Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0997ED3AB80F11EB89716450F8AEA228.roa
File: 0997ED3AB80F11EB89716450F8AEA228.roa (raw, json)
Hash identifier: RgvarOMeEqbuMffMhMa83RFaLupTGf2pzc0sTIZaZt8=
Subject key identifier: B7:25:FB:10:B7:B9:31:64:1B:3C:EF:E3:60:7B:4F:23:96:88:71:B5
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0124
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0997ED3AB80F11EB89716450F8AEA228.roa
Signing time: Tue 18 May 2021 19:27:09 +0000
ROA not before: Tue 18 May 2021 19:27:02 +0000
ROA not after: Sat 18 May 2041 19:27:02 +0000
asID: 3741
IP address blocks: 196.28.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 18 19:27:02 2021 GMT
Not After : May 18 19:27:02 2041 GMT
Subject: CN=60a4150d-1c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:91:0c:00:05:87:45:e3:2e:18:d8:41:74:06:
f7:13:f5:69:bf:ee:9e:36:a5:83:97:e3:97:f6:31:
29:9d:92:1a:53:31:73:ea:5d:d3:22:ef:4e:6a:2f:
05:fd:38:9d:d5:f3:31:3e:9b:75:2d:7e:f2:54:5e:
0c:2f:e2:84:a5:36:d0:3d:9e:ec:c1:6d:f1:8c:54:
81:90:78:86:a0:e0:c4:3d:8e:3e:fc:83:eb:db:14:
f9:ce:81:6a:0d:ac:53:d4:2b:72:cd:84:3a:90:91:
d9:49:46:fb:63:d3:df:08:76:e2:9c:78:b7:e9:87:
49:d5:05:73:0a:d1:0b:24:27:c6:04:6c:ff:3c:29:
e9:17:c5:18:97:cc:2a:10:cd:f9:bb:81:df:39:fd:
68:a5:50:b8:fe:23:61:8e:84:27:d8:66:be:47:2c:
fe:43:49:3a:cc:9f:c2:7f:6f:dd:cb:04:95:ba:11:
b3:58:dd:2d:ba:c3:ed:13:99:4f:5f:52:d9:cd:cb:
09:fa:d2:32:b9:7b:32:3e:d1:85:e0:96:9f:3d:79:
35:3a:63:dc:a8:38:b7:5c:00:ff:f1:bd:a2:f5:54:
e3:e9:50:ea:18:2c:89:7d:8f:bd:df:da:7e:aa:6a:
17:08:22:be:da:56:77:ab:7a:a3:4e:db:d4:fd:d8:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:FB:10:B7:B9:31:64:1B:3C:EF:E3:60:7B:4F:23:96:88:71:B5
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/0997ED3AB80F11EB89716450F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.28.8.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bb:5b:04:df:9a:a7:d2:67:3a:36:ad:1d:d3:6a:4a:7d:d5:
ee:28:ad:b2:8a:8e:8c:b7:3f:24:1b:95:53:b3:5a:d3:42:73:
16:c5:9f:bb:65:56:bd:c6:b3:7b:6f:de:a2:22:e3:be:05:cb:
3e:98:a8:52:a6:e9:ee:bf:ae:ca:95:84:b3:aa:f4:32:b2:39:
17:b7:24:11:88:39:1b:76:e1:11:7c:e4:37:f7:2a:47:99:4c:
15:38:e8:05:47:da:25:a5:c7:3d:0a:21:9c:75:d0:9c:c4:34:
70:12:3e:5f:4c:1f:b9:57:14:27:98:99:dd:88:f6:6d:75:80:
9c:00:4e:f5:95:0d:30:06:b1:b3:b2:03:da:12:72:b6:8e:05:
cf:92:fd:18:f5:36:cc:7d:ca:f7:dd:2c:a5:ea:7b:d4:a7:d7:
f7:36:39:18:84:27:ab:62:13:a6:ad:14:63:fe:50:a3:88:41:
35:49:3f:e7:14:9b:cd:4d:4d:f5:1e:19:01:53:3b:fc:6c:ef:
2d:fe:92:fe:37:d7:0c:85:05:e4:b3:f6:97:34:14:84:2e:db:
85:da:27:45:7f:72:05:f3:b7:b9:ec:de:da:7c:4e:fc:5b:c5:
f5:5a:5b:b8:3b:45:a8:55:c8:0e:de:98:1f:fb:ab:26:4e:5d:
99:0c:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:10:23 2024 by rpki-client on console-ams.rpki-client.org