Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5E697CEE864611EFB56078BB762E951A.roa
File: 5E697CEE864611EFB56078BB762E951A.roa (raw, json)
Hash identifier: qxzYi4/2OOHlJZHqY0OJF+pIcfIyT+N1mP5c4neonME=
Subject key identifier: 8C:C0:D0:93:E7:AC:8F:4E:A0:BA:51:C8:F1:8D:C6:C9:80:41:AA:D2
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 06E9
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5E697CEE864611EFB56078BB762E951A.roa
Signing time: Wed 09 Oct 2024 13:57:06 +0000
ROA not before: Wed 09 Oct 2024 13:57:02 +0000
ROA not after: Sun 09 Oct 2044 13:57:02 +0000
asID: 20011
IP address blocks: 197.101.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1769 (0x6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Oct 9 13:57:02 2024 GMT
Not After : Oct 9 13:57:02 2044 GMT
Subject: CN=67068bb2-f582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:98:29:68:53:fb:d9:85:d9:80:27:f5:90:05:
5c:55:22:38:77:7c:c9:13:4a:8d:23:56:de:db:ee:
45:e9:c1:a6:36:26:e5:bc:77:35:ab:01:70:8f:4d:
26:9e:5f:3c:d9:ad:17:00:7f:c5:9e:81:ea:e2:01:
51:ba:8b:1d:f5:b0:6c:6e:97:06:a1:12:43:5b:a9:
8e:97:c1:22:8b:8f:89:6a:21:1c:72:37:89:2d:69:
e0:26:c3:a5:52:3e:7b:e9:ac:da:c5:a8:7c:dd:a9:
21:54:05:93:c7:3d:0b:75:71:53:03:e4:9f:d4:a7:
80:d2:65:50:ad:c9:90:25:3e:f0:c3:07:9e:29:45:
e2:f4:e0:ea:3f:0c:4c:d4:d6:1d:2d:de:2b:74:dc:
72:cd:b0:0c:0e:27:2b:d8:92:95:83:90:60:ad:f0:
39:99:cb:f0:18:e3:5d:27:ff:52:88:00:1d:f3:fa:
84:a0:05:1c:bd:68:fb:1d:58:bb:d4:9f:40:07:63:
f2:2b:43:3c:f1:c4:c3:7d:b0:e1:8d:5c:a0:b1:30:
cf:1e:35:c8:ec:22:22:ed:e9:6f:75:bf:31:af:2c:
b8:6a:76:e9:46:fe:b1:dc:84:d2:2c:05:cf:85:aa:
ed:9e:e4:8c:2e:ba:4c:f1:3d:60:b6:9b:e2:5c:31:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C0:D0:93:E7:AC:8F:4E:A0:BA:51:C8:F1:8D:C6:C9:80:41:AA:D2
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/5E697CEE864611EFB56078BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.101.170.0/23
Signature Algorithm: sha256WithRSAEncryption
82:d2:72:60:ab:24:e9:55:19:4b:44:dc:03:06:2c:67:71:3d:
d9:2b:0b:a2:a3:e2:60:26:c2:ca:11:a4:76:93:ee:78:76:40:
0f:96:78:cb:be:e2:2b:d8:c2:c7:f0:10:5f:72:78:b6:22:10:
de:f1:f4:c4:ef:f3:f2:85:7d:6a:bc:24:a2:eb:26:d7:58:a2:
19:53:23:84:a1:dc:8d:a3:15:62:65:8d:18:d1:4f:6b:05:f0:
cc:49:ee:40:23:ce:55:ab:6f:95:e0:5b:ef:09:8b:d9:8f:a9:
04:9b:de:80:31:ea:13:74:98:eb:54:00:b7:80:34:21:6b:84:
c2:b2:b1:7b:77:1f:2d:09:f8:1f:ea:6b:c3:c6:dc:2e:0b:51:
81:d1:fe:96:4f:1a:25:6b:51:93:70:ea:51:a0:37:e9:18:e8:
5a:a9:b8:d0:af:45:ef:97:83:39:fa:97:5c:33:f9:c8:0d:ec:
21:4e:cb:70:61:e4:02:11:d8:a3:63:50:88:ce:37:f3:2a:e7:
9b:5d:57:1c:49:5e:73:4d:ae:63:95:84:b1:a5:14:14:57:f8:
5b:2c:1b:d7:aa:91:9d:c3:6d:bd:96:63:ed:26:0f:08:e5:59:
c4:e7:91:76:91:32:7d:42:2a:ad:b3:fb:31:96:2b:c7:e4:ff:
f0:2e:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org