Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/67EBA1E4F66611EA8C8A2B43F8AEA228.roa
File: 67EBA1E4F66611EA8C8A2B43F8AEA228.roa (raw, json)
Hash identifier: np1YfWJ6oBEqUciq3NiDSVUDJwvuyKuegf/eVxTyasA=
Subject key identifier: 2B:D3:50:EB:53:1D:3A:7A:3A:B6:59:F6:69:81:9B:90:A5:BF:2E:C9
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 0298
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/67EBA1E4F66611EA8C8A2B43F8AEA228.roa
Signing time: Mon 14 Sep 2020 08:43:48 +0000
ROA not before: Mon 14 Sep 2020 08:43:44 +0000
ROA not after: Sat 14 Sep 2030 08:43:44 +0000
asID: 327687
IP address blocks: 196.43.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Validity
Not Before: Sep 14 08:43:44 2020 GMT
Not After : Sep 14 08:43:44 2030 GMT
Subject: CN=5f5f2d44-35a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:c3:7c:c4:08:54:eb:fa:eb:33:89:95:ac:
15:dd:50:c7:12:d3:5a:cc:1b:63:15:94:98:8c:0a:
53:8b:bb:35:31:d8:36:a0:a5:61:d9:87:b4:18:2a:
d0:f3:94:88:ae:55:38:3e:17:f0:92:6d:61:46:72:
84:fd:9a:73:0f:7e:6c:f8:97:63:96:bc:a4:90:48:
16:5f:c7:77:d7:2a:c2:29:db:30:80:11:32:64:c4:
9f:cb:e8:28:82:e8:20:18:59:54:12:02:72:cf:9a:
7d:b9:2a:f3:9c:c3:d8:d8:89:c2:6f:46:41:29:69:
75:fa:c6:a8:97:b5:55:61:bb:9c:9a:ba:72:79:9c:
02:c9:6b:43:4e:b6:05:4a:12:8b:dd:b4:c2:65:ac:
f2:7d:e1:94:62:e3:4f:4b:92:f7:b3:df:f5:25:14:
7c:88:78:2c:d7:f8:54:e5:af:6a:c7:ba:f4:25:40:
0c:c0:8d:ca:9b:6d:26:87:a7:96:d6:e3:a3:ee:a9:
79:17:95:1a:d7:dc:46:39:55:da:e9:b8:92:29:59:
f1:f9:1b:11:aa:08:86:6f:7f:a9:ac:6d:b0:db:b3:
ad:11:16:ae:58:e7:81:db:4f:33:c8:d2:fe:26:78:
74:12:92:37:d9:48:8d:a9:d2:a4:ef:58:da:3b:b7:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D3:50:EB:53:1D:3A:7A:3A:B6:59:F6:69:81:9B:90:A5:BF:2E:C9
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/67EBA1E4F66611EA8C8A2B43F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.182.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f0:6e:47:46:0c:aa:b1:2f:30:f1:60:61:54:cb:48:72:b8:
52:ec:bb:20:b5:8e:eb:bb:b7:a0:f7:74:9b:a3:81:33:06:b3:
8f:af:fe:3f:ed:74:ae:69:c5:3b:13:0c:54:7b:7a:4c:31:67:
8a:8b:7e:69:ad:23:1b:a2:79:fe:6f:d4:0c:4f:dc:1b:83:f8:
d9:6a:d7:10:93:26:df:6b:f3:9c:2d:c3:dd:9f:09:d7:b9:44:
bc:5a:01:da:cc:6f:1a:5c:a4:ca:8a:c1:88:09:cc:a6:3a:ce:
8c:d8:25:76:d1:be:23:f9:b4:b6:14:08:4b:6d:2b:e6:20:37:
89:4e:31:2f:89:a6:31:a9:73:36:b6:00:9d:01:8e:45:b3:2a:
f9:d1:1c:39:d9:bd:2f:11:a0:25:0e:a7:72:11:f4:12:fc:16:
e5:19:c4:08:31:2e:9d:f7:16:a3:ed:71:53:2e:59:f8:d5:9e:
b6:a0:39:5b:0d:c7:bf:66:b4:1b:45:ff:65:d4:92:2d:9e:3a:
ab:dc:e7:b2:ff:95:b0:52:e5:6a:db:12:07:90:97:20:43:74:
9b:44:b9:dd:ab:f3:16:82:30:e6:b1:13:ed:30:4e:9d:97:86:
9b:89:69:ee:24:ed:6e:a0:c7:df:00:fd:bf:e0:47:91:9b:6e:
47:bc:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org