Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/650B70FC378111EFBE85415C762E951A.roa
File: 650B70FC378111EFBE85415C762E951A.roa (raw, json)
Hash identifier: i9yw43pUxOtBqE/CvZq6cjQQgo0XmZLtYz2QyhhcySk=
Subject key identifier: 42:4F:6A:E4:6C:18:65:97:35:DD:AC:F0:E5:DD:74:8A:35:0F:05:EE
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 066B
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/650B70FC378111EFBE85415C762E951A.roa
Signing time: Mon 01 Jul 2024 08:10:36 +0000
ROA not before: Mon 01 Jul 2024 08:10:32 +0000
ROA not after: Sun 31 Dec 2034 08:10:32 +0000
asID: 20011
IP address blocks: 197.87.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1643 (0x66b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 1 08:10:32 2024 GMT
Not After : Dec 31 08:10:32 2034 GMT
Subject: CN=6682647c-1465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:7e:4f:30:82:20:83:6c:19:ea:4f:0d:85:
18:7e:2a:55:5a:da:fc:1e:e2:2a:db:4c:bb:3e:da:
fd:e4:0e:bf:5e:c0:fb:07:c4:01:2d:80:0b:54:0c:
16:24:46:ed:1d:a9:07:0c:b1:7d:19:33:e6:53:bc:
17:77:51:4c:c8:52:8d:b6:c5:0e:9d:b9:34:d1:a4:
39:52:e6:6d:6d:91:3b:d8:67:cf:f6:37:ea:3b:c4:
84:fb:9b:bc:6b:1d:f7:7f:0f:17:78:9b:02:69:a8:
17:20:72:0f:99:93:6d:34:26:9e:a2:03:49:84:dd:
f0:6a:aa:90:cf:fb:ae:c2:65:93:6c:a8:3a:87:09:
c6:9a:04:69:8d:83:d9:ae:26:26:65:14:9f:b9:9c:
96:8e:55:71:5b:5c:04:24:78:b2:1d:ba:cc:3f:04:
64:cb:ce:4f:43:b5:be:4f:5d:93:9f:6c:f5:08:7d:
bf:71:64:dc:82:b0:08:d5:80:a0:d4:27:2c:a7:b6:
ca:12:a7:bf:17:9d:86:44:78:ef:f1:3b:55:27:99:
b0:46:03:d6:30:70:4b:5f:f0:a8:d4:69:99:e4:99:
bd:3c:3e:78:5d:67:c6:a5:69:c4:64:ab:b5:e9:18:
e9:ce:65:d1:51:a4:a1:1a:f5:1f:23:c9:1f:c3:6a:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4F:6A:E4:6C:18:65:97:35:DD:AC:F0:E5:DD:74:8A:35:0F:05:EE
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/650B70FC378111EFBE85415C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.87.196.0/22
Signature Algorithm: sha256WithRSAEncryption
73:01:64:c4:75:0c:74:c6:db:e5:f3:f4:1f:3a:ed:40:20:13:
1f:23:86:46:f4:d0:e8:08:b9:b2:58:4b:76:d9:fb:59:22:38:
99:0b:1c:8d:a7:9b:14:7a:f1:18:0f:2e:2a:c8:a5:d8:55:52:
b9:4f:00:9f:0a:9d:67:b4:b9:99:e6:89:6e:5b:29:0d:14:5e:
93:74:d6:a1:d8:00:c1:24:b8:50:97:ec:9b:4c:58:e2:79:0d:
40:f3:06:2d:1c:25:24:42:e0:ff:50:44:97:49:2d:ba:48:29:
30:9b:da:80:5c:87:11:30:b9:0c:ee:94:ae:61:fe:c9:d5:1c:
58:cf:4e:24:31:6f:43:e3:9c:af:94:9a:9f:e3:67:a3:c8:a9:
25:cc:96:a4:7b:9e:cc:c8:64:56:a7:d9:52:f7:ef:f6:ea:ae:
f4:74:c6:c9:9e:39:cc:17:e6:0a:76:f9:95:8e:3c:33:a8:20:
f5:3b:69:e3:9d:e9:1b:32:cd:c4:f1:7e:41:2e:19:a0:e7:9f:
7f:a5:e2:57:ed:4b:c1:3d:64:65:f5:4a:15:73:3d:4c:f2:25:
cb:65:6f:9c:7a:9d:bd:e7:2a:c6:ec:ed:78:7d:d3:bb:e9:f6:
22:5c:81:a8:d3:63:d1:1f:f1:2f:77:86:c1:c9:ab:7f:09:96:
c2:24:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org