Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0988DBA08C5A11EBB114AF41F8AEA228.roa
File: 0988DBA08C5A11EBB114AF41F8AEA228.roa (raw, json)
Hash identifier: cGQPzDmko/Dl3VBWCQ4LtaUTYYdgwMGLsnsInDtKnZk=
Subject key identifier: B3:ED:4D:9F:BB:59:D6:FB:F3:B6:4C:FC:0A:42:C1:58:67:AC:0F:BF
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 32
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0988DBA08C5A11EBB114AF41F8AEA228.roa
Signing time: Wed 24 Mar 2021 04:33:10 +0000
ROA not before: Wed 24 Mar 2021 04:33:05 +0000
ROA not after: Mon 24 Mar 2031 04:33:05 +0000
asID: 3741
IP address blocks: 197.96.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 04:33:05 2021 GMT
Not After : Mar 24 04:33:05 2031 GMT
Subject: CN=605ac106-e504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4d:a5:07:e5:56:22:e3:cc:50:84:49:94:ce:
06:10:ad:81:e3:ec:44:bf:31:1e:1f:ea:be:ca:9b:
9d:dc:5b:21:1c:88:a9:e5:93:bb:e6:ff:ee:4d:1a:
7d:37:5f:3e:a9:93:e2:34:fc:c9:a3:fd:8a:5b:9c:
fa:9e:5f:e8:ad:46:93:91:bb:22:c8:bd:1b:84:3d:
bd:1f:78:98:2a:f7:70:b4:e5:e5:f4:8d:67:8a:43:
be:e0:c7:93:0f:7c:5b:8c:45:d2:5b:01:e4:2f:fb:
0b:47:99:7d:3c:61:aa:48:8c:2c:24:2a:5e:16:1b:
83:f7:e4:83:4a:39:52:ee:90:f3:e4:45:0a:bd:9a:
89:85:94:37:16:42:e4:d1:c7:3e:cb:93:5e:00:4b:
3c:ed:3c:33:50:98:ad:62:6d:26:03:cc:f7:50:c8:
47:24:c8:26:fb:f7:4e:f3:e8:15:5b:5f:6f:77:2c:
26:d9:29:c7:c8:b7:ee:88:6c:0a:da:59:77:c2:3c:
73:93:74:c8:53:75:3f:34:59:88:dd:17:db:7d:e9:
77:79:03:7b:ed:d4:4b:75:f5:d8:a9:bb:ee:d9:42:
fa:5e:ff:44:3f:08:73:55:b7:2e:53:b6:3e:3d:1c:
f2:2e:10:03:b7:05:ea:56:39:32:68:17:9e:08:f0:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:ED:4D:9F:BB:59:D6:FB:F3:B6:4C:FC:0A:42:C1:58:67:AC:0F:BF
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0988DBA08C5A11EBB114AF41F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.96.0.0/13
Signature Algorithm: sha256WithRSAEncryption
63:72:a7:39:a7:be:82:14:73:b6:fc:5b:4d:9c:e3:e7:e8:2a:
ef:77:9c:a8:b8:62:45:f2:54:f2:3c:89:2c:50:27:47:71:a2:
9e:2e:c6:59:70:a0:f3:1a:31:1e:0c:50:a8:aa:f2:d9:dd:b6:
c6:27:13:e2:a0:ea:a6:ce:f2:ee:78:78:ae:6b:1b:16:67:03:
69:a7:ec:0c:f5:3e:ab:02:4e:ed:f6:1b:a8:5e:2f:a9:ef:8c:
78:1a:af:86:20:a0:0c:83:3f:e8:bc:3e:b4:e5:1f:43:db:76:
34:6d:4b:f4:60:8a:1b:e9:82:20:bc:a3:e8:00:af:82:38:2d:
99:a2:fa:d3:89:d0:82:e1:f2:63:68:f2:6d:9a:1f:e3:1f:01:
d7:f5:ce:cb:7d:54:66:14:c3:7e:b9:78:9b:86:0b:b1:6e:09:
88:31:a9:0d:32:a5:22:24:f3:75:6f:1d:7d:2c:b5:2b:41:f2:
c5:f5:1f:9e:44:1a:7a:b0:6a:33:7c:b0:53:7f:9c:c1:a2:c5:
cb:95:30:55:7b:73:d0:3a:37:94:d5:d5:9e:f8:80:e6:65:b0:
a4:d6:46:17:6e:c9:fc:3e:8f:23:b1:cc:2c:35:dd:1c:4b:13:
9f:16:b9:74:52:ca:0b:fa:d9:35:0c:75:65:74:33:ce:68:de:
bd:36:b0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org