Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5C94372EBCD711EB8549DD0EF8AEA228.roa
File: 5C94372EBCD711EB8549DD0EF8AEA228.roa (raw, json)
Hash identifier: JyAGfMgn5Zls5MEp7i2uSp4wR5ww2EX3bvE/WHv9ZrQ=
Subject key identifier: B5:09:C3:85:55:DD:2D:1E:80:3A:7B:A4:44:F4:E5:65:34:4C:4E:56
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 016F
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5C94372EBCD711EB8549DD0EF8AEA228.roa
Signing time: Mon 24 May 2021 21:31:12 +0000
ROA not before: Mon 24 May 2021 21:31:06 +0000
ROA not after: Fri 24 May 2041 21:31:06 +0000
asID: 3741
IP address blocks: 196.2.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 24 21:31:06 2021 GMT
Not After : May 24 21:31:06 2041 GMT
Subject: CN=60ac1b20-e5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:0b:66:ea:23:bf:07:2e:23:3f:04:65:1d:
34:10:0a:dc:f6:b6:51:2d:ae:23:b5:84:14:62:db:
a9:3f:8e:cd:92:44:46:41:e8:53:1a:f3:db:70:d1:
9f:14:7b:de:60:4c:22:85:2a:f0:88:01:64:7f:e1:
dc:96:77:33:48:96:11:a8:b7:eb:3d:dd:42:cd:e6:
7a:d0:ba:74:a2:35:d9:b6:91:6c:06:ed:e0:9b:f4:
f4:e3:56:76:f4:8a:b7:23:69:77:95:ac:c0:6a:54:
74:bc:2e:02:da:34:ec:9e:ee:7a:ee:fd:b0:2b:14:
2f:c5:c9:b2:1c:bf:83:46:75:2a:4a:6b:5e:f2:56:
4e:71:5b:39:37:49:e3:10:c9:a4:94:6c:cd:5a:c4:
a7:28:67:b7:28:c3:c8:ad:ac:f9:de:4d:01:52:26:
0a:f5:5b:04:3f:42:45:f9:8f:09:77:e8:25:f3:46:
95:91:de:6e:88:a1:64:37:dc:79:a6:87:17:9c:9a:
b2:7d:7d:21:87:39:f6:27:b2:83:bf:cb:39:b2:9b:
f1:64:46:82:af:69:ef:ef:55:c4:3b:f6:e6:e4:fa:
c0:cf:e7:9c:2f:ad:bb:b8:e2:de:36:09:43:a7:b0:
1d:c1:41:b9:83:5f:8e:24:33:3c:39:ad:bb:3c:9d:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:09:C3:85:55:DD:2D:1E:80:3A:7B:A4:44:F4:E5:65:34:4C:4E:56
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5C94372EBCD711EB8549DD0EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.32.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:ac:72:e7:e5:47:8d:64:93:9c:ec:64:9a:f3:f9:1e:51:07:
d0:97:c3:b2:d9:36:7c:0d:be:7a:8b:1e:af:71:96:a3:d3:7b:
19:a1:e8:88:1b:b6:7b:e0:d6:7a:51:a9:7e:d0:7a:2f:13:ba:
e9:a4:15:59:be:69:98:d1:18:59:72:58:8d:f4:b9:10:bc:87:
94:4c:2a:97:b2:7d:88:c9:d5:9e:bc:30:97:39:a6:88:bb:95:
b0:79:2a:9b:f5:b8:5a:fd:11:d4:3f:0a:b6:80:0d:12:06:4a:
a8:02:10:98:58:bf:82:1e:52:8a:63:73:3f:87:f2:f0:67:3f:
4d:63:a3:1c:b6:7e:50:60:34:27:3b:7e:bb:46:ea:11:c8:fd:
59:eb:19:be:a6:ff:7b:18:5d:78:25:00:80:a9:9f:c3:a2:fd:
21:48:65:04:b5:dc:2d:57:5c:5b:f9:86:ff:f3:68:de:d7:41:
84:92:6d:19:ac:46:07:fb:2f:2f:05:79:95:e5:65:d8:73:8d:
b4:9c:ba:64:9c:22:31:33:14:97:36:de:18:64:05:89:60:18:
d2:95:1a:87:1a:c8:d1:c3:6e:45:cc:19:16:91:19:fe:3f:39:
55:c9:d5:ab:46:a0:fa:f4:02:bb:21:c8:1c:0f:61:06:4a:5f:
a7:b9:34:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org