Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/856DD792051C11EE971131214AD9E6FC.roa
File: 856DD792051C11EE971131214AD9E6FC.roa (raw, json)
Hash identifier: MyKDclQkAwXYAh/6xv8nFe//0o69aouAjgaCIqJza44=
Subject key identifier: 18:DB:FE:C7:B6:15:2A:63:52:25:85:D7:C1:FE:E8:CF:3D:C3:57:7A
Certificate issuer: /CN=F36382EDAF/serialNumber=0EB2E66D6C122BF3FEA83B6CBB7B8CAEAE11C30E
Certificate serial: 02
Authority key identifier: 0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/856DD792051C11EE971131214AD9E6FC.roa
Signing time: Wed 07 Jun 2023 10:17:35 +0000
ROA not before: Wed 07 Jun 2023 10:17:32 +0000
ROA not after: Sun 07 Jun 2026 10:17:32 +0000
asID: 328030
IP address blocks: 196.41.81.0/24 maxlen: 24
2001:43f8:c70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.mft
rsync://rpki.afrinic.net/repository/afrinic/DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36382EDAF/serialNumber=0EB2E66D6C122BF3FEA83B6CBB7B8CAEAE11C30E
Validity
Not Before: Jun 7 10:17:32 2023 GMT
Not After : Jun 7 10:17:32 2026 GMT
Subject: CN=6480593f-2e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:62:c2:db:df:99:8c:52:53:94:d3:25:2c:
94:fd:dd:38:f7:08:f8:32:8a:4d:1a:be:fa:22:d5:
c9:ba:b5:a6:48:98:1c:ef:45:9e:cc:72:7a:52:ca:
c8:b6:32:46:5e:48:a1:76:6b:1c:75:f3:06:ba:2d:
d2:6d:c2:cd:ca:5e:3f:33:97:ce:28:99:b6:85:b4:
b4:82:b8:b4:49:4c:91:42:82:78:64:e8:ef:29:60:
9b:e4:5b:fd:df:b1:7d:f5:b0:52:1e:22:6c:2d:6e:
af:57:2a:3a:db:8f:cd:96:88:98:03:22:5b:09:9d:
6e:80:3c:98:94:e3:a1:3b:b5:30:50:69:c2:24:77:
49:f5:36:f4:8b:11:0a:69:a6:eb:e9:e0:c5:3a:d2:
b9:6f:78:c2:72:7f:5d:59:82:19:b2:e7:2e:b1:0a:
67:71:f9:b7:22:c1:38:04:1b:e9:d1:84:85:b8:e4:
83:02:04:a5:47:50:ce:ce:1c:38:48:58:69:36:cb:
02:eb:2a:4d:7d:41:35:62:3b:c4:53:b8:65:66:cc:
e8:2f:70:9c:55:d8:1c:26:8f:8f:1e:d0:62:24:2a:
fb:64:28:27:1c:40:33:dd:db:68:c2:96:a7:cc:e2:
ef:5b:59:7f:27:69:da:9f:3d:ce:f1:27:04:49:db:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DB:FE:C7:B6:15:2A:63:52:25:85:D7:C1:FE:E8:CF:3D:C3:57:7A
X509v3 Authority Key Identifier:
keyid:0E:B2:E6:6D:6C:12:2B:F3:FE:A8:3B:6C:BB:7B:8C:AE:AE:11:C3:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/DrLmbWwSK_P-qDtsu3uMrq4Rww4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DrLmbWwSK_P-qDtsu3uMrq4Rww4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36382ED/61760B4E051B11EE8D1A0E1E4AD9E6FC/856DD792051C11EE971131214AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.41.81.0/24
IPv6:
2001:43f8:c70::/48
Signature Algorithm: sha256WithRSAEncryption
55:a7:5f:8e:b6:47:3a:f0:a1:63:14:42:10:67:fd:15:a8:d7:
a0:f4:b4:b6:4a:9e:1c:08:b9:1d:f5:b1:d1:5e:63:b3:ce:50:
a2:68:6d:03:f8:be:df:4c:75:9f:29:bb:50:65:7a:37:3c:ed:
4b:98:93:84:df:20:94:34:4b:5f:4f:89:c1:13:4f:6c:cd:d3:
8f:7a:73:50:26:b2:26:05:5d:c5:a8:58:21:8b:5a:4a:de:42:
33:d1:54:a0:c0:19:75:80:43:e5:02:8a:60:8c:ae:7b:01:16:
db:a2:50:53:96:10:a2:a0:76:f6:3b:97:8d:cc:d7:1f:08:33:
a8:ea:a9:24:8e:a5:44:52:06:45:e3:46:67:db:4d:29:dd:dc:
1a:c8:2a:21:ca:59:c7:2c:49:7f:9d:50:17:7f:bd:59:aa:6e:
2f:2a:c9:0a:42:bc:d5:73:a7:17:cc:37:e0:c3:8c:50:95:d7:
d4:8e:97:71:74:69:ad:08:71:e8:03:80:93:4a:fa:37:09:07:
2e:a0:72:f0:fd:2c:a7:8b:b3:10:d0:38:df:71:75:36:09:1b:
f8:21:ec:30:33:ff:72:f5:79:ea:44:e9:c7:72:ac:98:d0:af:
cd:27:a8:a6:24:1f:3c:1b:e5:d0:a0:cd:4b:80:5b:25:b5:8b:
38:63:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:37 2024 by rpki-client on console-ams.rpki-client.org