Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/336BF2CA332411EBB561BF72F8AEA228.roa
File: 336BF2CA332411EBB561BF72F8AEA228.roa (raw, json)
Hash identifier: z0Vqh2yhGazkcY6WrmD+gGwdIRbocCnl8S5PFmlQhf8=
Subject key identifier: E6:92:1A:A3:50:E0:EB:B7:7B:B3:B8:FE:BB:DA:3E:49:70:D1:57:7E
Certificate issuer: /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial: 02
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/336BF2CA332411EBB561BF72F8AEA228.roa
Signing time: Mon 30 Nov 2020 15:53:34 +0000
ROA not before: Mon 30 Nov 2020 15:53:30 +0000
ROA not after: Tue 31 Dec 2030 15:53:30 +0000
asID: 6453
IP address blocks: 41.206.160.0/19 maxlen: 19
197.242.32.0/19 maxlen: 19
2001:42c8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Validity
Not Before: Nov 30 15:53:30 2020 GMT
Not After : Dec 31 15:53:30 2030 GMT
Subject: CN=5fc5157e-056f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:d6:18:ec:8b:4e:2d:72:d9:96:be:3e:07:
77:e5:35:bc:df:2a:af:74:ac:9d:a6:b7:02:d0:99:
61:92:f1:84:f9:0c:e0:87:0f:4f:18:0e:68:4f:f4:
02:d0:8c:9d:5a:6f:20:ea:c5:30:e5:34:3e:8e:f5:
4d:5f:dd:75:64:fa:94:16:28:ad:a6:3e:68:96:8d:
35:11:ac:ce:01:d5:4c:c3:0b:09:0e:64:54:c9:73:
65:1c:b9:a0:f8:3f:a0:0b:c7:77:fe:f2:96:f4:34:
ea:d3:62:67:84:ae:05:b4:3f:81:7a:df:84:3b:26:
3b:6e:a5:42:26:f2:c0:1c:eb:2c:44:f0:e5:5c:4f:
91:c6:3c:7f:1c:8d:dc:dc:39:cd:93:fc:c9:6e:e2:
6f:fb:e4:73:bf:37:56:2d:ea:d5:57:ee:0c:45:05:
70:65:19:15:7d:87:62:99:81:86:c4:33:6e:69:01:
d3:df:ff:86:e9:29:44:02:11:be:8a:c3:0a:22:a8:
65:9e:34:3f:b2:e5:87:ee:f9:4b:06:99:5e:56:77:
50:6e:ce:04:15:17:ca:0b:2c:83:0c:55:04:83:7f:
9e:6f:7a:3c:07:d3:6e:18:99:39:16:99:9e:45:04:
bd:a3:8d:e5:d9:a6:80:9f:1b:eb:6a:05:26:45:84:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:92:1A:A3:50:E0:EB:B7:7B:B3:B8:FE:BB:DA:3E:49:70:D1:57:7E
X509v3 Authority Key Identifier:
keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/336BF2CA332411EBB561BF72F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.206.160.0/19
197.242.32.0/19
IPv6:
2001:42c8::/32
Signature Algorithm: sha256WithRSAEncryption
0f:ff:1c:e5:a0:ac:4d:b5:93:1a:0d:95:4a:b4:4c:cd:39:a2:
62:d4:6c:da:48:65:38:ef:c5:07:76:b0:80:ba:9b:44:6f:c6:
7f:ad:49:61:58:e8:72:fc:fc:46:eb:94:9c:65:69:45:1c:48:
59:6c:3e:21:57:67:c5:b8:86:4e:b1:06:8b:55:6b:50:be:5e:
c3:94:8e:39:ca:1c:8a:36:d6:45:5b:ac:a7:76:b3:74:12:9c:
04:c6:2a:72:f7:e1:47:da:ad:9e:88:5d:28:09:cb:9f:24:a5:
0e:e9:a5:b8:00:e6:30:9d:aa:53:90:c5:96:ee:2a:34:e6:0e:
ae:2c:60:dc:05:ad:d4:95:10:ed:78:d6:48:3e:ee:9a:ec:04:
df:87:86:f5:1f:94:69:f2:f8:09:dd:9a:8c:19:fe:a3:c7:10:
13:5a:d0:39:ad:81:9d:2a:d4:95:d3:2e:35:03:a9:f5:a9:fc:
b5:b3:f9:e5:a9:63:2a:7f:d1:93:98:7c:2c:7d:bd:15:5b:16:
4e:0c:87:f1:4f:7f:b6:c2:08:48:e8:d1:0a:42:14:96:be:72:
17:f4:e4:fd:4d:65:6e:f4:df:de:7b:7b:cd:39:49:de:8c:9b:
ff:52:11:ca:5f:01:de:a9:15:c9:dc:fa:c5:28:7f:73:bf:ba:
d8:84:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org