Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/AF43AA349BDC11EBB7450D73F8AEA228.roa
File: AF43AA349BDC11EBB7450D73F8AEA228.roa (raw, json)
Hash identifier: 91zxI6PCVGbdXyrT9QNZbnrzWmIgnaN/SPRV7hre9Cc=
Subject key identifier: E3:C6:C7:E5:85:9C:91:83:53:1A:A0:57:BC:B7:F2:E5:CD:58:A0:91
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: FC
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/AF43AA349BDC11EBB7450D73F8AEA228.roa
Signing time: Mon 12 Apr 2021 22:16:11 +0000
ROA not before: Tue 13 Apr 2021 22:16:03 +0000
ROA not after: Wed 30 Apr 2031 22:16:03 +0000
asID: 10474
IP address blocks: 196.28.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Sep 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Apr 13 22:16:03 2021 GMT
Not After : Apr 30 22:16:03 2031 GMT
Subject: CN=6074c6ab-8f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:7b:ef:9d:16:01:04:b1:a9:84:7f:b1:5f:
2d:90:47:5d:e3:33:62:62:c1:d3:22:4c:96:c7:16:
e0:3a:0f:33:e7:66:26:36:ff:13:8b:3c:51:64:c9:
d0:74:92:18:74:bb:e1:4c:5f:d1:9f:88:72:65:14:
70:98:a5:e7:f1:d8:9d:a1:01:f7:fc:e4:eb:de:6d:
5f:d9:ba:c7:7a:45:70:39:26:ec:f5:41:ba:35:77:
f6:3d:e3:2a:00:d9:39:7d:e6:de:b9:81:04:52:0f:
30:b2:32:a8:16:dd:58:0e:c1:25:93:fa:d6:a7:01:
6c:ab:7f:fc:b6:0c:4d:27:a7:d2:48:58:d7:67:84:
8f:35:44:0b:52:2d:67:d0:3e:62:13:48:da:6d:6c:
61:87:65:ef:3d:30:99:e3:c9:14:fa:59:cf:a0:7e:
e2:03:67:cc:57:53:29:17:95:31:10:3c:3c:e6:6e:
34:73:1a:6a:24:b5:33:f3:02:13:0f:97:77:d1:af:
33:0d:a6:5a:c7:4d:6e:71:03:a0:42:2e:b1:4d:38:
0e:0f:17:8d:85:6b:ce:56:bf:bf:64:88:a2:05:5e:
fc:33:d9:2c:f2:8f:d9:e7:dd:dc:29:6c:f0:d8:63:
8c:af:cd:1b:eb:87:f6:19:8e:ce:a8:4e:07:60:a2:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C6:C7:E5:85:9C:91:83:53:1A:A0:57:BC:B7:F2:E5:CD:58:A0:91
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/AF43AA349BDC11EBB7450D73F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.28.8.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f2:a4:a8:fd:24:10:45:55:1b:f0:0b:c3:f4:1c:dd:35:5e:
56:9c:7e:b1:4f:29:8b:b1:eb:d1:15:ce:71:a3:8f:e4:f0:66:
47:d2:bd:b2:33:29:38:45:b2:04:24:c3:36:0e:24:13:57:14:
43:75:c6:54:1d:41:1b:0c:b0:75:0c:b8:dc:f4:3e:7b:38:d0:
2b:0c:2c:b6:31:09:0d:34:77:64:8d:6a:92:74:66:cf:d6:40:
c9:2c:74:0b:8a:e1:bd:ad:e9:5b:83:f5:de:d6:e1:91:2f:c2:
c1:04:75:2d:e8:6d:48:fe:19:c8:9b:30:0d:b6:00:34:b0:85:
48:f2:0d:bf:6c:bd:73:de:26:5d:2a:bb:ea:54:e2:a9:b5:57:
9e:ed:5c:23:4d:cd:1f:13:da:65:19:db:e5:c7:51:66:1e:60:
42:eb:67:32:2a:55:d1:6b:21:26:65:7f:37:08:17:66:4a:b2:
41:71:a4:a5:f4:36:0e:90:bb:57:dc:c9:e3:a5:59:a7:0c:a4:
06:11:56:14:2a:a9:5e:4e:d1:6e:20:3c:3c:4b:08:17:fe:3b:
03:cd:67:61:82:54:38:9c:85:90:fc:65:7a:d4:6b:92:1e:9e:
35:68:c8:ff:0d:84:bb:af:5d:f1:ed:97:92:cf:b7:bf:0f:3c:
02:68:2d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:41:30 2024 by rpki-client on console-ams.rpki-client.org