Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/4982356676DE11ECB3098D8D5A40D577.roa
File: 4982356676DE11ECB3098D8D5A40D577.roa (raw, json)
Hash identifier: F+0U8dG2rCXUcTvEY7rr1zknmOkjpUBOw8pBbcMuxcw=
Subject key identifier: E7:30:EA:4F:E2:CC:35:E1:D2:32:34:C0:A0:05:F0:F5:A2:75:FF:6D
Certificate issuer: /CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Certificate serial: 02
Authority key identifier: F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/4982356676DE11ECB3098D8D5A40D577.roa
Signing time: Sun 16 Jan 2022 15:09:23 +0000
ROA not before: Sun 16 Jan 2022 15:09:18 +0000
ROA not after: Tue 01 Jan 2030 15:09:18 +0000
asID: 36891
IP address blocks: 196.41.224.0/19 maxlen: 24
197.140.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Validity
Not Before: Jan 16 15:09:18 2022 GMT
Not After : Jan 1 15:09:18 2030 GMT
Subject: CN=61e43523-1850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:05:5e:35:00:00:e0:5d:31:f9:46:a0:a0:
a1:a4:47:fe:06:6f:88:07:5d:88:ba:51:16:05:20:
4c:ee:68:d3:1c:94:23:24:c9:40:51:26:dc:ab:a9:
ea:f8:2c:b6:f5:c9:16:9c:b6:1e:16:81:32:6d:06:
91:f1:ab:91:bf:ff:6a:0c:86:8f:99:fc:95:86:68:
49:d1:ca:22:29:8a:64:95:7c:d2:5e:b6:7d:54:20:
4c:32:db:14:01:d6:06:3d:4f:35:1a:61:57:a8:4a:
9a:cf:da:41:d3:c8:32:b8:ae:0a:a5:da:ce:a3:ec:
aa:f4:c8:51:9d:ef:bf:0e:df:36:25:41:d2:71:89:
d7:d2:97:5c:bb:e3:aa:dd:94:b2:ee:74:0d:5c:6f:
b1:04:49:5c:76:de:21:70:4d:01:00:c3:ca:8a:1b:
31:43:95:91:88:66:72:82:d4:ed:51:ee:54:9f:a4:
18:3f:c3:62:b5:70:a7:36:42:cf:e9:ab:2a:b7:d0:
e2:e2:7e:36:b4:b7:5c:d5:72:bb:c9:24:1f:7b:ca:
22:95:a8:52:d9:86:31:73:41:7c:44:34:0f:0c:35:
df:e6:65:58:42:a8:74:a4:40:28:af:84:08:b5:2d:
e5:b9:ed:4a:0e:af:0a:37:75:19:ab:a6:d4:c7:4d:
b5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:30:EA:4F:E2:CC:35:E1:D2:32:34:C0:A0:05:F0:F5:A2:75:FF:6D
X509v3 Authority Key Identifier:
keyid:F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/4982356676DE11ECB3098D8D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.41.224.0/19
197.140.0.0/14
Signature Algorithm: sha256WithRSAEncryption
80:9d:ce:40:7b:9e:56:10:14:b0:7f:02:3d:e6:e9:a1:50:73:
9e:b7:c0:e7:91:2e:5f:32:be:bf:00:00:1e:d8:c5:af:e0:72:
f9:56:3c:16:32:ae:f9:37:f7:96:4b:95:8f:1c:23:9b:c1:b9:
7c:fa:13:d0:d1:c1:87:f5:2a:61:4d:28:ce:81:05:5b:73:e8:
71:eb:44:2a:7d:d4:b5:c7:ee:94:ba:cd:26:d8:ed:e7:4a:6f:
1e:39:42:78:35:8a:ed:25:6e:06:e1:c7:50:6a:72:ff:60:d6:
f1:17:6d:d1:fe:35:66:b6:df:c9:d6:ae:9f:86:70:c1:43:f2:
60:70:c2:51:73:fc:55:e0:e4:24:63:dc:39:b5:bf:a4:e3:ba:
54:00:09:31:29:a4:be:70:c0:80:2a:a2:ca:77:b7:e6:2f:90:
4e:f6:7c:0b:d6:59:e2:89:c4:cc:e1:52:64:b9:d2:2e:16:77:
23:a0:a9:83:51:27:85:7a:ad:8f:b7:f6:06:fb:1c:12:bb:9f:
62:75:a0:3a:4d:d4:89:07:1a:da:d9:93:f6:b7:6c:dc:4f:f2:
5e:15:97:72:79:f3:46:19:3a:98:26:5a:3b:c1:7c:32:fe:51:
2f:7b:c6:aa:14:ea:62:5b:5f:98:a8:3f:96:80:25:48:06:1f:
f6:f9:5e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org