Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8AF0402C3EA711EFB35E31AD762E951A.roa
File: 8AF0402C3EA711EFB35E31AD762E951A.roa (raw, json)
Hash identifier: 7PGV8tP+zzLMk2xTJgsQ1mGuzXOv36p3SEZ+kDUmYPg=
Subject key identifier: 42:68:B3:D6:B6:15:DD:00:3F:60:8C:10:EE:62:36:BD:2A:A7:66:41
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 067B
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8AF0402C3EA711EFB35E31AD762E951A.roa
Signing time: Wed 10 Jul 2024 10:31:18 +0000
ROA not before: Wed 10 Jul 2024 10:31:14 +0000
ROA not after: Mon 31 Jul 2034 10:31:14 +0000
asID: 20011
IP address blocks: 197.80.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659 (0x67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 10 10:31:14 2024 GMT
Not After : Jul 31 10:31:14 2034 GMT
Subject: CN=668e62f6-09a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:d0:92:f1:57:1f:16:14:c9:e0:2b:14:21:
a7:22:2d:75:06:67:bd:cf:17:6e:a9:cf:ff:34:1b:
d0:c5:91:a0:a2:43:ed:b1:6b:b8:ff:b0:b9:b4:be:
e6:b1:13:c2:bd:7b:e4:b1:f7:76:df:ef:59:6f:95:
70:90:9a:d3:8f:6a:c2:20:aa:21:55:9f:9c:fc:ef:
97:d1:2f:8e:ef:44:0c:d6:8f:a7:4b:e0:ae:80:ca:
e6:98:f4:e4:ac:ec:c0:86:cf:cc:1e:8e:ab:67:e4:
69:bc:d1:d0:a4:22:a0:6a:f2:03:55:23:e7:ad:be:
20:de:6c:29:7d:d6:cf:43:64:fc:c9:1e:e2:56:a4:
07:21:62:5c:bb:3c:bf:8d:ff:86:63:61:ef:bb:5c:
78:53:6d:bf:e5:0d:4a:2c:9d:40:61:bf:ad:12:ae:
28:d9:4b:58:5d:f7:00:0f:ea:6d:29:9c:3b:95:18:
1b:0f:2d:6d:9f:bd:50:38:81:fc:5d:cd:05:6e:6c:
38:87:17:a8:0b:10:15:f1:d1:80:5c:d1:55:62:a8:
9a:53:e5:61:ba:13:37:d9:39:b6:83:33:e3:46:5e:
ab:e1:0f:6e:a8:86:cf:a4:83:46:73:31:86:90:00:
c8:2f:18:e9:ed:f8:30:fe:47:5a:e4:8e:5c:64:5b:
ac:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:68:B3:D6:B6:15:DD:00:3F:60:8C:10:EE:62:36:BD:2A:A7:66:41
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/8AF0402C3EA711EFB35E31AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.80.0.0/13
Signature Algorithm: sha256WithRSAEncryption
24:05:2a:5f:a5:cf:0b:a4:7d:9c:75:12:d7:18:79:ba:47:3e:
73:d3:37:03:24:c7:ea:1d:be:b4:44:26:4f:9f:85:d7:e0:1c:
9c:bf:10:7b:4a:cf:ef:8a:24:47:bf:9e:40:b6:be:0d:47:af:
68:74:d5:f6:3c:60:26:92:09:16:a6:16:15:41:44:d8:5d:85:
a7:f3:02:b8:4c:39:53:dc:1a:05:e1:10:09:55:e1:42:cf:31:
80:cf:c7:4f:7a:95:ae:53:2b:e6:2f:ca:c5:67:9c:10:3f:95:
d6:33:08:16:ba:38:32:39:fd:b6:b7:f0:0e:77:79:1d:9f:c5:
51:df:6d:b7:21:81:bc:11:cc:1f:e5:09:5c:b6:14:bb:d4:38:
3f:d7:8b:d1:e7:23:71:9f:e0:a6:59:39:91:dc:27:1a:0a:f9:
49:bb:69:f6:20:a0:28:33:a4:df:2b:2f:a9:68:7f:51:f3:d0:
12:50:54:0e:35:25:4e:b1:6a:17:86:df:34:18:4b:8e:f0:78:
81:4e:58:7d:50:8c:d9:15:7f:6e:1d:d7:14:fd:26:b0:71:05:
46:37:41:4f:c3:1d:91:be:b2:06:32:40:7c:df:85:3a:50:00:
db:01:0c:d1:4e:ad:23:23:5e:0e:a8:d8:71:8f:5a:b1:df:e7:
3e:c5:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org