Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A860FE78377F11EFB569CB4E762E951A.roa
File: A860FE78377F11EFB569CB4E762E951A.roa (raw, json)
Hash identifier: or5BjBrGnQT+SWhp/pj+c3PEephWzNUUICEML20CpeE=
Subject key identifier: ED:64:36:60:C4:68:B3:3D:58:3B:90:8F:9C:E5:48:22:05:7E:7A:CE
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0665
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A860FE78377F11EFB569CB4E762E951A.roa
Signing time: Mon 01 Jul 2024 07:58:10 +0000
ROA not before: Mon 01 Jul 2024 07:58:06 +0000
ROA not after: Sun 31 Dec 2034 07:58:06 +0000
asID: 20011
IP address blocks: 197.87.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637 (0x665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Jul 1 07:58:06 2024 GMT
Not After : Dec 31 07:58:06 2034 GMT
Subject: CN=66826192-2e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:7e:1a:76:ba:eb:39:7e:1e:c6:7a:bc:79:
c7:8b:66:f3:65:e2:d6:95:b9:d7:c6:d1:dd:2a:ec:
ec:66:c2:16:ad:97:48:41:d6:5e:5a:ae:39:7b:47:
fe:9c:27:64:1e:72:e9:fe:57:e2:39:b1:9d:34:6a:
47:d6:5b:c1:af:73:37:78:56:01:b5:e8:35:aa:bb:
bc:d6:b0:fb:82:4d:13:db:91:79:56:3e:a1:33:25:
5e:de:46:4a:14:d1:7a:52:c7:6b:d2:43:7b:c5:4f:
64:bc:68:da:3d:da:dd:66:f9:89:42:98:35:8a:1a:
81:97:e5:48:00:e0:f2:44:36:b2:4e:26:50:02:26:
d8:2f:11:72:c6:03:02:33:5c:8d:c2:a8:83:bd:9c:
33:b7:1d:2b:a3:21:c4:55:ff:80:bd:f1:83:92:b2:
8b:6e:ef:94:26:38:07:4d:2d:af:ea:d4:80:ea:d3:
cb:ec:d4:6b:5c:d6:e3:d3:bb:7f:26:b4:ec:3f:ff:
9f:1e:b9:85:6f:68:44:81:52:83:79:b9:ff:7d:cf:
4b:67:59:5f:63:93:8f:7b:25:85:cb:a5:8a:51:4a:
cc:33:30:5d:4f:01:c9:c1:c5:c1:2d:a0:77:8c:ef:
61:5a:82:f1:b2:17:9c:54:69:69:a5:20:2a:e1:91:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:36:60:C4:68:B3:3D:58:3B:90:8F:9C:E5:48:22:05:7E:7A:CE
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A860FE78377F11EFB569CB4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.87.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:3e:b8:22:16:10:5a:df:e5:44:bb:dc:66:aa:e3:07:cc:f3:
00:e5:51:94:7a:71:34:7d:db:b1:d9:e3:fe:0e:82:40:c7:0a:
b2:31:da:1b:36:8a:2c:24:6a:70:bc:12:f1:e5:00:db:cb:2c:
28:e5:fd:83:65:bf:ed:54:e6:f6:47:88:ab:69:4b:46:91:61:
81:72:56:54:e4:0d:71:f2:32:b9:d1:6f:96:55:a9:96:35:06:
1b:ef:e8:90:b8:ae:00:48:9a:f6:e7:e2:2d:e0:70:cf:22:18:
c8:b1:cd:fb:7c:5a:a8:88:ab:35:9a:78:9a:6f:6f:ea:83:ae:
fb:62:a6:72:8c:63:d8:8e:64:6c:01:fd:c9:05:a5:79:de:df:
5a:84:dd:9a:32:63:5b:54:8a:67:73:8e:14:bb:eb:ad:98:84:
4c:6e:cd:bd:91:bc:68:3d:74:f6:fc:72:b4:cc:2c:e7:6f:56:
2d:04:4b:6a:db:5d:35:18:73:01:62:15:55:21:e0:24:af:1b:
a3:a1:16:f5:42:be:aa:de:ed:ba:6f:0f:87:9d:c0:15:86:92:
d3:e3:31:ef:a3:6a:8a:06:c8:73:f0:c0:a7:6e:7d:5e:4c:33:
3d:32:90:24:8f:cb:21:77:20:64:98:6a:29:55:7c:16:79:cc:
ce:cb:39:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org