Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/43BC0B8C8C6C11EB93CC7058F8AEA228.roa
File: 43BC0B8C8C6C11EB93CC7058F8AEA228.roa (raw, json)
Hash identifier: OqQVhUN+9vM/+E4U9ZOQfmqvgg9aAZ9LygvHhuScPdk=
Subject key identifier: BE:94:D0:7E:B9:95:5A:5C:F6:A2:72:89:58:80:36:4B:16:89:96:0E
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 76
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/43BC0B8C8C6C11EB93CC7058F8AEA228.roa
Signing time: Wed 24 Mar 2021 06:43:39 +0000
ROA not before: Wed 24 Mar 2021 06:43:31 +0000
ROA not after: Mon 24 Mar 2031 06:43:31 +0000
asID: 3741
IP address blocks: 197.84.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 06:43:31 2021 GMT
Not After : Mar 24 06:43:31 2031 GMT
Subject: CN=605adf9b-68b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:e1:28:38:d5:71:4a:91:88:e4:95:c1:12:
65:db:0b:11:35:45:e7:f8:ee:60:d7:16:e4:8f:9a:
8d:8a:7d:de:29:4f:05:14:1d:51:cf:a7:29:c4:94:
8a:b0:fa:bd:e0:4a:1a:3e:dd:2b:98:95:b3:bc:85:
0a:7c:7b:e5:38:0c:de:1b:ae:69:c8:64:16:52:73:
37:2e:65:ed:57:d2:83:7c:b7:1b:40:84:c4:da:20:
25:94:cf:fc:d8:d9:a7:2d:bc:ed:7f:7e:73:63:99:
45:4c:47:07:eb:62:79:b2:0a:04:2e:ea:4d:ae:d7:
f9:d6:f1:31:33:ab:29:9f:eb:22:55:02:11:43:2f:
0e:5c:ff:4e:0a:48:8a:da:9c:6b:f3:b9:2a:1c:26:
cd:b5:13:b8:cc:91:3c:31:55:14:67:4f:ec:fd:8c:
d7:ae:19:3c:84:36:00:c7:c0:e5:39:bd:9d:18:53:
4e:29:38:d2:66:00:e3:8d:70:fd:a6:87:a5:78:aa:
f4:df:ec:62:0b:d2:63:59:7d:3b:fe:7a:00:27:e5:
f1:8b:ce:09:e1:82:db:c4:94:86:38:a5:c8:d1:39:
46:ae:1b:80:43:ff:75:25:51:44:fb:9a:22:f0:02:
b0:08:c1:2c:bf:99:25:36:da:d2:09:2e:62:85:ab:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:94:D0:7E:B9:95:5A:5C:F6:A2:72:89:58:80:36:4B:16:89:96:0E
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/43BC0B8C8C6C11EB93CC7058F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.84.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:84:b6:36:32:92:77:1b:74:60:84:2b:ab:00:21:84:44:69:
8f:ae:48:ed:eb:47:02:71:3a:ba:c7:ed:e8:03:7e:68:b6:00:
79:17:16:24:19:5c:19:19:1d:02:88:32:e1:81:03:9c:12:dc:
29:10:a2:7f:3b:75:14:5d:63:62:66:f3:f3:77:50:1e:4f:85:
03:74:e9:75:20:d7:66:3a:10:97:6e:27:bc:aa:d2:f8:eb:4c:
8c:3c:a2:86:de:08:ab:45:f5:47:d2:3e:3c:6f:fe:5f:09:f5:
fd:cc:26:6f:7e:d4:97:da:58:b3:f7:4e:e2:1f:78:02:39:72:
ae:04:3f:dd:8e:d4:83:10:e0:3c:13:50:b0:ef:6a:50:11:68:
6f:fd:89:79:12:13:bc:26:8d:b3:c0:d1:26:82:0f:dc:c8:80:
6f:84:f2:f3:a6:d3:78:f1:0d:e3:9e:a7:c5:36:b8:38:c9:c1:
d5:c8:11:55:05:ff:12:b5:1c:db:a7:a9:26:db:2f:7b:82:56:
94:ad:95:55:8c:9c:b6:e4:60:dc:58:7e:e3:8d:35:fd:87:72:
34:35:4a:b1:b9:ab:bb:bf:2f:8e:6c:69:10:fa:e8:41:18:5e:
63:bb:9c:b8:d9:63:e8:c9:d8:21:57:3c:ef:f1:e7:bf:f1:34:
da:80:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:31 2024 by rpki-client on console-fra.rpki-client.org