Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/2094A4B08C5911EBBBCF1940F8AEA228.roa
File: 2094A4B08C5911EBBBCF1940F8AEA228.roa (raw, json)
Hash identifier: r/NG2usNGoYCEF4bLI+UnCp+JV8BSMJM9g28g7L4iQY=
Subject key identifier: FF:F7:A3:26:89:95:FA:EA:73:04:82:6B:5B:1D:72:E6:E6:71:56:CF
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 25
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/2094A4B08C5911EBBBCF1940F8AEA228.roa
Signing time: Wed 24 Mar 2021 04:26:39 +0000
ROA not before: Wed 24 Mar 2021 04:26:34 +0000
ROA not after: Mon 24 Mar 2031 04:26:34 +0000
asID: 3741
IP address blocks: 196.36.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 04:26:34 2021 GMT
Not After : Mar 24 04:26:34 2031 GMT
Subject: CN=605abf7f-11da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:c6:33:77:0a:4b:d0:a1:b0:bc:57:35:d5:
1c:d4:6c:6f:64:e5:5b:6c:bc:9a:37:33:39:75:0e:
d8:3b:dc:02:2b:0a:28:72:e2:8e:51:d0:b3:9b:5d:
69:3a:42:55:07:f2:16:73:00:a8:c9:5a:16:95:b6:
00:da:28:61:85:4e:41:44:34:63:22:b7:0d:09:9c:
a1:73:64:12:2a:9c:33:43:ac:0e:b6:95:db:d0:d0:
a3:f7:e1:dd:5d:27:aa:ab:35:13:06:23:9d:96:e5:
8f:50:3e:5e:1f:cc:82:91:d6:38:24:28:a5:aa:b6:
6e:0a:7b:ce:df:4d:d2:6e:50:59:91:b5:cd:c2:dc:
30:1a:3f:05:bf:1f:05:20:24:83:bb:c9:bf:3b:91:
ec:24:6a:80:ea:0d:d6:f4:a7:19:38:3e:a7:50:54:
27:0e:f6:87:64:86:96:3a:1e:20:1e:5d:8f:28:0d:
b9:8f:f9:84:c6:ea:9f:37:63:97:9f:9e:4c:c7:86:
52:68:55:f8:ac:e0:dc:9a:41:ce:15:a5:c4:fd:ba:
14:63:cd:ef:4e:17:6c:b9:e3:f8:7c:ba:0e:2d:7c:
ba:c4:37:7d:10:b9:fc:26:39:6c:e9:06:68:b0:40:
e8:c0:92:9c:72:4f:e6:6e:a7:f7:c0:10:9a:c8:7b:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F7:A3:26:89:95:FA:EA:73:04:82:6B:5B:1D:72:E6:E6:71:56:CF
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/2094A4B08C5911EBBBCF1940F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.36.0.0/14
Signature Algorithm: sha256WithRSAEncryption
c0:46:06:12:7a:0d:b2:73:5e:1b:02:91:10:46:f0:b5:ea:21:
c8:34:71:10:14:28:11:eb:ab:4e:06:09:c5:16:01:af:27:58:
29:35:d4:5c:93:9a:bb:a9:f0:2f:fa:7c:44:b6:f4:7c:8c:98:
88:00:26:18:00:85:01:f3:59:05:95:24:7d:4c:07:04:9e:ab:
b7:dd:ce:13:c3:3d:70:6e:31:b3:98:42:f6:77:fa:c0:eb:91:
75:95:b9:a8:77:61:f3:42:a1:d2:e5:bd:dd:62:b8:92:ed:26:
dd:70:d9:1b:17:fa:bc:cc:24:7b:8b:aa:52:71:a4:da:97:32:
5c:7b:b2:30:c6:42:01:7d:87:2d:a8:43:fb:70:a0:13:dc:0f:
66:39:d1:d2:11:e0:21:e8:47:7b:fb:3b:00:d5:9a:85:18:e5:
8f:0c:6b:48:bd:dd:16:72:5c:89:50:e4:3b:dd:95:0a:b9:6a:
5d:db:64:ac:fc:35:77:00:2f:ed:b2:de:32:ad:2d:dc:85:a6:
70:e9:36:34:81:da:4a:02:dd:09:e5:50:2c:d0:7b:a3:ed:20:
45:cc:b4:be:be:61:a7:19:3d:f9:35:39:91:3a:6a:2b:3d:bb:
9b:82:fc:3d:8c:6e:12:70:a2:e8:18:b3:54:9a:27:82:fb:43:
44:61:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:55 2024 by rpki-client on console-ams.rpki-client.org