Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/1B0C20009EAA11EB9740C941F8AEA228.roa
File: 1B0C20009EAA11EB9740C941F8AEA228.roa (raw, json)
Hash identifier: 3XWadNjbvuaIh9S98dtVe+4vXm4B+aC8LiE6ycenb00=
Subject key identifier: 07:85:98:DE:BE:50:FA:BC:B2:3D:4A:B3:F5:F7:96:55:F5:07:22:C3
Certificate issuer: /CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Certificate serial: 0A
Authority key identifier: DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/1B0C20009EAA11EB9740C941F8AEA228.roa
Signing time: Fri 16 Apr 2021 11:51:40 +0000
ROA not before: Fri 16 Apr 2021 11:51:36 +0000
ROA not after: Wed 16 Apr 2031 11:51:36 +0000
asID: 37053
IP address blocks: 196.46.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.mft
rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B8A8AF/serialNumber=DF376480DCF07A1B7AD164DE64A3EA215F247541
Validity
Not Before: Apr 16 11:51:36 2021 GMT
Not After : Apr 16 11:51:36 2031 GMT
Subject: CN=60797a4c-c66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:ac:62:c9:e9:b1:61:8f:17:59:f5:6e:e3:
46:96:19:ea:6b:0c:41:b8:57:11:20:dd:b5:83:84:
44:fa:79:1c:90:24:27:50:81:7a:0c:98:99:7a:12:
3c:49:5b:7a:d0:08:8b:28:7a:83:57:0d:9b:2a:50:
98:3e:dd:21:7d:87:6c:02:da:c6:6e:7c:be:6a:c2:
af:83:a0:19:7a:e8:ef:e7:01:17:fa:0b:9e:b4:1a:
da:07:eb:45:9c:2d:44:f0:57:1d:ff:3e:7b:ca:c5:
73:f2:bc:ac:b4:c4:a3:8c:12:13:47:15:26:51:e3:
c5:03:62:6e:eb:1d:1f:86:90:98:9f:3b:4d:cc:6a:
f3:97:fc:a7:dc:67:b9:06:30:c5:e5:68:98:10:51:
43:cf:c8:c4:22:cf:b8:dd:bd:45:26:69:0c:1e:d6:
b3:2a:0f:84:2c:7f:5d:37:2b:45:49:4f:ae:e9:4d:
3e:e5:3c:38:3d:7f:8c:e4:a3:a6:54:da:08:7e:93:
1a:b7:c0:34:2f:c1:3d:8d:0b:e5:78:fa:db:16:b8:
53:ba:65:4b:e9:55:ad:2e:9c:86:e4:38:d4:5e:3a:
80:8c:d2:c6:44:05:0c:c3:5d:11:4e:9f:ae:df:a7:
54:9b:06:80:3e:d2:f0:4b:05:b3:e7:e5:54:e9:23:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:85:98:DE:BE:50:FA:BC:B2:3D:4A:B3:F5:F7:96:55:F5:07:22:C3
X509v3 Authority Key Identifier:
keyid:DF:37:64:80:DC:F0:7A:1B:7A:D1:64:DE:64:A3:EA:21:5F:24:75:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/3zdkgNzweht60WTeZKPqIV8kdUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3zdkgNzweht60WTeZKPqIV8kdUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B8A8/B5C94E4C9C2511EBAD78FF53F8AEA228/1B0C20009EAA11EB9740C941F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.46.31.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a0:59:bb:dc:cc:3f:d3:e2:06:87:4a:c6:1e:d2:9f:7a:6a:
04:f9:4b:46:3f:bc:e5:87:a6:6d:72:30:8c:aa:36:b2:c7:d6:
c6:73:15:19:5e:b7:e5:6d:7d:39:03:62:83:0f:63:e3:eb:6f:
52:90:89:c1:c8:fe:d1:6e:94:be:89:04:0e:73:f2:c2:b2:6e:
12:e1:b0:f3:b3:5f:97:42:95:02:41:17:b7:7b:fc:4a:b8:42:
f8:ce:13:5c:39:ae:b3:2a:cb:65:92:45:20:8e:47:27:87:22:
12:08:f6:17:c1:89:47:76:ed:ca:df:30:84:d9:8d:8b:b7:b7:
13:42:7c:5b:28:f6:6b:9e:d3:ca:53:f2:26:85:86:69:54:84:
5b:b3:4b:32:42:bf:91:50:1c:d9:1e:4c:5d:1c:db:a2:17:32:
d3:3d:56:7b:a3:8e:46:9a:bf:23:11:14:23:32:f6:9c:82:7b:
5d:04:60:98:e2:76:ea:ee:09:8b:3c:97:b5:d8:cd:16:0a:fa:
36:12:77:25:a5:4d:ae:46:a1:5b:ce:b5:47:7e:37:6c:8f:16:
d2:a3:ee:17:45:40:dc:cb:42:94:aa:80:ca:67:f5:4e:26:10:
0c:5d:93:7d:9c:a2:fc:6b:c1:d6:24:db:f8:1a:69:f1:0f:48:
24:20:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:08:28 2024 by rpki-client on console-ams.rpki-client.org