Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/19B37868088911ECBD02C81ED8A014CE.roa
File: 19B37868088911ECBD02C81ED8A014CE.roa (raw, json)
Hash identifier: ftsx6sqCnGy9hfgGucWr2xatiRuWyYW7ArMelWiLknk=
Subject key identifier: 9B:DC:EA:EE:B7:EC:17:CE:A0:CA:3E:4B:C6:37:D8:72:8E:B2:09:96
Certificate issuer: /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial: 05
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/19B37868088911ECBD02C81ED8A014CE.roa
Signing time: Sun 29 Aug 2021 05:22:28 +0000
ROA not before: Sun 29 Aug 2021 05:22:24 +0000
ROA not after: Sat 31 Aug 2024 05:22:24 +0000
asID: 327726
IP address blocks: 154.72.4.0/22 maxlen: 24
2c0f:f700::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 May 2024 00:04:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Validity
Not Before: Aug 29 05:22:24 2021 GMT
Not After : Aug 31 05:22:24 2024 GMT
Subject: CN=612b1993-7a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:8f:62:70:38:4f:a3:d6:cc:05:93:3a:4b:
27:42:dd:5a:a2:31:9b:d1:a3:90:b4:a6:65:ce:e7:
00:0a:42:be:af:aa:93:fb:91:84:5a:51:75:a3:29:
59:2d:99:c4:fd:38:24:18:f9:52:ec:9c:1c:2c:fe:
b6:94:b2:f6:9a:30:17:bc:d0:4e:f5:68:1a:c8:11:
d5:00:77:d5:63:8a:fe:ea:46:10:7a:1a:64:ad:30:
97:99:6c:6c:0e:23:80:54:b3:81:87:59:21:f0:6a:
15:18:d0:83:9f:1b:44:7c:49:bd:45:25:52:b3:33:
f9:0d:84:be:d1:2b:f1:56:69:93:93:ba:ae:36:36:
b2:db:a8:92:21:9c:6c:7d:51:a4:b9:e6:95:c2:9c:
09:da:3b:9b:a4:72:b4:fc:44:53:84:1c:ea:30:af:
cc:a5:31:23:93:db:2b:a6:53:f0:48:4d:e7:86:a5:
37:87:bf:8f:b9:7c:e2:cf:ba:87:e4:c2:fa:6d:ff:
2b:36:90:5b:77:44:1c:03:ab:08:dc:c0:c9:65:13:
5c:cc:ef:8d:4d:77:24:da:13:1e:3f:5b:9f:c6:c1:
6a:5e:72:c5:db:7f:87:76:4c:ed:47:68:ac:1e:75:
a0:9e:8b:ee:8f:c6:83:e0:76:64:74:c8:d7:e8:18:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:EA:EE:B7:EC:17:CE:A0:CA:3E:4B:C6:37:D8:72:8E:B2:09:96
X509v3 Authority Key Identifier:
keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/19B37868088911ECBD02C81ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.4.0/22
IPv6:
2c0f:f700::/32
Signature Algorithm: sha256WithRSAEncryption
3f:2d:06:c3:26:f5:2f:c7:0f:e5:72:b6:db:04:67:02:24:bb:
6f:9b:5b:87:ac:88:5a:a6:66:9c:3e:63:1d:00:9b:05:26:a8:
4e:68:98:94:87:df:31:fa:a1:cc:2a:de:50:29:52:31:b7:04:
ba:1f:87:45:2f:f4:7c:05:d3:e6:5a:f5:c3:6f:1e:e7:58:ac:
60:4c:13:88:4f:52:2d:8a:6b:59:c3:76:54:e3:d5:c3:4b:eb:
49:c4:e5:39:47:78:5f:26:27:3d:b8:09:ce:17:ec:1c:1d:a2:
83:b2:61:3a:17:c0:24:2b:ef:8e:ef:82:6a:35:4e:e4:27:de:
de:bf:c8:27:10:48:3b:8b:a8:95:f9:ee:6d:ef:76:c8:9d:d2:
2c:67:95:51:50:85:e6:be:9c:4f:31:2c:48:6a:21:6c:8b:0a:
ea:c3:15:38:cd:6b:d9:63:e9:71:e8:36:c0:82:07:4b:83:7d:
89:f6:7a:cc:06:d1:d8:66:4c:65:8e:87:22:0e:7e:44:ed:67:
98:11:27:f7:48:28:c5:9d:ab:dc:cd:a5:b8:f6:1b:db:a8:f8:
c7:d0:95:7c:fd:e3:cd:42:8b:a4:1b:59:f5:c4:30:ba:66:e4:
1c:8b:cf:43:bf:72:75:05:ab:b1:55:c3:9d:93:ea:ac:c0:85:
65:bc:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 02:24:16 2024 by rpki-client on console-ams.rpki-client.org