Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C45C8E42BCD711EB99A4670FF8AEA228.roa
File: C45C8E42BCD711EB99A4670FF8AEA228.roa (raw, json)
Hash identifier: 3DBN0e9NJAAwUthZ+cOn+/9uh9+EpwMUvIQXRir4cfs=
Subject key identifier: DB:DB:B1:83:BC:0C:72:D1:A8:5A:99:20:73:DC:98:B2:7C:F4:52:42
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0171
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C45C8E42BCD711EB99A4670FF8AEA228.roa
Signing time: Mon 24 May 2021 21:34:06 +0000
ROA not before: Mon 24 May 2021 21:34:00 +0000
ROA not after: Fri 24 May 2041 21:34:00 +0000
asID: 3741
IP address blocks: 196.22.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 24 21:34:00 2021 GMT
Not After : May 24 21:34:00 2041 GMT
Subject: CN=60ac1bce-0c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:56:99:e3:d4:d4:11:51:28:8c:09:7c:f6:
6f:8c:44:b6:c4:88:c5:e7:04:ac:57:c2:1f:bd:e8:
af:31:82:ba:af:88:39:50:c9:a3:9e:26:16:c4:26:
30:9d:90:5d:17:66:d8:0e:a1:04:84:03:5c:7c:37:
3c:e9:23:bc:bd:0c:fa:2a:04:43:ed:ba:ec:91:30:
69:de:29:b2:00:0c:cb:0a:1f:34:34:75:63:79:56:
8f:9d:3a:7b:b0:3c:7f:5e:4c:18:9a:19:11:a3:07:
f3:c2:ca:ec:52:70:3a:57:de:fe:54:61:b7:39:b1:
f3:ea:b0:dc:cf:e1:75:06:09:81:59:52:9b:09:6f:
2a:a9:1a:cb:7f:d0:45:cf:b7:03:5e:b0:25:fc:c7:
dd:06:3f:7f:db:b5:cf:36:3d:cf:b9:a9:32:ce:bd:
33:1e:69:6c:46:19:40:c5:64:08:71:d5:61:bc:7f:
b4:32:c2:69:d8:67:d7:3b:d9:0d:c9:0d:0e:0e:09:
1c:eb:1b:dc:f0:56:c2:78:6b:2b:8c:02:c7:46:6a:
51:c5:d7:50:af:e8:aa:ad:7a:6a:61:63:80:1d:07:
48:4e:5c:47:26:17:69:4f:0a:41:fb:c1:37:e5:69:
fe:75:a6:e9:38:50:a4:1d:9c:98:88:a3:d9:26:29:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DB:B1:83:BC:0C:72:D1:A8:5A:99:20:73:DC:98:B2:7C:F4:52:42
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C45C8E42BCD711EB99A4670FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.22.160.0/19
Signature Algorithm: sha256WithRSAEncryption
31:ea:70:be:6f:aa:b6:ea:c7:c0:6a:5f:5a:31:9b:15:1d:89:
fe:3f:45:87:58:c4:c3:b0:d7:1e:47:ac:bc:fe:0b:67:fe:7c:
9a:b0:b9:c7:bb:17:2a:31:53:f2:b6:8c:e0:28:e8:a7:61:e6:
57:86:9a:34:91:16:e8:1d:17:3a:69:ee:ff:66:ba:9f:b4:4d:
d8:f9:f2:38:fb:1b:9e:54:67:1f:fc:ad:9f:cc:92:d9:b5:b2:
fb:53:a6:90:41:78:65:d2:3e:78:08:3f:b2:0c:70:8f:25:24:
21:9a:99:a0:21:9b:8f:2d:3d:a0:ac:b1:f4:7b:64:c5:27:c9:
40:91:79:4e:8b:3d:18:c8:ae:b4:71:1e:ed:6f:c4:8c:8a:a7:
b1:3c:84:9d:c8:a5:d1:e3:28:7c:d0:45:81:ab:51:63:6f:8a:
b4:95:88:d9:96:9c:23:39:35:b4:b9:c7:96:be:65:f6:02:6a:
2d:81:3d:ba:81:2c:66:19:7a:34:f6:13:3f:a6:29:7b:37:7c:
80:f3:b7:ad:26:cb:31:2c:52:88:64:39:a0:03:19:44:b0:5d:
bd:60:44:d8:8f:a6:15:9a:ce:57:3c:13:d0:1e:27:32:99:c3:
8b:ed:3b:d8:57:1a:49:19:4b:a5:4d:7b:2a:0b:20:d7:82:fa:
f0:3e:dd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:56 2024 by rpki-client on console-ams.rpki-client.org