Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8575E50A8C6411EBA86EE74EF8AEA228.roa
File: 8575E50A8C6411EBA86EE74EF8AEA228.roa (raw, json)
Hash identifier: 3QswJyNGR2dToMNPzGw4B8tp+jVlSUTkMFMtM/+w1X4=
Subject key identifier: B4:A5:B3:77:45:BF:ED:35:AE:CF:DC:E6:CB:CE:CE:83:F9:6B:AD:EB
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 53
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8575E50A8C6411EBA86EE74EF8AEA228.roa
Signing time: Wed 24 Mar 2021 05:48:13 +0000
ROA not before: Wed 24 Mar 2021 05:48:08 +0000
ROA not after: Mon 24 Mar 2031 05:48:08 +0000
asID: 12258
IP address blocks: 196.2.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 05:48:08 2021 GMT
Not After : Mar 24 05:48:08 2031 GMT
Subject: CN=605ad29d-300b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:f3:45:03:19:38:04:ae:c7:70:8a:8f:e8:
da:0b:08:03:0a:47:b5:71:5b:5b:a4:ab:a0:2f:7b:
3a:1f:c2:84:15:f3:a2:9e:b2:c8:e0:f2:ce:0d:db:
17:eb:ef:03:a6:46:9f:09:25:35:11:ab:5a:98:6b:
28:60:f0:64:f7:c5:2b:a8:e3:21:af:f6:44:27:6e:
49:a5:dd:92:f6:3b:c5:cf:a5:01:17:e1:56:fd:fb:
77:cc:c4:b2:9e:7d:42:d6:47:bb:d8:7a:e5:47:1e:
d9:e8:38:f5:60:f1:22:8a:38:96:1c:50:ad:be:a3:
12:91:70:f8:54:65:76:a2:4c:4a:fd:6d:0c:0e:5d:
5f:7c:36:98:d5:18:cd:1c:2b:14:5a:e7:5b:a4:20:
0a:4e:64:0b:bd:bb:f6:1d:55:41:00:d3:55:05:e9:
5e:af:6c:59:db:3f:56:c9:db:54:a7:8e:62:3c:64:
7b:ee:c0:93:fd:3e:87:2e:b7:b7:44:3c:d1:7c:6c:
42:12:37:d6:ac:cf:4f:ea:ca:55:5a:e0:80:25:cc:
d3:70:89:e3:9f:e2:4d:35:58:25:d3:16:39:f4:3a:
f0:5b:8e:37:99:8c:75:3d:3d:9a:74:73:3e:ff:90:
10:d5:07:06:b6:7c:e8:06:3d:95:4b:19:59:e6:98:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A5:B3:77:45:BF:ED:35:AE:CF:DC:E6:CB:CE:CE:83:F9:6B:AD:EB
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8575E50A8C6411EBA86EE74EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.128.0/19
Signature Algorithm: sha256WithRSAEncryption
52:a7:4f:6b:9f:60:61:d2:c4:16:8c:cd:05:83:04:69:e3:2b:
ad:bb:11:b4:8e:95:4c:88:ab:87:df:8c:cf:fc:af:19:0e:c3:
8c:32:43:3f:9e:69:b6:8c:79:d0:03:61:52:c7:08:d4:81:f2:
02:fe:24:f5:44:57:5a:8a:d1:02:f0:75:42:ae:05:2a:a3:fc:
57:e0:57:e9:1e:85:d2:f3:33:7a:bc:8a:61:1e:7c:ec:b4:99:
17:3e:43:91:6e:4e:45:b7:15:e0:41:db:4f:a9:57:57:86:12:
18:25:6b:1a:d2:bb:74:94:43:e4:39:59:fe:90:25:b7:10:06:
3a:ee:21:f0:30:8f:5f:fd:7a:c4:fd:66:97:2b:87:f9:d9:ba:
10:18:38:bf:c3:f1:43:fa:bd:ea:b6:a5:b0:d1:d1:3d:e4:4c:
76:bf:5c:9f:5e:1a:e4:b7:9e:25:25:ec:b1:c7:21:6a:9d:f5:
da:ca:89:b7:24:41:e7:b7:3e:f8:56:33:91:ac:c7:71:af:95:
74:5d:e0:5f:20:59:1e:1e:90:9a:d8:6d:fa:55:90:00:71:88:
94:d9:4f:36:14:5c:db:c0:ae:a9:66:9e:44:50:0c:7b:e7:a9:
0b:3c:81:49:e0:5c:65:b7:a5:56:63:96:9c:e4:61:42:4f:a0:
a6:c0:14:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:03:53 2024 by rpki-client on console-fra.rpki-client.org