Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C92C2AFA8C7F11EBA1C82A6DF8AEA228.roa
File: C92C2AFA8C7F11EBA1C82A6DF8AEA228.roa (raw, json)
Hash identifier: HR6vZz8UNooXgJR2I3mWunUdyrufu5DbSliFX4h5zbM=
Subject key identifier: F6:4B:1D:34:39:B3:B6:D3:9F:0F:6C:7C:2F:41:2A:DA:E7:08:DB:D3
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 90
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C92C2AFA8C7F11EBA1C82A6DF8AEA228.roa
Signing time: Wed 24 Mar 2021 09:03:23 +0000
ROA not before: Wed 24 Mar 2021 09:03:18 +0000
ROA not after: Mon 24 Mar 2031 09:03:18 +0000
asID: 12258
IP address blocks: 197.81.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144 (0x90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 09:03:18 2021 GMT
Not After : Mar 24 09:03:18 2031 GMT
Subject: CN=605b005b-4957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:c1:1c:04:b6:0d:00:dd:36:31:c4:bb:a4:
66:12:28:b3:cf:ec:c5:a7:4b:5f:ab:e6:d2:ea:b8:
08:bd:4c:49:e3:58:89:9c:ea:d2:9b:c2:a6:9b:a2:
c7:09:22:af:df:3a:0e:8e:4d:25:0c:58:26:86:b6:
65:20:0c:02:c1:4d:1f:1e:0e:96:04:39:0c:84:f7:
f1:43:c7:d1:a3:4a:5a:db:24:1f:93:96:7c:09:d0:
8f:23:1b:5a:ca:e1:d8:90:c0:bd:06:b8:13:1d:9b:
47:57:24:fc:5d:0a:5a:b7:d2:72:2c:ef:7f:02:f4:
7f:52:a3:f1:88:a7:97:5c:98:ea:db:1a:34:1e:a8:
4a:79:49:df:f6:22:ea:93:df:78:42:e1:dd:0f:31:
f8:74:1c:fd:11:bb:b0:57:e7:b1:a2:9c:22:a4:22:
db:a3:6e:c8:dc:4c:4b:ac:57:41:7d:01:9c:01:20:
ba:f3:8b:4c:78:d3:11:c3:60:3f:5a:cb:ea:9a:cd:
f6:90:e4:28:cb:62:15:d4:36:43:19:01:17:3b:90:
bd:87:89:77:be:a1:fc:08:4c:9a:68:2f:5d:37:42:
27:19:fc:c2:75:ac:d7:1b:1b:a3:fa:ff:54:76:89:
a5:d9:8a:26:0d:11:81:b3:cb:10:95:ce:ae:9a:86:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4B:1D:34:39:B3:B6:D3:9F:0F:6C:7C:2F:41:2A:DA:E7:08:DB:D3
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C92C2AFA8C7F11EBA1C82A6DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.81.157.0/24
Signature Algorithm: sha256WithRSAEncryption
57:89:cd:56:1b:17:d9:26:58:d9:21:b5:3c:9b:e8:33:18:29:
06:52:52:a2:1b:97:46:9d:43:35:74:35:fa:25:b2:62:f8:a3:
69:8d:a7:ed:96:22:31:c3:65:61:7f:7b:ba:32:19:c8:e2:7e:
0d:4e:c4:8b:41:bd:4b:cc:5b:08:2a:31:d7:18:fe:93:93:b0:
2d:de:b6:a6:49:9c:62:d0:6b:42:51:cf:79:65:24:8e:6a:0c:
3d:69:3a:84:1a:0e:82:13:6b:70:de:50:27:3c:74:db:d5:a9:
9f:e4:d9:50:1c:ec:9f:57:96:23:a6:42:e4:d1:01:62:9b:fa:
48:fb:5a:10:c4:38:0a:0f:c3:c7:9c:9b:ff:66:83:80:4f:cc:
b8:18:cd:d4:5f:da:a5:af:3d:16:dd:70:d9:18:a7:74:a2:9d:
e4:4d:a8:3e:b7:72:b1:b0:47:e8:95:f8:37:e4:a8:26:c8:f6:
8b:46:23:c9:be:9b:6d:a5:d3:b7:d7:bf:1e:69:3f:90:10:66:
a5:17:b8:12:b8:18:be:14:00:c3:c8:64:1d:f7:99:da:12:96:
6f:3a:63:6d:fc:8d:99:81:43:61:f0:6f:7d:73:0e:1a:8d:61:
f6:64:d9:c0:24:f6:89:7d:df:36:38:1c:05:00:a5:87:e2:48:
9c:80:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org