Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5DCA2350BCD811EB91D22510F8AEA228.roa
File: 5DCA2350BCD811EB91D22510F8AEA228.roa (raw, json)
Hash identifier: 0GHl+VTkFCuPMCpNuIjIFeNPdhqIfaJaQzB9xu6ItYk=
Subject key identifier: 10:47:2A:66:FA:66:40:F7:83:04:F9:6F:24:B2:B0:DA:D3:71:E4:42
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0173
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5DCA2350BCD811EB91D22510F8AEA228.roa
Signing time: Mon 24 May 2021 21:38:24 +0000
ROA not before: Mon 24 May 2021 21:38:16 +0000
ROA not after: Fri 24 May 2041 21:38:16 +0000
asID: 3741
IP address blocks: 196.28.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 24 21:38:16 2021 GMT
Not After : May 24 21:38:16 2041 GMT
Subject: CN=60ac1cd0-8cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:52:8c:82:eb:16:6f:99:1c:b1:f0:90:0e:
5d:81:66:1a:36:21:84:90:cd:33:b7:e9:55:94:e4:
c1:51:f8:c6:b4:7a:40:5d:c3:5f:62:60:2f:3f:1e:
07:9b:3a:f6:e5:fc:9d:db:61:00:10:15:24:39:5c:
07:1a:9d:0d:80:55:25:6f:d1:a6:3f:de:8e:7f:0b:
0b:5b:0d:8d:fa:ef:46:4a:8a:d4:f4:fe:97:41:60:
0f:9e:46:39:23:a9:ce:1b:be:c6:e7:6d:e3:ef:20:
9f:d2:be:b9:78:2b:0e:53:b9:0b:ef:a6:ce:f1:7c:
7c:e0:4a:71:11:81:c2:4b:8e:af:81:b3:50:ee:e7:
c8:35:f4:92:02:f7:fe:88:c2:22:fd:5d:eb:9d:51:
04:01:21:39:d0:79:d3:0d:82:2b:57:a8:96:bc:8d:
90:25:c1:94:aa:95:bd:81:ba:0c:1b:aa:75:06:18:
8c:ba:12:94:f7:03:48:c2:fa:17:d8:4b:3d:04:91:
59:75:58:13:97:20:24:2d:38:b3:dc:af:3e:0e:b2:
68:58:a1:13:b9:d6:45:46:c8:20:72:28:1a:29:9b:
d4:7d:0d:4f:59:b8:e9:75:e3:7d:f7:88:9f:b3:5c:
fb:0e:4f:3c:76:54:c9:d5:b8:cb:f2:83:c9:98:7c:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:47:2A:66:FA:66:40:F7:83:04:F9:6F:24:B2:B0:DA:D3:71:E4:42
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5DCA2350BCD811EB91D22510F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.28.32.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:06:6a:a5:e4:0f:50:c2:38:68:ff:1b:87:a3:14:36:72:71:
c1:ec:b1:2a:c5:31:fa:eb:0c:80:49:f2:8c:3f:b5:e2:0c:5c:
4a:9f:38:6f:55:10:71:9c:76:aa:67:75:3c:5c:97:d8:ee:89:
fb:7c:2e:5c:01:dd:3b:37:ed:72:1a:3d:a8:2a:a5:e7:47:c0:
82:6b:76:89:1f:c3:7c:d3:a6:50:b4:77:ed:a7:68:37:33:37:
2d:cc:3e:3b:6f:1b:0f:20:38:5d:0e:fa:4c:31:05:ea:0b:ee:
cd:9c:d1:b7:af:4b:06:74:6f:98:0d:4f:41:43:a7:6e:a8:d4:
1d:0b:51:4f:2e:d9:7e:a0:9b:92:cd:45:95:52:59:8d:d0:a8:
ea:2a:c9:b4:a3:e3:8d:52:0d:b4:72:06:18:dd:19:ef:f0:e4:
b9:94:13:d8:ee:a9:ca:a1:17:84:00:30:65:86:6d:c9:ee:d8:
17:52:10:aa:89:69:b1:f2:3a:b7:70:df:08:48:e9:c2:38:4b:
55:b4:1b:d1:03:50:a7:07:f6:6b:2c:46:c6:2d:3d:6f:27:1a:
78:82:b9:fb:88:a7:20:1f:20:5c:4f:a6:92:54:04:ad:68:fb:
44:2f:53:c7:a5:5e:b4:52:eb:75:9a:77:ff:91:84:a5:75:85:
26:ef:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 02:28:20 2024 by rpki-client on console-ams.rpki-client.org