Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5E562EB68C6511EB96086350F8AEA228.roa
File: 5E562EB68C6511EB96086350F8AEA228.roa (raw, json)
Hash identifier: C1XfMi+UFuHDXgY7HLp+PhiFwITG0bxY4Ix8CnDlQ2I=
Subject key identifier: 07:45:70:62:16:7F:65:B6:C7:C2:F7:0A:E6:CC:38:4D:28:DB:34:64
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 5C
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5E562EB68C6511EB96086350F8AEA228.roa
Signing time: Wed 24 Mar 2021 05:54:17 +0000
ROA not before: Wed 24 Mar 2021 05:54:10 +0000
ROA not after: Mon 24 Mar 2031 05:54:10 +0000
asID: 10474
IP address blocks: 41.86.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 05:54:10 2021 GMT
Not After : Mar 24 05:54:10 2031 GMT
Subject: CN=605ad409-1334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:27:9f:e9:f2:71:86:82:f1:f9:00:bd:75:
52:a9:c6:d0:55:18:45:2c:f7:2e:36:d9:a0:23:6d:
c1:e7:1f:11:e4:38:db:78:cb:61:9d:45:47:e3:c3:
1f:e3:88:00:a0:b2:e3:d2:f7:b2:5b:ae:96:95:66:
24:bd:d9:f8:07:48:c8:50:68:95:08:f1:5d:d9:d6:
4f:97:34:63:67:dc:07:6a:67:17:16:80:a6:1c:72:
bb:e0:95:f5:55:9d:e2:7c:1f:3c:3a:fe:82:27:95:
cd:86:3d:ad:ac:11:a7:34:b7:fb:45:26:0d:ca:89:
ab:60:01:fb:d2:6a:9e:87:9b:2e:9f:ba:b3:54:f4:
14:03:5b:2a:28:a4:00:df:40:00:ac:9b:ca:17:62:
49:12:53:41:84:1b:03:84:2f:16:24:24:23:30:cb:
77:7e:1a:84:77:41:ef:be:b0:e9:98:a5:3d:19:6f:
9b:0b:1d:9a:02:d5:36:a9:37:4a:11:75:01:71:5c:
b0:52:d4:d7:00:b4:8c:a6:e4:71:9a:bf:ec:96:c8:
51:3b:1f:04:26:45:6d:54:c3:1c:4e:bb:36:e0:9a:
fe:61:75:59:32:35:86:e3:bf:13:4e:38:7f:0b:b6:
a5:0d:10:d7:6b:7b:cc:be:7b:e4:4a:5a:32:18:f3:
43:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:70:62:16:7F:65:B6:C7:C2:F7:0A:E6:CC:38:4D:28:DB:34:64
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5E562EB68C6511EB96086350F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.86.96.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:83:28:5b:98:ca:65:d2:98:b6:82:59:08:13:3c:d4:5e:8c:
ca:27:3e:fc:79:c2:52:52:96:96:16:ac:e2:45:56:52:6b:c3:
d2:f9:e8:02:82:68:5d:83:62:41:51:19:f4:fb:e2:cf:69:79:
fe:a9:ec:88:5a:a6:b8:c0:44:58:70:96:61:8f:60:5f:e5:41:
55:d0:e0:3e:14:2d:2f:3e:54:bf:27:69:5a:1c:ce:75:53:85:
2f:39:a9:98:cb:90:c2:eb:f4:2b:4e:b7:01:1a:90:b8:0d:94:
1a:33:c0:fa:30:a0:4b:46:6b:ec:3f:cf:10:17:8f:30:82:df:
8d:5e:8d:bf:cf:65:30:90:bc:6f:17:83:ad:ed:61:9c:f6:c8:
fe:06:4e:7b:47:44:fa:df:ac:82:df:51:73:d4:5d:c0:e6:44:
71:32:78:c8:eb:47:f2:03:3a:30:1c:61:c4:9e:12:39:7e:0b:
1f:41:b6:25:6f:ed:c4:35:d9:4a:32:37:2c:8c:00:8b:0b:e0:
44:d6:b9:be:29:e8:66:d3:bb:90:84:77:9a:15:8f:ea:4e:f1:
63:f1:9e:b9:08:e1:b7:59:69:40:d0:11:42:77:f9:9e:d0:0f:
c4:ff:45:0e:8f:6d:b7:01:31:db:bb:6a:90:b6:c3:b7:89:33:
e7:48:5d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:03:51 2024 by rpki-client on console-fra.rpki-client.org