Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C00BA4F88C8111EBA610EF6FF8AEA228.roa
File: C00BA4F88C8111EBA610EF6FF8AEA228.roa (raw, json)
Hash identifier: ulbbi8GigzdKdHKsz0X0cz7HhctdaZMrwuf7vzGFzx4=
Subject key identifier: FC:E1:CD:CF:D7:1B:34:37:E6:1A:17:C7:C5:EB:56:08:CB:43:A3:76
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 9F
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C00BA4F88C8111EBA610EF6FF8AEA228.roa
Signing time: Wed 24 Mar 2021 09:17:27 +0000
ROA not before: Wed 24 Mar 2021 09:17:22 +0000
ROA not after: Mon 24 Mar 2031 09:17:22 +0000
asID: 12258
IP address blocks: 196.28.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 09:17:22 2021 GMT
Not After : Mar 24 09:17:22 2031 GMT
Subject: CN=605b03a6-bf99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:a1:8f:f1:1e:ce:da:20:87:97:81:d7:b7:
87:d7:9e:79:fe:04:e7:da:00:fe:cb:e3:d1:05:2a:
ed:1b:96:4f:8e:24:9b:89:a8:7e:cf:9d:54:a8:e8:
d6:ab:94:26:55:e1:67:61:bd:89:82:c5:9a:7b:0c:
2c:bb:34:56:4c:7b:2a:16:a9:ae:1d:29:cb:31:f9:
80:f1:ce:65:09:27:bd:ed:90:bb:3c:f8:19:4e:1d:
0f:4c:cd:75:cb:f3:20:2c:c8:3d:5d:d3:c4:84:c0:
c3:6d:23:35:26:c5:ae:00:27:66:eb:e9:f8:52:a1:
28:1d:62:9a:d5:e1:e6:8e:a1:7b:5f:af:69:68:df:
9f:f7:0d:0e:a3:c2:57:27:55:72:81:60:13:14:1c:
5c:8d:88:3c:6c:fb:55:36:f3:62:a4:79:d2:fa:3f:
ee:64:f7:4c:af:5d:60:9c:82:6c:13:16:27:ca:d1:
05:53:22:f7:a3:2c:7c:26:a2:b2:d8:76:c0:25:1c:
79:b2:9b:3c:44:c2:a0:e8:82:03:48:39:0d:63:ff:
58:0b:38:92:39:a7:57:6d:47:92:8a:b8:ae:99:d1:
93:5a:7d:9a:89:fd:ee:fc:c9:c2:fd:ff:70:1c:db:
00:52:72:7d:07:a5:be:96:5f:a3:69:c5:16:62:2e:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:CD:CF:D7:1B:34:37:E6:1A:17:C7:C5:EB:56:08:CB:43:A3:76
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C00BA4F88C8111EBA610EF6FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.28.93.0/24
Signature Algorithm: sha256WithRSAEncryption
43:2f:59:5d:84:b5:8a:c7:f7:b0:60:e6:3e:fd:44:87:b9:86:
d1:8c:a5:e8:77:85:a6:ba:99:29:49:17:e6:8e:d5:59:0f:e4:
11:83:4f:69:c7:6b:0c:c4:17:74:da:e8:5b:ef:96:ef:b7:91:
af:ac:77:2a:df:4c:c0:f5:92:69:1c:99:17:b1:49:7a:72:bc:
a5:1c:a9:06:ab:64:e3:64:e1:5a:9f:01:c0:23:2f:f2:38:33:
ba:a5:52:bc:28:16:39:61:35:14:c9:b2:b5:1f:5a:cb:e1:47:
2d:df:6c:c2:c0:25:b0:e1:db:d0:b3:a6:df:9e:5d:8d:d7:30:
f1:c0:8f:4b:1f:ab:dd:23:e7:3c:19:6b:47:21:2e:d8:61:c8:
ed:72:6f:6e:8b:f5:83:59:33:8d:68:a1:38:7f:ce:46:1d:11:
01:d8:6b:6d:c0:ea:71:c0:9d:80:6b:e3:5f:ba:fc:40:db:fe:
a4:42:32:f7:fb:55:be:e1:c8:91:37:ff:20:4c:c8:39:61:76:
dd:3f:8b:c6:0f:4c:50:c3:bd:51:aa:57:68:4c:db:ba:a6:fa:
28:1e:2e:9f:4b:f0:e1:15:bb:c0:50:1c:06:58:42:72:8b:09:
c5:a6:94:5c:e7:64:b9:84:8b:e2:50:bf:35:5e:0d:49:2b:5c:
2e:8e:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:56 2024 by rpki-client on console-ams.rpki-client.org