Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F0203DA68C6411EBBE6E7E4FF8AEA228.roa
File: F0203DA68C6411EBBE6E7E4FF8AEA228.roa (raw, json)
Hash identifier: Pc93Wz2tR73wthac6RvnQtfC4VMU/Yk7YRiBaa0upHw=
Subject key identifier: B3:C6:21:F1:54:F1:F4:8B:AE:02:5C:04:76:4C:CF:61:9A:A2:D9:F2
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 57
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F0203DA68C6411EBBE6E7E4FF8AEA228.roa
Signing time: Wed 24 Mar 2021 05:51:12 +0000
ROA not before: Wed 24 Mar 2021 05:51:06 +0000
ROA not after: Mon 24 Mar 2031 05:51:06 +0000
asID: 10474
IP address blocks: 196.28.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 05:51:06 2021 GMT
Not After : Mar 24 05:51:06 2031 GMT
Subject: CN=605ad350-4e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f3:35:18:73:d3:6b:2b:b7:47:f2:3a:3b:74:
1e:08:01:1c:99:43:6a:cd:1f:05:2c:47:d1:fe:cc:
8a:53:f3:23:ee:d5:5d:35:3a:2c:47:a9:ab:3e:03:
eb:8f:d5:00:c0:12:31:99:72:d7:1a:78:f3:f8:88:
2c:1b:be:c1:ef:70:21:84:95:84:88:f8:d9:b4:0b:
fd:a6:59:8b:4d:2c:05:4f:ea:52:43:f0:af:eb:48:
0f:d3:ae:18:95:05:57:b2:0f:7b:52:a8:eb:75:bc:
93:2f:0c:a0:55:13:d0:91:57:ba:4a:c9:f1:2b:22:
df:69:46:b2:a9:ea:bb:bc:68:a5:25:c7:76:c1:9a:
70:be:57:0b:ce:f6:29:7b:b4:d1:bc:8d:8f:ac:56:
27:5b:cf:91:2f:0f:06:31:a1:9a:4f:ff:79:ed:5e:
be:f6:68:9c:b6:81:42:e8:b6:f9:33:fe:c7:a6:83:
43:89:83:84:64:64:a7:2c:1f:2f:71:c6:a5:70:b2:
cd:7e:2e:a4:4a:28:16:77:6b:8c:ee:1a:fd:25:75:
14:b8:48:af:67:7d:94:3a:e3:d3:a1:d5:ff:2d:71:
32:10:28:a3:01:4b:82:64:2a:52:e7:34:00:9d:95:
6e:13:c8:81:70:c2:07:ab:25:82:f2:ab:63:03:82:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C6:21:F1:54:F1:F4:8B:AE:02:5C:04:76:4C:CF:61:9A:A2:D9:F2
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F0203DA68C6411EBBE6E7E4FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.28.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2c:57:ff:5c:b6:df:f6:50:47:87:e7:d8:dc:fd:3a:a4:f5:bc:
d0:89:b2:95:73:61:f8:81:f4:f1:0f:d7:5d:67:b1:3b:97:da:
29:9b:da:17:5a:88:84:bd:24:4d:b3:25:14:93:ff:54:d2:3f:
a7:81:18:26:b0:a0:00:cf:8a:98:c8:d4:a9:a7:3f:4a:32:e6:
7c:8e:f0:75:8b:5b:ca:8d:3a:95:67:27:77:b1:b0:ca:4e:c8:
3d:17:a7:07:a2:4c:3a:01:c0:40:7d:8d:ab:4d:14:5a:6c:3e:
bf:af:14:ae:99:cd:8c:92:d1:99:1e:af:0f:d4:f3:1f:86:cc:
14:14:7a:d5:24:7f:4a:dc:be:d8:1c:e3:67:f4:48:56:dd:12:
e6:47:65:78:c0:d4:5a:82:d7:54:b4:82:12:0f:d5:84:24:71:
f6:6a:6f:c1:24:49:98:c3:d9:1a:72:e2:3b:c6:3e:9a:cb:87:
f2:a0:3c:b7:6a:b5:a6:dd:af:09:17:68:23:7f:8a:68:7a:12:
0d:e4:d0:72:59:ce:ef:1a:61:91:74:91:90:a9:0d:6f:68:80:
25:96:8d:76:28:62:1b:f5:67:8b:86:fb:54:0f:66:15:f6:a9:
e5:7a:18:57:12:3d:eb:a2:b4:cd:76:11:8c:3b:19:07:ac:96:
2c:2c:c1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org