Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/9796326EF66211EABBF1343FF8AEA228.roa
File: 9796326EF66211EABBF1343FF8AEA228.roa (raw, json)
Hash identifier: XfHVOULSMA0+tNeiFYqs27QaGmWtM4EQYp7rJcAY0D0=
Subject key identifier: 89:E2:2A:12:9C:F4:AF:F8:EF:6B:1E:19:2C:D8:57:D9:43:B5:70:29
Certificate issuer: /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial: 028A
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/9796326EF66211EABBF1343FF8AEA228.roa
Signing time: Mon 14 Sep 2020 08:16:30 +0000
ROA not before: Mon 14 Sep 2020 08:16:25 +0000
ROA not after: Sat 14 Sep 2030 08:16:25 +0000
asID: 327687
IP address blocks: 196.43.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Validity
Not Before: Sep 14 08:16:25 2020 GMT
Not After : Sep 14 08:16:25 2030 GMT
Subject: CN=5f5f26de-56a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:47:00:d5:b9:c6:a3:3b:7b:ee:7c:96:fc:
fa:3a:bd:bd:27:7c:af:b3:b3:27:ea:60:5f:12:2a:
4b:32:64:8f:ea:79:5d:0d:47:74:2b:fe:36:dc:50:
e5:f4:70:6c:51:4f:58:d5:ed:fc:84:81:65:60:dd:
12:55:e7:3a:22:d6:15:d4:ce:d3:42:46:9b:4d:cb:
35:fb:07:4a:8a:e0:c2:a2:45:1b:f5:40:d9:32:2f:
8e:53:6a:2d:dd:58:4d:1e:19:e1:1d:49:d3:99:8b:
63:05:ee:39:cd:a5:e2:6c:ef:7b:89:36:7f:1f:aa:
36:45:20:05:b9:7e:3c:7e:5d:fc:4d:7a:8d:56:b1:
84:d4:4f:e6:75:97:c7:04:e5:f6:42:c1:b2:c8:ef:
09:3b:1d:74:17:ed:4b:0a:02:96:e3:8b:3e:e5:0a:
50:46:8e:17:cc:15:5a:a1:49:b1:f8:01:42:55:26:
8c:6a:8a:66:d7:83:2c:4d:5c:61:78:66:4b:1d:fa:
af:22:bb:d0:2a:0e:a3:c6:e7:a5:8f:c7:bd:5f:80:
92:7c:d6:ef:9a:62:75:26:38:e7:ec:8c:83:14:67:
0e:ac:d8:ab:8b:76:d2:f3:57:96:1f:43:ef:32:f2:
71:dc:2e:59:96:5e:1f:d1:a7:80:d1:43:5a:72:cc:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E2:2A:12:9C:F4:AF:F8:EF:6B:1E:19:2C:D8:57:D9:43:B5:70:29
X509v3 Authority Key Identifier:
keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/9796326EF66211EABBF1343FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.43.175.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a8:37:60:90:6b:dc:ec:e8:93:de:4f:8d:48:dc:14:4c:70:
13:aa:8e:6e:c6:bd:e7:32:94:ca:0d:2a:d2:72:93:bc:3d:86:
ff:11:8b:85:7d:49:ce:ef:14:f6:30:d5:ad:7d:a1:e5:b0:8b:
16:41:6a:a9:af:f6:1a:52:d3:e9:bb:c1:9b:68:5d:6e:24:29:
fb:2a:f4:44:f5:5a:8e:d8:64:c7:60:e8:2c:30:0a:d3:38:3d:
11:d9:57:93:de:fa:13:2a:e3:9e:91:3f:ca:5f:4d:81:a6:e7:
1b:d2:17:ca:d9:90:a4:42:b3:2f:a1:0f:c5:d2:3f:8a:ff:b8:
aa:af:3c:af:47:d1:8c:d0:2e:d1:22:96:60:e0:f5:3f:eb:32:
99:6b:20:b0:3b:df:1b:47:93:34:9b:2e:63:21:9f:4e:15:d8:
3c:69:79:42:49:b8:0c:d0:37:47:07:ba:81:fa:5a:40:28:a8:
ca:7c:43:3a:1f:e7:31:7a:84:97:32:05:8f:8a:22:50:21:2b:
bf:41:0f:10:53:c2:f9:f7:09:d2:17:83:f3:af:05:a2:32:0f:
fd:5d:ca:5d:e0:41:26:55:12:64:7d:84:32:08:b4:57:4f:25:
f3:f7:14:4f:6c:16:53:ec:63:b3:6f:76:82:54:0f:3c:c8:d8:
de:8f:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org