Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A3286A988C6C11EBAFE90659F8AEA228.roa
File: A3286A988C6C11EBAFE90659F8AEA228.roa (raw, json)
Hash identifier: Bl9nXMgb4/ZnXZgw2DH18NooREU0GAfyjyiFtLfEitQ=
Subject key identifier: 53:3A:01:5E:F4:8C:AD:9F:DB:0D:55:06:D4:30:7B:78:39:35:F1:43
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 7A
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A3286A988C6C11EBAFE90659F8AEA228.roa
Signing time: Wed 24 Mar 2021 06:46:19 +0000
ROA not before: Wed 24 Mar 2021 06:46:12 +0000
ROA not after: Mon 24 Mar 2031 06:46:12 +0000
asID: 3741
IP address blocks: 197.84.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 06:46:12 2021 GMT
Not After : Mar 24 06:46:12 2031 GMT
Subject: CN=605ae03b-bd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:ad:fe:c0:69:bf:46:18:88:2d:82:be:1f:
f9:ca:26:99:ac:2b:d3:b0:1f:a3:82:f8:f9:db:e7:
41:80:f9:6b:24:7b:c4:bc:e0:d8:b8:4f:34:5a:6a:
9a:b4:05:cf:f9:23:55:39:3f:49:fb:32:8e:3a:7c:
90:c3:1f:de:63:67:a2:bc:00:06:00:23:ee:57:90:
bc:c5:14:6b:f1:a6:3d:dc:ca:66:d8:46:88:e4:e6:
77:9d:cb:8b:8d:b5:e5:5d:fd:04:f9:06:7a:c6:6f:
a1:70:98:48:98:f2:db:3b:25:32:50:89:df:ed:14:
ff:13:c0:b0:8a:7f:98:4a:28:c5:09:e5:b8:ea:6b:
79:2c:50:a6:d5:07:c0:ff:1a:56:03:ac:c6:95:f0:
00:6d:c1:a8:9f:2d:1f:20:6e:43:b7:e9:69:10:cd:
da:a4:12:b0:57:3b:05:64:fb:72:11:e3:4e:6d:6b:
b0:19:3a:f2:95:a6:7f:19:8c:0d:54:8f:a4:bb:5f:
86:f4:51:5d:73:1b:4f:4b:54:5b:ae:66:27:3a:55:
45:36:6f:83:20:cf:09:ef:c7:a9:d9:e3:ab:58:07:
03:f6:6f:a8:37:d1:ca:27:8e:b4:01:03:f8:02:00:
0a:3d:c0:9b:47:44:d2:e0:7c:a9:51:ac:63:07:c8:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3A:01:5E:F4:8C:AD:9F:DB:0D:55:06:D4:30:7B:78:39:35:F1:43
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A3286A988C6C11EBAFE90659F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.84.143.0/24
Signature Algorithm: sha256WithRSAEncryption
16:db:66:e9:56:98:0d:48:b0:df:18:0e:fa:fb:67:0b:30:36:
8c:08:f0:dd:62:f2:85:97:90:7d:b5:af:37:bf:ae:ec:aa:6c:
ad:de:f5:29:45:4f:24:bf:7b:82:e2:b3:5b:72:87:83:7b:9d:
cd:ed:6d:3a:63:e8:96:bd:96:a1:89:e5:6a:9f:8e:86:22:e3:
64:75:f3:61:f3:fd:ad:46:f9:9b:fa:6c:30:b9:eb:b0:07:69:
dc:5d:fe:8d:85:dd:0c:99:52:06:79:b6:73:d9:6d:dc:e7:e2:
fb:48:db:66:2a:32:8a:9f:f2:28:d5:78:f3:d5:8b:37:ab:92:
50:f8:cb:ec:70:08:82:87:75:a5:44:10:99:36:be:b0:42:49:
64:34:0f:b6:3d:a8:4b:ee:a0:ad:3b:99:c8:bb:73:e5:3c:9e:
12:20:b7:82:a3:ce:88:4f:77:0d:55:d6:88:c8:8c:e5:b8:e0:
63:e3:7a:60:55:d2:51:b7:43:d2:42:bd:f4:c1:8c:be:d2:b0:
13:9a:bb:5f:a2:2f:ae:35:4d:fa:cf:f2:99:9f:f8:5a:aa:ee:
a6:20:17:2a:e1:90:ab:2a:60:9d:2b:65:c9:60:24:c6:0c:64:
3e:8f:4f:83:c7:ec:3a:35:fd:f7:88:21:de:79:e2:f7:22:fc:
d9:f1:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:10:23 2024 by rpki-client on console-ams.rpki-client.org