Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/674D5CF69B6F11EBA9EE3A5FF8AEA228.roa
File: 674D5CF69B6F11EBA9EE3A5FF8AEA228.roa (raw, json)
Hash identifier: GquLzOSk2MyJhCuRTF+heoMdrqXdhV5KBZQRIu+eU+g=
Subject key identifier: D0:9B:56:30:BC:0B:81:B0:3B:AB:2A:58:85:DA:01:67:D2:78:4E:CF
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: F6
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/674D5CF69B6F11EBA9EE3A5FF8AEA228.roa
Signing time: Mon 12 Apr 2021 09:13:54 +0000
ROA not before: Mon 12 Apr 2021 09:13:47 +0000
ROA not after: Wed 30 Apr 2031 09:13:47 +0000
asID: 3741
IP address blocks: 196.1.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Apr 12 09:13:47 2021 GMT
Not After : Apr 30 09:13:47 2031 GMT
Subject: CN=60740f52-6645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:a1:1e:f9:ca:9c:6a:0e:05:74:56:4e:3c:
42:64:5f:de:3f:ae:9c:0a:48:9f:5b:a4:ae:60:d8:
85:df:d1:5d:7f:e4:16:2e:66:56:e7:db:31:6b:35:
b9:5a:a3:7d:20:66:b0:5a:03:92:c4:23:62:f8:0b:
87:66:16:68:7d:e2:c1:e1:6d:dd:f0:ba:a7:d0:97:
38:e9:21:f9:ed:d3:5d:b0:e4:1e:40:90:3d:c6:02:
68:a4:04:65:24:fd:8d:da:e9:07:77:bb:80:e4:7e:
d5:26:ad:10:d7:b6:c1:20:3e:a8:21:c5:75:b7:7a:
b0:5d:7e:53:b1:7d:3c:f1:c6:23:65:dc:71:0a:0b:
a2:43:bf:70:b6:7d:d1:75:2b:f8:2d:13:85:5b:c0:
fd:54:62:60:2b:4b:78:23:c5:93:5f:0e:60:16:64:
88:07:c1:5e:7e:ff:5f:ea:e8:99:cd:45:eb:83:3e:
04:42:39:93:a4:8c:a8:8b:2a:13:cd:63:27:e3:0a:
fb:b4:1b:25:0d:f9:73:db:b8:c6:e5:9c:d6:0d:2b:
57:ca:1e:40:eb:9b:9b:89:cd:eb:92:fc:ab:27:ea:
d1:bc:89:94:af:42:c4:6f:9c:9d:b3:77:9c:73:50:
6c:54:eb:f7:2b:0e:03:46:82:43:80:c2:fc:d3:49:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:56:30:BC:0B:81:B0:3B:AB:2A:58:85:DA:01:67:D2:78:4E:CF
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/674D5CF69B6F11EBA9EE3A5FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6d:cf:ec:af:a1:88:a6:7d:d9:0e:d3:95:af:ff:f9:76:ac:
26:b5:d4:59:02:26:37:e4:32:c2:43:1c:d1:00:5d:2f:73:ab:
fd:38:5c:56:5b:52:27:aa:b2:71:37:40:ac:82:96:75:89:b1:
b0:8e:ad:69:75:cd:74:a9:19:10:3c:2b:6b:d8:b2:4b:0e:a8:
4b:69:2d:ad:fd:dc:45:4e:b0:e7:ac:b8:40:d3:04:52:6d:94:
ab:79:ec:46:f4:21:53:1f:19:cd:db:82:a7:dd:54:a1:81:7b:
29:dd:d5:33:83:89:fa:ff:0c:49:17:3f:21:89:a8:f2:6e:8d:
98:db:89:dd:ce:fe:83:88:fd:da:f9:d2:e1:34:b0:52:44:f8:
f7:0f:97:0e:f5:61:51:ec:b2:5e:fe:a8:ff:87:a6:3a:59:0a:
10:e7:ed:43:56:ef:82:12:50:88:27:72:ba:0f:6e:bd:2d:73:
07:a5:fc:b7:6b:03:f0:6c:47:a4:a2:38:44:18:36:0d:11:b0:
e4:b1:9c:c3:7f:d8:94:fa:26:d3:4b:8a:73:47:d5:69:a6:4e:
9a:38:e4:8b:3e:e3:47:33:9f:39:50:ee:29:ee:cd:56:a3:14:
3a:29:35:ed:0b:ea:d4:26:dd:f4:74:b7:c3:ce:c0:09:60:d9:
33:97:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org