Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FD195/FF0884A2E7EB11EC9E3885A6F1222468/DDF9FBA6809611EF9DE8826E762E951A.roa
File: DDF9FBA6809611EF9DE8826E762E951A.roa (raw, json)
Hash identifier: 1B9mjw97aHhdSCTuNqsFey3U2kS5rivWpHSpcK14Tic=
Subject key identifier: 9A:D8:8A:FF:2F:00:D1:B3:02:EB:AA:4A:A7:67:18:7B:E3:F1:CA:18
Certificate issuer: /CN=F36FD195AR/serialNumber=B98243FE720BC78DEA55A8AD750C6D0EBD0215B7
Certificate serial: 0374
Authority key identifier: B9:82:43:FE:72:0B:C7:8D:EA:55:A8:AD:75:0C:6D:0E:BD:02:15:B7
Authority info access: rsync://rpki.afrinic.net/repository/arin/uYJD_nILx43qVaitdQxtDr0CFbc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FD195/FF0884A2E7EB11EC9E3885A6F1222468/DDF9FBA6809611EF9DE8826E762E951A.roa
Signing time: Wed 02 Oct 2024 08:18:13 +0000
ROA not before: Wed 02 Oct 2024 08:18:09 +0000
ROA not after: Tue 31 Oct 2034 08:18:09 +0000
asID: 327813
IP address blocks: 169.255.56.0/24 maxlen: 24
169.255.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FD195/FF0884A2E7EB11EC9E3885A6F1222468/uYJD_nILx43qVaitdQxtDr0CFbc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FD195/FF0884A2E7EB11EC9E3885A6F1222468/uYJD_nILx43qVaitdQxtDr0CFbc.mft
rsync://rpki.afrinic.net/repository/arin/uYJD_nILx43qVaitdQxtDr0CFbc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884 (0x374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FD195AR/serialNumber=B98243FE720BC78DEA55A8AD750C6D0EBD0215B7
Validity
Not Before: Oct 2 08:18:09 2024 GMT
Not After : Oct 31 08:18:09 2034 GMT
Subject: CN=66fd01c5-79e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fa:a9:fe:bb:5d:56:10:7f:0b:8f:e1:e1:24:
d4:b2:3c:88:9c:5b:9a:7a:c7:3b:a7:c8:45:29:22:
cc:35:23:a5:da:2b:d3:c8:ec:07:e0:2e:cb:f3:1f:
04:00:a5:d9:0f:64:37:99:48:82:74:ba:1b:da:70:
5e:c0:ac:b2:7a:7a:e5:ff:20:31:f5:cd:9e:77:fb:
f0:df:c2:f3:d6:de:8f:3c:13:c4:5b:3f:da:67:c3:
f9:cb:50:fd:29:9a:42:33:43:67:53:da:41:ee:be:
84:2a:71:1e:98:fe:be:58:03:05:5e:06:24:8a:db:
76:c3:64:82:ca:c1:1b:ac:54:78:4f:db:57:9b:76:
fa:0a:6c:d5:9b:22:9f:e6:f3:d5:6e:94:12:4f:df:
97:b4:49:de:89:0c:42:94:7d:6d:11:23:ee:c2:98:
6b:84:cf:e3:ec:64:6f:5c:6a:f4:f6:a4:4e:c9:b0:
18:8f:cf:26:61:aa:da:01:f4:c3:2b:be:3a:74:9c:
e1:bc:33:45:ca:2c:93:05:de:30:a4:11:1b:b3:2b:
85:fd:a9:29:85:4c:f6:f9:1e:ee:b2:b7:b1:3f:bd:
bc:a4:ab:ff:66:41:50:db:44:0e:c0:3d:25:5b:91:
22:9d:c5:8b:ac:8c:50:85:25:d5:31:9f:45:4b:f6:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D8:8A:FF:2F:00:D1:B3:02:EB:AA:4A:A7:67:18:7B:E3:F1:CA:18
X509v3 Authority Key Identifier:
keyid:B9:82:43:FE:72:0B:C7:8D:EA:55:A8:AD:75:0C:6D:0E:BD:02:15:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/FF0884A2E7EB11EC9E3885A6F1222468/uYJD_nILx43qVaitdQxtDr0CFbc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uYJD_nILx43qVaitdQxtDr0CFbc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FD195/FF0884A2E7EB11EC9E3885A6F1222468/DDF9FBA6809611EF9DE8826E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
169.255.56.0/23
Signature Algorithm: sha256WithRSAEncryption
70:1f:72:91:cd:54:a5:f2:2c:1e:54:00:cc:c9:f8:9d:14:27:
55:20:95:4f:d3:19:bc:82:8c:cc:e1:6d:9e:1c:2d:51:47:54:
f2:38:84:ab:b3:79:1b:d4:7a:46:ed:d1:dc:bc:71:bf:cc:b2:
23:7f:80:10:4f:f6:28:2c:7f:37:a4:5d:7c:57:0d:e0:af:37:
16:ef:80:cf:8f:e7:73:39:c2:f2:b9:df:b6:9d:7b:ed:7e:1a:
d3:e4:a8:11:e1:26:83:40:aa:71:f2:9d:e8:2f:ea:cc:8d:3e:
bc:91:0b:04:71:63:16:a2:72:1c:e4:82:7e:44:32:b2:aa:6b:
a0:0f:ee:65:e8:6a:f1:2f:21:e5:65:56:27:82:76:2d:21:52:
84:f5:fd:27:6f:bb:ce:8c:95:03:88:51:87:93:93:7d:20:47:
40:df:de:3e:51:e4:d3:11:d6:cf:69:bb:c6:a0:3a:b8:3a:57:
e0:60:dc:40:0d:7a:5a:22:d4:26:4f:d2:7c:79:66:7e:88:46:
cd:b7:56:ae:42:56:39:de:5f:e7:82:d7:bc:2d:21:63:23:5e:
9d:b7:61:1a:43:19:be:fc:20:af:08:c8:56:33:e0:0f:ee:fb:
85:6e:77:d6:f4:93:e7:dd:20:99:4d:7b:ae:21:c5:3d:e2:11:
f8:b7:9c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:01 2024 by rpki-client on console-fra.rpki-client.org