Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/80C8861ABCDA11EBA3394C13F8AEA228.roa
File: 80C8861ABCDA11EBA3394C13F8AEA228.roa (raw, json)
Hash identifier: 93yYH1Ath4Jb60mUlGwAz7JkA4z3CjuNJcuVGuLgb+g=
Subject key identifier: A1:14:24:72:34:F6:D8:24:19:6F:77:FD:48:E3:4D:42:6C:33:85:B4
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 017D
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/80C8861ABCDA11EBA3394C13F8AEA228.roa
Signing time: Mon 24 May 2021 21:53:41 +0000
ROA not before: Mon 24 May 2021 21:53:36 +0000
ROA not after: Fri 24 May 2041 21:53:36 +0000
asID: 3741
IP address blocks: 196.2.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 24 21:53:36 2021 GMT
Not After : May 24 21:53:36 2041 GMT
Subject: CN=60ac2065-8c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:aa:0c:0c:59:53:57:60:5b:02:b8:c4:e9:41:
02:39:1e:3a:5a:c7:9f:cd:da:1b:c6:f0:6d:b0:9d:
e2:db:09:e0:f6:72:77:9d:ba:33:f0:f2:ce:c8:84:
c9:39:55:b9:96:91:17:b4:8b:ee:38:36:52:58:3e:
45:85:cf:24:71:3d:36:ec:0e:93:fd:0c:82:33:6b:
86:0d:0b:41:57:bd:18:5e:b9:6b:99:60:b4:89:e1:
75:2d:4c:14:03:fc:b0:36:05:61:d7:b7:bf:bd:a1:
be:0c:96:db:fd:67:4c:ee:af:72:f9:32:01:c4:c7:
2f:e5:46:4f:f9:4e:d1:fa:f9:49:65:d8:0e:ae:f8:
aa:ef:11:40:eb:50:3a:b5:04:2b:56:fc:8f:18:0d:
96:6b:74:f2:84:f2:f2:25:74:b1:a8:a7:c5:cf:38:
bd:a7:12:1e:75:8b:0c:0d:43:49:df:92:9c:9a:2a:
69:9e:8e:98:e8:57:18:39:77:9e:dc:84:9b:e6:d7:
e5:dc:f5:98:db:dc:fc:7a:56:44:a5:d1:51:b0:94:
d6:e4:99:fc:3a:55:d7:aa:13:f4:d8:46:35:41:51:
10:95:8b:da:6b:77:20:20:86:4e:f1:49:d3:9a:76:
2c:b9:ae:1c:08:c3:13:ed:f3:96:05:b7:11:62:26:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:24:72:34:F6:D8:24:19:6F:77:FD:48:E3:4D:42:6C:33:85:B4
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/80C8861ABCDA11EBA3394C13F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:6d:e8:41:71:db:ae:fa:3d:d2:e2:1a:1d:6e:cf:ba:9f:32:
3e:52:6e:8c:36:3c:93:38:60:3f:88:b0:1b:0e:a6:af:d2:e0:
63:46:d9:88:87:3c:20:42:ea:c1:44:bb:82:d9:ea:2e:f9:78:
7d:2e:4e:fe:0f:c9:87:a8:45:fa:0e:40:53:be:64:81:a7:84:
46:e5:6e:c0:96:0b:18:29:5b:57:e5:83:2d:46:2b:60:33:24:
0f:54:b1:c6:01:f6:29:00:ec:72:cf:01:91:39:25:0b:01:5e:
80:cd:02:28:94:df:4c:25:ec:5d:b4:d1:39:4e:ce:53:66:17:
ad:3c:b7:4a:98:80:4c:95:2c:71:c3:9b:cb:cf:1c:bf:d2:d2:
77:2d:ef:81:ba:a6:44:5e:ef:2c:2d:df:92:58:4a:3c:bb:67:
8d:88:cd:0a:3a:fd:f0:f9:2c:cd:f3:31:df:02:b9:58:49:c8:
ba:c6:47:73:da:34:d0:7b:7e:65:56:1b:f1:5e:5a:d9:87:44:
22:9b:bd:81:14:5a:04:f6:60:09:b3:8f:81:fe:f8:53:a5:fc:
16:a8:1f:f0:2d:e7:df:92:fc:47:3c:17:51:15:1a:60:0c:a3:
6c:e3:67:46:15:61:8d:6f:c2:95:87:8f:48:1c:9b:6b:cb:d4:
15:d4:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:58:28 2024 by rpki-client on console-fra.rpki-client.org