Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A885B8229B6E11EB840F3C5EF8AEA228.roa
File: A885B8229B6E11EB840F3C5EF8AEA228.roa (raw, json)
Hash identifier: UOWFrZKT7n/FyD1GLkVIhcwm3SAmOYyKnuP9CfzPQDY=
Subject key identifier: 90:B0:B5:C9:D2:F3:EA:CB:E8:26:E5:1E:5F:AD:4B:86:7F:2E:B6:04
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: F4
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A885B8229B6E11EB840F3C5EF8AEA228.roa
Signing time: Mon 12 Apr 2021 09:08:34 +0000
ROA not before: Mon 12 Apr 2021 09:08:27 +0000
ROA not after: Wed 30 Apr 2031 09:08:27 +0000
asID: 3741
IP address blocks: 196.12.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Apr 12 09:08:27 2021 GMT
Not After : Apr 30 09:08:27 2031 GMT
Subject: CN=60740e12-6645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:66:48:22:52:94:13:63:1c:b0:b5:21:73:
49:cb:f4:66:b0:56:f8:0c:37:07:16:ce:e0:1f:db:
8f:0a:fe:2a:c2:20:d8:7c:08:03:2e:c1:5b:41:a0:
76:12:99:fe:83:44:14:e8:cf:e8:51:f9:f3:68:1b:
46:88:cb:34:ea:93:5e:96:d7:fa:36:d7:3d:0a:63:
57:2a:91:d1:c1:73:c4:7e:29:62:76:ff:33:f0:ce:
a6:c9:56:fd:10:a7:28:35:ee:25:26:5c:66:28:f7:
90:74:fe:a7:80:45:18:e9:62:6b:8b:5a:74:b6:4d:
30:34:56:df:87:a1:11:10:a4:4f:08:96:a5:e6:cf:
e9:f0:49:71:de:91:a7:8e:18:e7:e7:0a:76:5b:fa:
1d:3d:68:5d:51:62:19:18:f1:e8:ec:95:9a:11:50:
4a:eb:cb:ac:42:a7:b6:b5:bc:d4:5f:93:2f:ee:8c:
16:1c:8c:47:76:bc:0d:ca:59:23:c7:fb:13:75:b4:
db:20:8a:74:8b:10:6b:6c:70:e6:4f:5e:1a:5d:ff:
a5:0c:a5:a3:c1:28:96:31:ca:20:c9:ce:48:79:05:
20:75:92:c1:fe:d2:db:d0:eb:64:d1:38:47:bc:4c:
33:0e:45:e9:d0:19:0c:5d:01:c2:fc:56:ae:57:c7:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B0:B5:C9:D2:F3:EA:CB:E8:26:E5:1E:5F:AD:4B:86:7F:2E:B6:04
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/A885B8229B6E11EB840F3C5EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.12.16.0/20
Signature Algorithm: sha256WithRSAEncryption
ca:c2:d5:bb:21:2d:24:53:6e:85:a4:7f:f6:c3:c9:18:48:25:
8a:c0:b9:98:27:b0:00:b4:20:68:36:84:be:47:99:ac:d7:47:
bf:63:04:20:31:78:be:50:ed:9c:97:9e:01:6d:1e:d2:29:8e:
7f:f2:a3:52:d6:6a:4b:5b:d5:ac:e9:d6:24:21:51:ac:28:ea:
b2:db:cd:bd:3e:9f:d0:f1:b5:75:23:b4:d1:ef:cb:87:c6:c9:
d5:08:3d:e0:52:95:e5:14:62:4a:c3:74:0c:02:fc:41:64:ed:
c1:fa:de:cd:58:d4:25:4e:0d:1c:0a:ee:6f:6b:ec:b1:80:74:
30:a9:4a:1a:2d:e1:cb:92:dc:ce:27:74:58:d1:b4:f8:be:29:
d4:94:de:dd:18:ce:88:dd:1e:50:88:0d:db:4d:fd:2d:5e:00:
2b:af:18:de:a2:33:05:e2:2a:c8:f4:76:11:ce:f7:c8:4a:1d:
24:11:1a:e1:e3:26:df:2f:62:91:79:f0:66:1e:32:3c:66:60:
4f:34:4d:c2:ae:ac:27:33:ac:e0:ea:44:41:7b:51:0b:e7:c2:
42:e2:f9:dc:30:83:95:27:8a:54:22:f7:37:53:1b:0e:eb:dd:
09:6f:e9:ad:b4:f5:80:51:3e:56:b9:94:94:c8:b2:c5:8d:b5:
c9:ad:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org