Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/AC54ED0241AF11EABC96B02EF8AEA228.roa
File: AC54ED0241AF11EABC96B02EF8AEA228.roa (raw, json)
Hash identifier: eex3EpPcS/uhWTescY6vDR2kgqlZTusPkfTB9R1WbGA=
Subject key identifier: E0:48:C9:F9:C8:1D:BD:64:D1:5A:CD:A2:10:AB:A9:CD:AD:AD:AC:87
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 0C
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/AC54ED0241AF11EABC96B02EF8AEA228.roa
Signing time: Tue 28 Jan 2020 09:22:16 +0000
ROA not before: Tue 28 Jan 2020 09:22:10 +0000
ROA not after: Thu 31 Jan 2030 09:22:10 +0000
asID: 3491
IP address blocks: 41.221.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Jan 28 09:22:10 2020 GMT
Not After : Jan 31 09:22:10 2030 GMT
Subject: CN=5e2ffd48-72f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:94:a2:a9:f4:42:47:96:f9:f7:bf:39:aa:
2b:02:de:43:f7:28:9a:72:82:9d:c1:8b:a2:6e:fb:
2c:8a:ef:b7:17:17:89:48:d8:6f:25:6f:1d:60:a4:
ad:66:9a:f7:91:24:8b:f5:29:b2:cd:f6:d5:63:c7:
cd:01:ee:c5:e1:66:4d:17:14:ab:96:28:89:3d:92:
3a:3d:0b:c9:5f:88:77:40:e7:ae:22:6f:a3:8c:b8:
3a:a1:e2:26:67:fe:ce:f9:1a:da:67:d9:dd:59:a0:
d2:4f:7f:b0:86:f7:cc:bc:74:09:35:fd:65:5f:3a:
87:85:4e:09:81:e5:7e:39:3d:84:5b:2c:f5:73:ee:
88:ac:10:5d:c0:8d:b3:a1:f5:56:f4:cb:23:21:82:
b5:70:f1:7e:3f:03:ab:aa:fd:bc:a4:26:d1:9b:b4:
3d:10:e5:1d:1e:6f:1b:e1:07:a2:b6:b4:e9:0c:7d:
39:36:c1:c6:55:15:07:68:d1:5b:b7:fc:d5:5b:a0:
ee:88:6a:80:55:46:65:c2:70:e9:0c:e9:b5:33:35:
e7:11:05:03:df:42:a0:ae:e2:c2:09:8f:d6:d7:74:
63:01:44:4f:3a:18:6a:a4:b1:a7:fd:44:86:08:21:
b5:9b:ec:a4:5a:4c:33:8d:3e:0e:02:0f:05:87:7e:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:48:C9:F9:C8:1D:BD:64:D1:5A:CD:A2:10:AB:A9:CD:AD:AD:AC:87
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/AC54ED0241AF11EABC96B02EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.221.216.0/22
Signature Algorithm: sha256WithRSAEncryption
22:2a:30:7b:2b:71:ac:52:05:3a:39:8d:6f:78:fb:9f:bb:0c:
7d:44:94:e4:cf:85:11:5e:08:78:22:30:43:aa:c5:4d:21:de:
2f:b0:a8:54:71:ce:bc:d1:86:29:e1:a6:b6:b7:43:33:13:c9:
3d:7c:b4:c1:11:16:07:3f:86:ab:e4:58:99:9b:72:af:8a:34:
38:80:5c:6d:3c:44:f5:a0:75:d6:b3:8a:22:bc:73:55:30:35:
2a:0b:9e:90:c7:8d:b0:22:af:a3:96:a3:7d:38:90:35:dc:d0:
7f:d8:df:c8:32:2d:da:4c:94:0b:8a:e2:3f:6f:1e:77:e6:ee:
90:07:e9:76:8d:cf:e0:f2:ca:9e:f1:c6:fa:95:42:2e:0a:09:
5f:27:5e:42:85:4c:2d:d6:9f:25:dc:ab:67:6c:a9:b3:2d:45:
6c:d4:7b:f7:ab:ec:52:90:70:9a:09:bd:88:b2:ff:cc:bc:a2:
d7:11:71:50:79:b6:c7:76:ca:5a:53:b8:b3:66:bd:81:0b:9a:
ae:ec:39:7a:92:21:cf:56:12:90:15:07:eb:d7:4d:fc:3a:de:
a0:95:e0:94:df:86:12:12:b2:20:41:2f:c7:c8:57:c4:ef:56:
4c:3a:cb:d5:1b:37:bf:f3:bd:48:da:1d:39:f3:de:01:23:72:
ef:42:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:16 2024 by rpki-client on console-fra.rpki-client.org