Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/390E27D68C7D11EBBBD52D6AF8AEA228.roa
File: 390E27D68C7D11EBBBD52D6AF8AEA228.roa (raw, json)
Hash identifier: NaKkkW/o0LBty28e5UufO8j0Ow442uqQVd1CPuXtOig=
Subject key identifier: E7:F0:D0:4E:FB:78:7D:79:84:C3:99:79:24:0A:7F:CA:08:85:C5:B8
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 86
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/390E27D68C7D11EBBBD52D6AF8AEA228.roa
Signing time: Wed 24 Mar 2021 08:45:02 +0000
ROA not before: Wed 24 Mar 2021 08:44:57 +0000
ROA not after: Mon 24 Mar 2031 08:44:57 +0000
asID: 12258
IP address blocks: 197.81.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 08:44:57 2021 GMT
Not After : Mar 24 08:44:57 2031 GMT
Subject: CN=605afc0e-7492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e6:4e:0a:c8:36:43:4e:91:6a:53:75:28:da:
03:b1:7a:92:bd:b6:7e:4d:4c:65:da:07:9a:0e:44:
b0:61:4d:be:d1:84:9a:97:cd:2a:c0:50:5f:35:b3:
eb:92:21:56:35:7b:f6:e4:6e:17:04:fe:95:f0:0f:
fc:8b:75:4e:e8:17:c4:c2:69:8b:af:9a:79:ff:0d:
3d:34:a4:48:18:bc:b2:87:b4:55:47:89:3e:2b:1d:
0f:38:ba:8d:c6:0d:f8:77:13:4a:a8:76:bf:5e:58:
a6:d3:5e:80:23:79:b1:c7:f9:97:ca:6a:7a:1b:d0:
34:34:b6:7c:75:e9:11:d1:a5:8d:d9:d0:e2:36:bd:
97:60:a5:6e:3a:b2:b0:25:4c:5b:ea:16:15:7c:af:
63:f1:89:dd:c7:96:e4:db:c3:4d:e9:b5:f7:51:36:
75:4a:7b:f1:66:e4:fd:e7:0d:95:3e:e9:f3:5c:cf:
9a:d7:9a:04:20:bb:1f:5f:9b:f1:ac:af:73:e1:19:
43:81:67:85:72:7d:5e:15:38:22:f0:ab:25:54:92:
de:bb:ca:4c:72:48:8d:e0:f3:b5:eb:bc:a1:c6:38:
ee:01:c2:c2:dc:76:6e:76:6d:19:aa:33:c1:50:09:
0f:90:bf:84:4c:2f:07:bf:d2:64:a2:52:80:2c:f4:
99:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F0:D0:4E:FB:78:7D:79:84:C3:99:79:24:0A:7F:CA:08:85:C5:B8
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/390E27D68C7D11EBBBD52D6AF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.81.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:9d:1c:37:6c:63:6b:03:dc:ea:d6:31:e6:b7:4c:c2:be:be:
54:89:54:a2:48:92:f2:bf:00:c5:22:3a:d8:41:43:f3:c9:60:
43:5d:0c:82:8f:3d:0f:9d:4f:d8:b5:d9:ba:02:98:c3:84:4f:
1b:37:3c:6c:7e:43:17:dd:a0:d1:42:c1:de:82:fd:fd:3c:14:
3f:c8:a6:46:a6:18:8a:0d:b3:65:cc:3b:00:9b:43:99:b9:20:
33:6a:ef:d5:fa:6e:c7:3f:56:e2:3b:1f:51:7f:73:fd:9e:39:
73:73:1a:c6:ff:37:4e:b4:10:9e:c7:98:86:4f:8a:7e:a7:19:
3f:c7:5c:0c:73:81:1f:12:7e:50:da:1e:36:d5:a9:d2:22:08:
3b:2c:d7:a1:87:e0:6b:f6:80:50:fd:6a:dd:64:41:79:10:06:
ae:30:e6:eb:37:12:8c:7c:86:bf:72:1b:28:1e:d8:f5:da:1e:
41:f4:03:5a:43:88:da:0d:aa:b9:75:5b:73:29:b8:1f:01:d0:
e1:aa:1f:7d:3c:95:bd:e9:7e:2f:ac:45:b7:86:34:55:b9:fd:
d7:d9:b1:59:01:55:9e:82:3a:20:87:74:55:dc:14:b7:36:17:
1a:c2:13:d8:8d:2b:17:9c:d0:58:e5:9c:6e:6f:79:dc:fc:f6:
cf:56:3d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:55 2024 by rpki-client on console-ams.rpki-client.org