Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C9D3C02CBCDA11EBA00CD813F8AEA228.roa
File: C9D3C02CBCDA11EBA00CD813F8AEA228.roa (raw, json)
Hash identifier: 6dcWEZ+0trKPt1tUIdgPa1DP7pYEodKrorlAuYxA7Fc=
Subject key identifier: 88:A7:DF:3C:67:B1:F7:A2:6C:FE:85:EA:60:02:E6:8A:8C:F5:90:E6
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 017F
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C9D3C02CBCDA11EBA00CD813F8AEA228.roa
Signing time: Mon 24 May 2021 21:55:44 +0000
ROA not before: Mon 24 May 2021 21:55:37 +0000
ROA not after: Sat 24 May 2031 21:55:37 +0000
asID: 3741
IP address blocks: 196.44.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 24 21:55:37 2021 GMT
Not After : May 24 21:55:37 2031 GMT
Subject: CN=60ac20e0-0f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:49:a1:fc:fa:1c:69:34:ff:1d:da:2b:2a:
2f:b4:7a:24:d7:ac:96:2f:62:1b:4e:18:05:1d:e2:
96:c4:c8:91:26:93:c0:04:9f:05:32:91:96:f7:e9:
d6:b8:07:9f:8e:8e:5b:88:d3:ba:ed:85:8c:9c:5e:
ea:db:ba:bc:f4:ae:ec:3a:8a:3c:33:3d:90:d4:e2:
cc:9a:75:53:e3:bb:9b:ea:01:26:95:ff:df:18:79:
e9:fe:82:bf:68:27:7e:f3:b6:03:8a:2e:8e:9f:2e:
0e:b0:25:3a:f9:2a:a6:74:b1:ac:f5:22:02:e9:0e:
0c:05:a1:98:97:0e:03:e5:8d:95:90:af:3f:bc:72:
76:5a:b4:2e:e4:61:c5:6d:f2:40:70:d3:56:5e:b7:
82:dd:44:46:04:b6:fd:63:9c:ca:2f:ac:4a:21:13:
a0:84:35:bc:7e:d7:56:4c:fc:c9:3b:93:9e:1c:2c:
c5:06:13:a0:53:2d:bf:a8:f4:41:92:6f:52:32:17:
ca:36:f5:ce:a6:f5:c1:97:31:50:bc:f5:64:17:27:
12:04:82:b5:0e:01:02:5d:8c:7e:8c:71:e1:6a:6b:
5b:be:28:42:7b:56:30:d0:3f:1e:d7:fd:33:42:d6:
05:8c:ea:72:49:8e:de:0f:99:78:b9:e1:c6:c1:0d:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:DF:3C:67:B1:F7:A2:6C:FE:85:EA:60:02:E6:8A:8C:F5:90:E6
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/C9D3C02CBCDA11EBA00CD813F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.192.0/20
Signature Algorithm: sha256WithRSAEncryption
10:8d:a0:71:cd:cc:e9:19:78:16:da:ee:0e:7d:1e:43:ce:db:
54:5e:ee:5d:f7:d4:b7:f3:7f:3b:db:84:ed:f6:5c:2d:89:8e:
46:05:b3:49:3a:04:03:dd:cc:c1:9f:e9:b3:fc:24:d9:04:23:
23:f5:46:75:d5:f8:b4:d5:e9:62:95:76:d5:8e:b0:ad:61:29:
c0:fe:43:57:82:46:5e:eb:51:0b:1c:b2:cd:2a:56:2e:c9:bf:
b0:5c:bd:da:bb:1d:a4:e8:7d:55:82:87:c8:c2:55:55:3e:d8:
ff:24:31:05:a8:22:d4:8b:11:71:c8:4e:c7:55:f5:ab:ea:ab:
fe:e4:e8:21:91:17:47:62:d5:40:5b:28:02:f1:41:ce:be:fd:
30:f8:cd:fd:fb:5a:5a:12:c7:05:3d:e0:05:e3:40:94:e8:83:
b4:cf:fb:39:8e:15:69:3e:94:b6:49:d3:5d:65:e1:c5:6a:f4:
d0:3f:c5:87:06:cf:dc:d8:62:cb:ed:c5:a4:40:71:a1:00:4f:
94:bb:50:01:cc:41:6b:cd:d5:8f:83:c1:7c:d5:9c:b6:44:8e:
f5:05:f6:64:ad:01:5d:23:d3:49:2c:4f:40:b5:bb:19:92:d4:
37:19:3d:ac:36:3d:60:73:af:d9:d4:ef:f1:e0:63:8c:16:b4:
83:2a:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:56 2024 by rpki-client on console-ams.rpki-client.org