Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/72E80A0CF37C11EA9064B778F8AEA228.roa
File: 72E80A0CF37C11EA9064B778F8AEA228.roa (raw, json)
Hash identifier: fnSLqCA7wbsJ0T7fEPJmukR6cpv79MnW8VIMvJBfw+8=
Subject key identifier: 98:42:30:79:DE:C7:B4:E4:AC:AB:39:8C:42:41:FB:BA:4D:72:98:91
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 024F
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/72E80A0CF37C11EA9064B778F8AEA228.roa
Signing time: Thu 10 Sep 2020 15:44:02 +0000
ROA not before: Thu 10 Sep 2020 15:43:58 +0000
ROA not after: Tue 10 Sep 2024 15:43:58 +0000
asID: 327687
IP address blocks: 196.43.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Validity
Not Before: Sep 10 15:43:58 2020 GMT
Not After : Sep 10 15:43:58 2024 GMT
Subject: CN=5f5a49c2-2021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:09:fd:7f:06:67:ee:bc:ba:70:59:33:f3:
79:07:bd:b2:95:b0:1a:21:a0:f1:e5:80:32:59:b9:
5c:c4:84:97:54:52:fc:a3:08:86:df:da:c0:eb:0e:
22:31:a8:79:7a:02:33:41:17:ea:06:8f:ad:02:7d:
40:e9:e2:84:b6:f4:50:e8:23:3d:59:9b:5d:cf:dd:
0e:d4:6b:a6:b0:5e:de:23:19:26:44:03:8c:98:cf:
c4:0e:78:03:48:6f:a0:61:db:30:67:d9:41:cb:d3:
f6:ef:69:db:90:83:62:bd:4f:4e:cd:9d:4d:57:53:
9d:62:74:13:65:e0:c5:04:f7:0f:ac:28:da:bf:64:
9b:c5:f4:d0:f8:3b:4e:eb:ea:cd:f7:8b:0a:03:2d:
a6:7f:04:fa:10:dc:1e:2a:f6:d9:26:4a:af:01:e8:
c1:a1:23:ff:06:fc:bd:93:bb:99:3d:ad:e1:c6:fe:
51:97:47:dd:8a:56:ab:60:a4:c6:b4:c1:4e:6e:f5:
a4:7b:78:42:92:27:c3:52:6d:e0:85:4d:b7:1e:a7:
71:14:4e:3a:61:48:d1:4c:ad:d1:3f:0d:04:01:86:
30:f8:fd:7a:76:4c:6f:7f:32:29:36:fa:a8:59:f1:
1f:63:18:46:66:cf:7e:3a:6c:fc:82:a6:22:e9:cf:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:30:79:DE:C7:B4:E4:AC:AB:39:8C:42:41:FB:BA:4D:72:98:91
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/72E80A0CF37C11EA9064B778F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:1c:47:fb:c5:e1:32:46:c7:d5:c6:b6:a3:94:f1:d9:a4:f5:
1c:61:82:3f:f6:c1:d7:ea:aa:86:75:31:56:ca:7b:2b:5f:b1:
3b:6e:ad:92:65:db:cd:ff:7c:c9:01:22:a1:ba:14:d3:5b:46:
c0:fd:f5:bd:d0:b5:78:fb:71:97:23:cd:f3:68:b0:f3:47:a6:
52:36:b7:4e:d9:32:94:00:4b:b8:22:c2:6d:14:ec:b7:2b:ee:
bc:6a:66:41:d8:60:24:bf:ec:4e:96:56:00:c4:91:7c:ba:a3:
7e:c6:29:9b:62:d3:f8:63:1f:53:fd:8c:a6:01:32:89:62:96:
d1:9a:63:77:9a:52:3f:ae:63:27:73:f3:e7:36:56:8c:dc:d5:
c5:2e:4f:cb:74:d6:e3:1b:2b:de:fa:9f:68:ea:e7:cd:3d:a4:
44:fa:ca:ab:63:3c:fc:cd:97:76:76:b3:ad:1f:1d:ad:4a:a4:
30:d2:5c:92:9a:20:4f:84:9f:73:df:99:0a:7b:37:98:7e:1b:
e6:d8:b0:56:b8:b2:3d:2c:90:bb:cb:41:49:30:c8:ca:25:af:
8e:5a:12:79:c6:fa:6d:82:80:62:36:7f:74:87:03:ee:2f:c5:
14:f2:60:ca:39:e3:07:4f:15:89:d1:c7:75:4a:f4:5f:9b:e2:
1a:15:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:46:42 2024 by rpki-client on console-fra.rpki-client.org