Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/3955DFA0F38411EA82FCB280F8AEA228.roa
File: 3955DFA0F38411EA82FCB280F8AEA228.roa (raw, json)
Hash identifier: QP9cVq0kzJIIdmxi1rDik2rIdHN1EL3sLpsxJnHyeOs=
Subject key identifier: 8C:AB:A0:0E:B7:A6:C5:78:25:9D:2E:62:DC:E8:ED:81:CA:08:CD:9C
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 025F
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/3955DFA0F38411EA82FCB280F8AEA228.roa
Signing time: Thu 10 Sep 2020 16:39:42 +0000
ROA not before: Thu 10 Sep 2020 16:39:37 +0000
ROA not after: Tue 10 Sep 2030 16:39:37 +0000
asID: 327687
IP address blocks: 196.43.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Validity
Not Before: Sep 10 16:39:37 2020 GMT
Not After : Sep 10 16:39:37 2030 GMT
Subject: CN=5f5a56cd-e32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:d6:df:07:a4:7a:de:b7:79:ad:f8:5f:e6:
aa:ed:4d:8e:a4:d8:b8:97:ca:85:a7:78:c3:93:b2:
94:3e:7d:62:0d:90:0a:c4:ca:c4:ec:2c:91:1a:90:
4d:d0:eb:3a:d0:62:e9:3c:31:a9:0f:ae:74:ea:28:
94:42:ff:f4:17:f9:78:0e:11:3b:aa:5f:8b:50:82:
02:9a:49:09:3e:c5:e0:bc:e9:1a:8c:4d:d8:07:dd:
19:f9:f9:2b:4b:f4:73:ac:44:c9:52:75:e2:9c:30:
7e:97:c6:56:81:77:56:32:40:00:d9:2e:b7:f0:54:
60:ea:63:cf:e1:6d:e1:76:73:04:d6:91:cd:6c:10:
c3:e9:e5:85:81:e8:92:97:0d:26:f4:8c:78:e1:02:
32:50:37:b7:39:e2:48:9e:45:5c:80:59:6f:b6:8c:
94:74:e0:e5:eb:84:e3:87:3f:ad:a4:67:d5:52:6e:
28:2a:a5:c3:90:55:21:fe:b4:fa:34:ad:18:6b:95:
29:5c:d7:50:ba:8e:b5:48:1f:ee:78:8a:d3:84:6b:
59:19:25:ad:61:5c:f7:4b:6a:79:70:da:d1:74:47:
e8:50:98:a6:11:47:0c:a9:96:12:b4:e9:e0:69:5c:
c6:d1:dd:ff:15:c6:06:a1:84:80:51:bb:69:f2:b0:
78:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AB:A0:0E:B7:A6:C5:78:25:9D:2E:62:DC:E8:ED:81:CA:08:CD:9C
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/3955DFA0F38411EA82FCB280F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.152.0/24
Signature Algorithm: sha256WithRSAEncryption
99:65:2c:f1:c3:be:ef:f3:1c:66:f3:a1:5b:58:57:41:46:4a:
9b:91:8a:ab:5e:56:af:31:bb:4e:65:fb:44:bd:40:3c:d6:b3:
f1:67:e0:d4:35:3b:2e:23:14:54:9b:a0:05:85:e4:4d:5c:a7:
9b:cd:c6:e7:36:1f:40:28:37:35:d9:29:59:56:5a:36:64:72:
e6:49:59:0a:3e:ab:57:ed:52:f5:92:44:64:61:a1:9c:a1:e4:
cb:1a:0e:7b:17:3a:90:23:6b:13:06:a6:71:64:88:5a:a9:06:
40:03:30:1f:83:ef:44:22:28:f3:34:85:3d:ec:0b:bb:3d:aa:
af:0d:7e:8a:99:1c:f9:c7:f5:36:76:65:59:22:c1:6c:5b:43:
26:b7:af:f2:db:0d:d2:96:a9:cb:87:c5:24:41:8a:19:16:95:
1b:f7:2a:6c:94:94:49:1f:17:f7:91:7d:99:b3:39:2e:a1:e3:
af:ed:e8:49:a3:c4:a3:39:24:af:e1:3b:c1:ab:ab:1b:20:0d:
df:66:50:7a:ac:99:e5:1f:58:2a:81:9c:b9:63:20:6b:13:78:
35:18:ee:da:99:d8:0f:27:ce:0b:f8:cd:be:70:ca:3c:37:3c:
da:02:d9:f7:7c:de:e3:4b:d0:66:32:53:44:c5:3e:02:e7:93:
32:06:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----