Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C724A14A8C5911EB8BD94441F8AEA228.roa
File: C724A14A8C5911EB8BD94441F8AEA228.roa (raw, json)
Hash identifier: qvDU2lxe3iLPaXnDArL71+mu+elMpwBxp9Z7OTlxbCA=
Subject key identifier: 4D:BB:2A:12:10:EE:2D:1E:A2:8E:B3:62:4B:57:43:05:51:CB:62:01
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 2E
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C724A14A8C5911EB8BD94441F8AEA228.roa
Signing time: Wed 24 Mar 2021 04:31:19 +0000
ROA not before: Wed 24 Mar 2021 04:31:13 +0000
ROA not after: Mon 24 Mar 2031 04:31:13 +0000
asID: 3741
IP address blocks: 196.212.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 04:31:13 2021 GMT
Not After : Mar 24 04:31:13 2031 GMT
Subject: CN=605ac096-7c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:a2:ca:ae:95:21:39:95:38:d9:47:5c:21:
91:75:40:63:ce:b1:b5:a7:de:d4:49:47:37:65:37:
be:16:98:0a:ee:cb:94:79:31:30:f9:d6:35:b7:45:
b3:9a:b1:c6:36:24:22:45:29:82:5f:e2:1e:1b:f8:
54:d9:f7:47:dd:fd:3a:13:00:5e:0f:af:48:e2:b3:
7c:47:5d:bf:5f:19:f4:a4:e8:dd:00:33:ae:e0:5b:
d2:cd:c1:28:53:39:ad:fc:2c:27:e5:e8:e5:b4:b9:
df:14:43:d8:7f:a3:aa:30:b2:37:e8:9e:28:9a:3e:
d5:0f:0e:8d:33:54:fa:d0:d4:68:01:fa:66:23:8a:
66:ed:d8:7a:b5:7d:57:c3:2d:37:51:e5:ba:41:a7:
91:ba:b3:74:2b:5d:3c:1f:b2:41:89:31:91:7f:30:
eb:b8:15:b3:e3:5b:ac:0b:b1:0d:5b:6f:d4:18:8a:
f3:5b:f9:e3:df:0b:05:e2:ea:31:83:92:ba:4e:2b:
09:f4:08:f2:3c:0d:1c:73:c0:8e:a0:08:4f:bb:7f:
87:d9:8c:93:31:ed:d9:75:e3:76:50:5f:f9:37:de:
5a:b6:cb:04:de:d3:28:5a:9a:b7:06:cd:d9:7e:63:
51:68:58:a4:a4:65:2c:95:93:6e:ad:d0:10:f6:02:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:2A:12:10:EE:2D:1E:A2:8E:B3:62:4B:57:43:05:51:CB:62:01
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C724A14A8C5911EB8BD94441F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.212.0.0/14
Signature Algorithm: sha256WithRSAEncryption
12:17:cf:8d:b0:ed:88:ed:03:51:44:f9:51:78:ba:a0:04:2c:
07:ff:34:43:ad:4c:8d:e4:b2:d4:b6:72:69:5f:11:05:51:fe:
95:0d:c6:eb:31:59:7e:0f:f7:d6:34:89:d1:d8:72:81:e0:c3:
b4:9c:ec:50:e3:db:a8:a5:44:d4:b4:e2:5b:40:ac:42:52:ca:
7e:02:3a:19:02:ad:15:19:d6:52:f6:f1:ea:ba:fa:a8:cb:dd:
50:80:79:94:cf:df:25:3f:a4:56:97:8d:0c:39:59:c0:be:a8:
c3:f4:7a:a7:03:4b:bc:4e:8e:bc:9a:0f:ba:97:17:da:be:8e:
9a:73:cb:72:0b:ac:26:14:cc:46:cd:d9:aa:f3:95:52:a3:0c:
7f:32:1d:ca:b9:5d:7d:1f:ae:bd:e9:99:32:e3:53:bb:6a:ec:
bd:52:a5:6b:45:95:30:a2:9d:94:1f:89:da:da:86:9d:2a:d1:
83:4a:9d:7f:d3:2f:83:a4:1e:c1:88:63:f7:62:3a:d6:90:05:
5a:6f:5b:b2:87:d0:b2:03:df:fa:ef:6a:97:ba:4f:31:b5:81:
aa:2e:a4:dc:14:93:32:36:05:6b:04:f6:52:35:60:c4:4a:88:
76:41:5f:18:f7:f1:cd:70:3e:13:cb:3e:18:21:4f:3d:30:a7:
7f:19:1b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org