Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9D6716368C6211EB8CF4594CF8AEA228.roa
File: 9D6716368C6211EB8CF4594CF8AEA228.roa (raw, json)
Hash identifier: 09RUtcU6ofvbPgLwNICAYmSFARHHSIwgJ0y+BOsErxY=
Subject key identifier: 5C:C2:61:6A:C1:7A:74:4D:BE:66:8A:63:AE:47:DB:B2:FE:4E:B6:ED
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 47
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9D6716368C6211EB8CF4594CF8AEA228.roa
Signing time: Wed 24 Mar 2021 05:34:34 +0000
ROA not before: Wed 24 Mar 2021 05:34:28 +0000
ROA not after: Mon 24 Mar 2031 05:34:28 +0000
asID: 10474
IP address blocks: 196.28.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 05:34:28 2021 GMT
Not After : Mar 24 05:34:28 2031 GMT
Subject: CN=605acf6a-7a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:1b:cf:6d:5e:84:7b:25:f0:7d:e8:3d:48:
61:ce:af:35:0f:90:ec:d1:d1:bb:f9:2c:41:56:b6:
a2:94:b3:e2:7c:5c:cb:73:8d:50:6a:85:5c:b7:1c:
de:9f:39:23:30:f8:31:f2:b4:4c:1f:e8:98:4e:da:
70:36:c3:78:d6:4f:2d:ed:69:63:0a:bd:b6:7f:fc:
2d:a9:f2:b3:4c:c5:3a:e0:e7:ba:23:a0:06:21:a7:
90:e5:c3:3a:0d:09:f7:39:e4:7d:4d:d1:54:83:47:
d4:4d:9d:1a:2a:0e:32:64:42:24:b8:95:5b:1e:b8:
cf:a7:f7:a3:ad:01:6b:f2:b6:00:85:d0:49:66:4d:
b9:69:1b:79:3b:8c:20:5f:f3:58:98:88:1f:61:00:
88:08:d5:a5:de:02:f4:a0:39:7e:57:81:72:aa:39:
d0:ef:40:1c:7b:0b:5e:90:80:11:0e:d5:d5:9c:9e:
a8:ed:d6:c5:8c:03:b6:49:2c:2f:91:a7:31:ac:85:
6c:56:6f:c3:f8:89:09:6f:4f:ea:b5:e8:38:81:80:
36:0c:e8:c6:75:6d:80:a7:34:0d:51:87:66:34:1a:
27:d5:08:48:04:4e:ec:ae:53:df:07:5a:bf:b0:19:
de:16:cb:91:61:ac:a2:e1:63:02:dd:a8:50:3f:b5:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:61:6A:C1:7A:74:4D:BE:66:8A:63:AE:47:DB:B2:FE:4E:B6:ED
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9D6716368C6211EB8CF4594CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.28.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:db:ac:7e:3e:bc:91:fd:69:9f:96:a3:22:b1:8e:22:cc:53:
59:ed:e3:42:0d:fa:f8:39:2b:8e:25:d8:b1:a1:92:ff:9e:14:
63:b6:35:31:79:d1:20:e6:70:66:99:ff:69:1c:22:8f:c5:9f:
d7:7c:70:c5:9c:a7:2c:5e:29:6d:5d:cd:16:08:c0:0a:27:9e:
77:6f:ed:ae:0b:3a:d4:f7:26:0c:0e:32:20:39:fd:14:6b:8c:
a9:f4:c5:c3:79:62:38:c3:15:c9:32:a2:25:04:f7:ff:fc:36:
ba:a5:83:3f:72:e5:7e:7b:4d:57:f3:ff:77:6f:c0:b8:74:d4:
f3:2c:09:f7:7d:04:de:2f:e8:00:a1:c6:59:7d:e7:d1:e2:b3:
79:57:d7:a4:b8:83:7c:50:bc:70:6e:6b:62:ee:3d:ed:61:79:
30:90:b2:60:8b:e9:7c:d1:b8:aa:42:96:c9:54:10:da:96:f2:
75:df:14:7b:69:29:86:96:38:1e:55:69:95:57:44:a8:2a:7a:
78:33:dd:59:04:8b:8f:46:70:cc:f2:51:58:0b:f0:d1:18:11:
9e:21:23:bc:a1:da:37:c0:71:3f:3b:99:86:a9:41:f0:40:5b:
c3:5a:c8:ac:fe:d5:7c:18:ca:ea:a4:ea:bd:06:ee:09:9b:f1:
fe:36:99:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:31 2024 by rpki-client on console-fra.rpki-client.org