Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/33F479C0F66A11EAAF171B47F8AEA228.roa
File: 33F479C0F66A11EAAF171B47F8AEA228.roa (raw, json)
Hash identifier: 65Z8Jd3RvX55PomfgU6ZVosCUGsvJvfFSn12KFqEjgk=
Subject key identifier: B1:91:08:7A:49:EF:92:02:EB:38:0D:CF:97:F0:79:2D:6C:40:1B:40
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 02A6
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/33F479C0F66A11EAAF171B47F8AEA228.roa
Signing time: Mon 14 Sep 2020 09:10:59 +0000
ROA not before: Mon 14 Sep 2020 09:10:53 +0000
ROA not after: Sat 14 Sep 2030 09:10:53 +0000
asID: 327687
IP address blocks: 196.43.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Validity
Not Before: Sep 14 09:10:53 2020 GMT
Not After : Sep 14 09:10:53 2030 GMT
Subject: CN=5f5f33a3-e6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:66:67:a9:75:11:36:cf:fe:e3:58:dd:6e:4a:
1d:98:f2:f3:61:36:d9:af:66:59:f1:2e:41:96:21:
9d:0d:27:8e:15:ac:25:0b:52:8f:3a:e6:ab:7d:92:
c4:4d:f0:39:b7:b9:3e:d8:a2:56:78:ba:5d:c5:53:
a5:ad:7b:4a:78:f5:d8:46:da:75:5a:88:a1:69:53:
63:56:48:da:21:40:44:07:8e:29:68:b7:ab:55:cc:
94:ca:6a:0e:f9:b8:0a:3e:ee:8a:6d:05:71:59:8b:
f5:a8:03:8a:48:20:e5:69:92:a0:af:40:e8:ca:f5:
9b:f1:d2:9f:f6:b1:45:26:34:e2:ea:ce:2d:5c:8f:
49:b0:7e:cc:21:41:45:b7:10:d6:2c:ea:65:9f:84:
dd:d2:48:eb:fc:3f:42:01:67:bc:60:b6:05:d1:5b:
6b:4d:af:dd:ae:8e:eb:e6:77:ab:ba:5f:ff:1a:a3:
11:74:c9:cf:5c:71:48:10:d2:be:8b:bb:41:c6:c2:
b2:25:dd:13:54:55:d6:00:96:db:8e:49:af:c3:57:
47:e3:7b:47:94:d3:96:8e:0f:12:0f:fd:d1:b1:0a:
00:d2:71:6f:5f:d3:e5:f9:55:46:03:31:cf:89:3f:
e7:8c:6b:5d:c9:d7:eb:7d:a9:e9:4b:f5:1f:20:39:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:91:08:7A:49:EF:92:02:EB:38:0D:CF:97:F0:79:2D:6C:40:1B:40
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/33F479C0F66A11EAAF171B47F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:5c:83:80:96:0a:ca:5e:65:87:b2:89:b0:6e:7c:3a:cb:df:
97:7a:eb:54:36:d5:e1:94:74:11:cf:7f:56:51:aa:2b:99:24:
5e:8d:ab:60:68:7f:5c:95:90:05:f7:d3:5d:f8:4e:a7:bd:ed:
90:b3:f3:47:7a:13:ff:86:3f:49:c4:d6:55:73:96:f6:92:40:
fa:c9:11:d9:a6:01:67:58:69:69:b5:5b:30:14:8a:83:0e:b6:
5c:cb:8f:5a:2b:c7:ac:93:42:9a:f4:1e:61:8d:47:ed:98:d3:
d3:08:2f:ea:2a:6b:03:15:2b:cc:9c:e6:f1:ee:64:2c:f9:c9:
10:9a:a9:83:1a:fb:bb:e9:04:0e:81:b9:32:44:70:8e:3b:2d:
8c:bc:fc:6c:1b:37:81:24:96:51:d0:eb:82:33:a6:87:8b:61:
48:48:54:b1:a3:c4:bc:82:7b:d5:1a:bb:8f:36:05:c1:86:0c:
3e:db:d0:6a:68:07:60:5a:29:c3:7b:71:c6:4d:ea:92:55:9b:
bf:15:58:2f:3d:0c:e6:38:2f:59:f0:7a:da:e0:a8:a3:7a:24:
cd:2d:42:d1:70:11:c6:8c:c2:30:51:aa:fa:01:2f:a8:d0:38:
42:51:41:23:4a:3a:30:bb:de:95:49:0b:a7:72:92:13:a0:02:
d1:a0:6a:13
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yMDA5MTQwOTEwNTNaFw0zMDA5MTQwOTEwNTNaMBgxFjAU
BgNVBAMTDTVmNWYzM2EzLWU2ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfZmepdRE2z/7jWN1uSh2Y8vNhNtmvZlnxLkGWIZ0NJ44VrCULUo865qt9
ksRN8Dm3uT7YolZ4ul3FU6Wte0p49dhG2nVaiKFpU2NWSNohQEQHjilot6tVzJTK
ag75uAo+7optBXFZi/WoA4pIIOVpkqCvQOjK9Zvx0p/2sUUmNOLqzi1cj0mwfswh
QUW3ENYs6mWfhN3SSOv8P0IBZ7xgtgXRW2tNr92ujuvmd6u6X/8aoxF0yc9ccUgQ
0r6Lu0HGwrIl3RNUVdYAltuOSa/DV0fje0eU05aODxIP/dGxCgDScW9f0+X5VUYD
Mc+JP+eMa13J1+t9qelL9R8gOW85AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsZEI
eknvkgLrOA3Pl/B5LWxAG0AwHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4
QUVBMjI4LzMzRjQ3OUMwRjY2QTExRUFBRjE3MUI0N0Y4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHEK74wDQYJKoZIhvcNAQEL
BQADggEBAH5cg4CWCspeZYeyibBufDrL35d661Q21eGUdBHPf1ZRqiuZJF6Nq2Bo
f1yVkAX30134Tqe97ZCz80d6E/+GP0nE1lVzlvaSQPrJEdmmAWdYaWm1WzAUioMO
tlzLj1orx6yTQpr0HmGNR+2Y09MIL+oqawMVK8yc5vHuZCz5yRCaqYMa+7vpBA6B
uTJEcI47LYy8/GwbN4EkllHQ64IzpoeLYUhIVLGjxLyCe9Uau482BcGGDD7b0Gpo
B2BaKcN7ccZN6pJVm78VWC89DOY4L1nwetrgqKN6JM0tQtFwEcaMwjBRqvoBL6jQ
OEJRQSNKOjC73pVJC6dykhOgAtGgahM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org