Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/F2BA97A6CAC511EBB828B97DF8AEA228.roa
File: F2BA97A6CAC511EBB828B97DF8AEA228.roa (raw, json)
Hash identifier: MND7CmipLpfeKz1+bS7srpKpnj7/a7fnv2q2oc1dXDk=
Subject key identifier: 8F:19:1E:D2:C0:13:15:0C:54:98:44:E7:86:AD:85:E8:8B:59:68:49
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0726
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/F2BA97A6CAC511EBB828B97DF8AEA228.roa
Signing time: Fri 11 Jun 2021 15:01:49 +0000
ROA not before: Wed 23 Jun 2021 15:01:45 +0000
ROA not after: Wed 25 Jun 2025 15:01:45 +0000
asID: 11845
IP address blocks: 196.41.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830 (0x726)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 23 15:01:45 2021 GMT
Not After : Jun 25 15:01:45 2025 GMT
Subject: CN=60c37add-0a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:27:c7:5d:18:c7:49:76:ed:78:77:26:c5:
97:05:99:e2:a8:64:91:20:ca:fa:e9:64:1a:27:0b:
82:34:fd:c1:86:d4:23:30:5d:f5:27:33:d4:ea:8d:
e3:cd:e7:23:23:e4:d9:a9:ea:76:4e:60:ac:04:41:
2f:88:96:dd:93:bf:5b:ee:09:bf:19:5c:62:be:c1:
bb:ad:8d:e4:c7:15:35:f5:e1:1e:ac:62:d6:01:d3:
cd:11:c8:7f:69:63:b7:64:01:2c:cf:f8:2f:7e:9b:
6a:96:b3:db:d4:b9:a5:a2:9a:7d:ae:e7:09:67:e3:
f3:bf:5b:d6:91:92:24:ac:7c:73:5c:d1:83:f8:b9:
16:10:33:7c:5d:bb:44:5b:94:ba:9f:a8:81:b9:74:
7e:a7:ef:ab:6b:ac:ac:ae:b8:70:38:5b:39:bf:0e:
0d:09:8b:79:1b:a9:a0:48:9f:8e:7c:73:96:3e:17:
77:74:2d:94:21:51:f3:10:81:4f:44:2b:bc:13:75:
60:7f:6b:69:a9:98:ad:90:1b:a3:bf:cd:8d:c0:36:
65:5d:2b:e2:9c:d6:da:11:31:28:68:7f:43:ef:0f:
8c:f0:f3:5f:0c:df:42:77:b3:26:51:33:fb:6b:a8:
bb:a1:53:7f:c9:3e:7d:71:75:25:b9:7c:ae:96:88:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:19:1E:D2:C0:13:15:0C:54:98:44:E7:86:AD:85:E8:8B:59:68:49
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/F2BA97A6CAC511EBB828B97DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.41.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:dd:81:c9:d5:d3:a0:cb:d5:70:96:83:75:70:01:67:84:11:
40:38:05:0e:c3:cd:02:9d:f1:07:00:f9:ad:96:cd:13:8b:19:
72:d0:8b:a7:4c:e7:7f:56:64:71:e6:77:e1:ae:8e:27:64:10:
47:bb:a1:ce:a2:44:70:ba:ec:57:a0:44:ce:d5:86:b1:9c:ea:
f8:14:1a:09:de:ba:84:4e:f4:4b:09:6c:0c:cd:2a:98:b5:62:
d7:a1:1d:8e:74:8f:1c:2f:13:7f:92:1c:aa:06:21:b3:51:7c:
4e:97:29:16:b7:e7:4a:b3:9c:3a:32:f9:5c:18:45:8b:88:2f:
b3:2f:ee:47:04:78:6f:f6:79:00:06:fb:7d:db:b6:fc:fd:0b:
93:9b:39:cd:b5:49:3d:89:48:e5:09:cf:90:b3:26:ea:5e:3f:
b8:86:36:7c:53:3d:26:65:02:60:68:63:1c:33:0a:b3:4e:2c:
79:02:ab:0a:7c:39:f7:be:73:70:5e:d3:82:e3:7c:80:86:a4:
50:f8:aa:3a:ae:d6:1b:70:0e:72:9b:5a:4a:d9:84:fe:82:0a:
31:99:cf:14:0e:83:be:61:72:44:c9:95:64:6f:bd:a0:a2:f2:
d8:f3:25:31:53:7a:5c:92:47:5b:24:50:3b:34:6a:c4:d2:40:
f0:b6:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:16 2024 by rpki-client on console-fra.rpki-client.org