Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/309F4CEE6FE611ED945B4DA2F1222468.roa
File: 309F4CEE6FE611ED945B4DA2F1222468.roa (raw, json)
Hash identifier: qv6IGwKqJEtixNqBWOezaW48ALRNnYqv01ysaSDGwCU=
Subject key identifier: A9:61:08:EE:F6:13:BF:A7:33:61:EE:0E:EA:EE:AA:48:8D:5E:DB:9F
Certificate issuer: /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Certificate serial: 02
Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/309F4CEE6FE611ED945B4DA2F1222468.roa
Signing time: Tue 29 Nov 2022 13:03:17 +0000
ROA not before: Tue 29 Nov 2022 13:03:13 +0000
ROA not after: Fri 31 Dec 2032 13:03:13 +0000
asID: 37204
IP address blocks: 197.221.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Validity
Not Before: Nov 29 13:03:13 2022 GMT
Not After : Dec 31 13:03:13 2032 GMT
Subject: CN=63860315-9a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:cb:e0:1e:ff:a9:d3:7f:aa:75:d6:8e:fc:
ae:38:fa:6e:87:c3:f3:55:d5:18:7e:4f:27:6a:49:
76:3e:ea:8a:a3:ac:09:d6:9f:c9:1c:de:b1:45:07:
81:18:2a:1b:d7:21:94:5b:a5:bd:f4:a0:0d:a0:38:
02:99:19:cb:df:5c:12:40:15:aa:bd:f4:4a:e4:30:
80:90:1b:c9:2d:9c:d5:52:b5:62:6a:cf:01:86:56:
fa:eb:2b:45:0b:19:26:b5:de:38:fd:07:87:a7:98:
e7:77:c3:fb:3e:aa:64:16:ca:82:14:19:d9:e8:cd:
5a:78:e0:6b:db:96:8f:52:c3:67:17:ca:3a:49:62:
dc:87:8f:d8:c7:75:2b:66:55:25:49:c0:63:61:3b:
e2:dd:18:3b:0e:8a:ad:d9:1a:a8:74:e0:dd:18:42:
84:c2:83:95:54:f4:fc:75:33:a2:2d:1c:02:29:3e:
46:11:f4:a1:75:c1:13:af:95:da:23:78:32:5a:2d:
0c:9f:26:a4:3d:3c:f4:96:4c:4f:72:57:fd:6f:83:
1f:88:ec:21:75:57:14:ab:0e:5a:96:03:aa:f8:24:
49:b0:64:fb:b8:16:86:a9:79:5d:b2:3a:29:45:ed:
2e:30:4d:eb:4d:7d:8f:b6:b7:5d:d2:5b:40:e5:a7:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:61:08:EE:F6:13:BF:A7:33:61:EE:0E:EA:EE:AA:48:8D:5E:DB:9F
X509v3 Authority Key Identifier:
keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/309F4CEE6FE611ED945B4DA2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.221.224.0/19
Signature Algorithm: sha256WithRSAEncryption
11:28:94:57:6e:01:57:8c:60:1c:28:5f:8c:ca:e3:43:1b:7c:
39:82:af:07:a1:10:3d:c3:86:05:ef:41:9f:44:a5:24:de:9e:
a9:fa:68:c6:8c:95:74:cd:d7:70:50:f9:ae:58:4d:e6:32:f6:
8d:84:a6:34:8a:e6:cc:22:b0:23:12:2e:a2:1b:2a:93:c9:3b:
34:c6:b7:de:a4:2e:06:38:1d:84:65:1c:67:b2:de:26:13:d3:
ea:a0:ab:6a:5b:03:19:5f:b2:36:90:1a:93:2d:db:7b:30:d8:
7d:e4:3d:07:8d:4f:9d:d0:2e:d1:05:85:1e:33:d8:fe:ab:ec:
cf:f2:90:79:a4:50:7f:c9:8e:15:4f:19:01:03:a0:02:e9:69:
2d:a6:96:a8:11:a3:b6:50:7d:a7:60:67:b7:8e:7b:49:ba:3d:
6a:eb:14:37:7a:1e:77:90:c2:a8:22:8e:3e:7f:90:e6:ca:1f:
2b:64:75:e7:5a:17:56:c9:3b:24:fb:fb:01:62:95:4b:16:e8:
1b:db:0e:a5:67:6d:89:f4:0b:ea:59:5b:69:85:dd:36:ef:23:
5d:78:a7:35:11:fa:33:ff:1a:34:33:57:17:eb:22:69:8d:8b:
2f:cc:b1:5c:37:bd:66:dd:1e:e2:d1:fc:e7:24:7e:de:84:93:
36:91:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:33 2024 by rpki-client on console-ams.rpki-client.org