Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A187ED468D6411EB9F99E560F8AEA228.roa
File: A187ED468D6411EB9F99E560F8AEA228.roa (raw, json)
Hash identifier: NW48LrXBxKLSwboQXHeBUQdMP0TepK5ahPljtxNk7a8=
Subject key identifier: FA:F6:FC:16:50:24:B5:A1:BA:00:88:B1:91:A8:7F:95:11:8D:49:B6
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: C1
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A187ED468D6411EB9F99E560F8AEA228.roa
Signing time: Thu 25 Mar 2021 12:21:31 +0000
ROA not before: Thu 25 Mar 2021 12:21:25 +0000
ROA not after: Tue 25 Mar 2031 12:21:25 +0000
asID: 10474
IP address blocks: 196.2.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 25 12:21:25 2021 GMT
Not After : Mar 25 12:21:25 2031 GMT
Subject: CN=605c804b-a6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:96:fd:6b:ff:c1:9e:0e:4a:6a:bf:fe:d6:
68:66:71:e4:9b:49:3d:c8:86:14:6c:bf:38:53:3e:
7e:b5:93:62:2b:d0:1b:b8:38:65:b1:a7:97:90:07:
44:74:ff:c3:c3:a3:92:3c:d1:19:fc:6a:19:f8:14:
f7:38:61:0c:83:90:b5:26:b2:ae:98:ed:ee:db:91:
79:44:cc:7f:83:0d:a9:9f:08:ab:39:f7:89:4a:09:
da:dc:b5:f7:ce:a0:66:82:45:78:aa:d7:93:13:a5:
e3:3c:1c:d4:9c:7b:d0:ff:02:bb:c1:2b:99:d9:22:
8a:ec:9b:73:f8:49:06:cf:7e:f1:b8:a4:91:48:74:
b9:6c:fc:50:94:48:47:b3:43:f5:25:1d:25:22:dc:
78:e6:88:22:1f:5f:25:80:3e:bb:85:4b:b5:1b:b2:
eb:fd:be:64:11:8d:db:52:cf:9a:23:05:ca:91:6b:
6f:c1:78:38:8e:be:43:f8:0f:59:85:89:9d:98:39:
33:e6:58:8b:62:e4:89:cf:0f:d1:46:5d:e9:db:77:
7a:dc:ec:7a:5c:4f:5e:ff:fd:a5:91:9e:aa:da:38:
b8:fa:57:89:46:a6:a7:a9:7b:26:80:7b:6b:6c:b2:
74:a1:0d:cc:95:d0:98:58:bc:a0:f4:5b:47:7d:6e:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:FC:16:50:24:B5:A1:BA:00:88:B1:91:A8:7F:95:11:8D:49:B6
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A187ED468D6411EB9F99E560F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.2.37.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:af:d9:d4:9b:7d:7d:cf:7a:9c:a1:dc:8d:0b:e1:29:2c:9e:
66:81:44:d4:c3:c9:7c:11:30:59:0f:62:de:04:0b:ac:58:07:
f9:0d:d6:77:8d:50:77:ed:f6:02:ef:dc:4e:00:94:ce:8c:4d:
23:5d:7a:d6:d8:ca:9c:e4:51:23:b1:30:42:e2:aa:0a:9c:b4:
40:ea:df:f6:fd:db:4f:35:4b:23:01:a3:e0:eb:27:04:05:fb:
a8:31:23:c6:63:64:09:31:47:a7:e5:26:ab:df:e4:fa:cb:6c:
7e:dd:fe:86:24:46:78:f9:9a:4d:33:4c:40:9d:91:2e:74:96:
01:bc:5e:1d:6d:d3:81:14:34:cb:8e:38:b8:bd:be:aa:7f:8a:
e6:81:f8:97:5d:8e:83:ed:37:42:8b:5a:52:d7:45:b6:bc:4e:
a1:b0:25:be:f6:df:69:53:02:ec:03:01:66:e0:a2:17:9a:c5:
e7:65:af:03:6c:bc:05:47:aa:0d:e6:0a:4c:9c:6c:17:b5:6f:
6f:f9:69:60:45:2f:39:18:73:5c:5f:84:d3:28:07:a5:91:33:
39:5e:2b:87:92:4a:6e:a2:99:32:f1:0e:4d:3b:02:46:7c:c3:
85:e3:2d:a1:ec:8b:a7:90:d2:d2:b3:ab:6d:63:af:97:8a:5b:
1f:14:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org