a2:28:60:19:86:83:7e:2e:aa:a3:a8:cb:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8E:98:9B:B7:65:EC:FA:15:21:11:B2:16:52:0F:7D:7B:CC:CD:A8
X509v3 Authority Key Identifier:
keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/26269DCA72B611EE9357D27B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.74.0/24
Signature Algorithm: sha256WithRSAEncryption
41:25:65:dd:37:d5:75:f3:ca:b4:c0:a5:8a:12:9f:45:bc:f2:
61:08:18:c4:ba:33:c7:c2:ba:67:90:1c:3e:62:fc:2d:76:c5:
ff:b0:73:dc:45:45:ee:cf:dc:f7:32:62:76:40:c8:1b:a1:c1:
02:21:4c:d3:2a:d2:d5:00:32:a4:5f:33:16:64:5c:cb:b3:af:
bc:cc:83:41:a7:f1:28:d0:48:65:e4:3b:08:d5:27:10:7b:4c:
f9:82:1d:79:f5:cc:7d:0e:a2:3e:26:6f:54:d7:77:8f:7b:fc:
3b:68:60:94:34:85:ff:b8:d2:32:8c:dc:6b:fe:34:06:35:f2:
89:1a:7c:02:9f:f7:9a:c7:8d:71:7d:8c:74:07:09:90:a4:de:
4c:25:29:b3:22:57:6e:f3:66:a9:58:b9:7a:04:1b:3a:51:cf:
c4:1f:19:e3:22:2f:08:43:2d:88:04:0f:0e:7d:fb:de:c5:1e:
c5:73:97:22:10:b9:d8:03:b9:d5:76:29:06:fc:aa:4a:4c:60:
7d:2f:bd:0e:9a:24:a8:ce:29:f7:7c:ae:44:67:29:ec:83:cb:
52:72:b4:c5:06:e6:5d:3d:81:b3:8d:c5:fe:29:f1:1d:1d:37:
e0:bc:7e:48:e0:25:2a:b1:02:43:8f:f8:fa:ba:b4:76:f1:3a:
10:ac:1e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:17 2024 by rpki-client on console-ams.rpki-client.org