Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/39E7A7BEBCD311EB9677F685F8AEA228.roa
File: 39E7A7BEBCD311EB9677F685F8AEA228.roa (raw, json)
Hash identifier: 110D1UWusTLjej5Ti9NitQ21edqMljmhPi+kP1d3c04=
Subject key identifier: 84:75:D0:C2:8C:25:65:16:1C:21:26:55:EA:D4:F5:09:E2:DD:5E:FC
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0162
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/39E7A7BEBCD311EB9677F685F8AEA228.roa
Signing time: Mon 24 May 2021 21:01:36 +0000
ROA not before: Mon 24 May 2021 21:01:30 +0000
ROA not after: Fri 24 May 2041 21:01:30 +0000
asID: 3741
IP address blocks: 197.81.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 24 21:01:30 2021 GMT
Not After : May 24 21:01:30 2041 GMT
Subject: CN=60ac1430-b9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c4:42:e7:49:7e:bc:57:77:5f:c6:1c:ad:ff:
bd:a3:74:fe:35:b2:1c:4d:88:98:21:05:98:35:7b:
57:7f:4e:77:fc:f2:e2:45:74:36:f4:08:79:8b:53:
c3:7e:01:8b:fa:40:a9:7f:94:86:fb:43:7a:83:38:
62:3f:5f:7d:87:7f:89:4c:23:73:5a:98:df:76:c9:
8b:1d:69:7e:23:15:c2:dc:19:22:19:93:92:30:0e:
c7:35:d2:1b:6c:9b:a0:8c:3e:c5:10:87:6f:85:e0:
37:46:05:30:6f:11:91:bc:9e:e6:9b:e0:ec:7b:9c:
4e:35:54:e5:e7:e9:93:8c:4b:0e:0b:be:fd:2c:28:
8b:d2:b5:21:67:09:9c:85:89:40:24:f0:d9:3d:76:
b9:19:dc:67:2f:84:77:f5:6a:0c:4e:01:06:51:45:
2a:55:94:b4:71:7b:b7:97:f8:ea:fa:5b:ca:ff:ce:
b7:59:cd:39:32:13:1e:e5:a5:3d:ca:fd:03:38:70:
78:ac:cc:4b:f1:29:8b:6c:0f:02:39:68:3a:2a:0e:
2f:8c:66:37:64:3a:de:24:20:2f:38:ef:86:63:36:
45:b6:e7:4e:3f:19:58:c7:fe:aa:a7:ba:da:8a:b2:
bf:a5:f5:29:2f:87:77:80:12:62:68:01:46:06:5e:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:75:D0:C2:8C:25:65:16:1C:21:26:55:EA:D4:F5:09:E2:DD:5E:FC
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/39E7A7BEBCD311EB9677F685F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.81.156.0/24
Signature Algorithm: sha256WithRSAEncryption
55:3b:8f:4e:c9:85:8d:2e:95:e9:e5:23:f5:76:cd:e8:aa:cc:
1d:73:d0:23:0a:5a:44:3d:8d:53:c4:a8:f5:52:d3:db:0d:37:
45:9d:ed:d4:0a:c2:ec:2a:05:d1:b1:c4:7e:9c:20:8d:a1:b5:
65:8b:33:b3:82:20:4a:1e:7d:3c:c7:96:56:23:e7:e2:63:85:
26:98:76:88:8d:10:f5:d1:67:68:ef:ed:71:41:89:16:03:b8:
65:87:be:ea:2c:f1:5f:32:3c:f0:0d:a2:f9:c2:0f:65:76:16:
d4:cb:8f:8a:b5:98:d2:d1:a2:16:b3:50:bd:f2:c8:12:0b:c0:
42:7c:64:e2:8e:2e:c3:61:a9:f6:ff:fd:cc:47:53:d8:ca:cd:
30:13:b7:21:47:ba:6a:81:7a:70:85:98:08:aa:5f:d8:6d:5b:
93:82:48:4d:f5:d6:22:19:68:9f:c2:30:d3:e7:81:40:b0:f3:
5c:07:61:ad:f9:79:3c:16:84:54:f4:2a:44:e1:76:d3:d9:be:
db:d1:e8:0d:1c:d5:ff:fa:23:ff:7d:6b:93:00:b0:4d:43:1b:
c7:ec:40:fc:b7:f3:58:45:0b:67:e2:50:ff:e8:80:1c:2c:01:
93:db:71:0e:3c:68:d7:87:f9:ea:fb:2f:0d:91:1c:92:7a:96:
ec:5f:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org