Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F34BEB348D5311EB9075BE4EF8AEA228.roa
File: F34BEB348D5311EB9075BE4EF8AEA228.roa (raw, json)
Hash identifier: mBXWhzrm+1UEzB4nKDBTDbfWA8dA4/maQsw0MEUqJQE=
Subject key identifier: D6:84:28:A1:11:35:D7:13:1A:D1:56:5B:C4:A9:38:48:1E:5A:14:93
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: A4
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F34BEB348D5311EB9075BE4EF8AEA228.roa
Signing time: Thu 25 Mar 2021 10:22:07 +0000
ROA not before: Thu 25 Mar 2021 10:22:00 +0000
ROA not after: Tue 25 Mar 2031 10:22:00 +0000
asID: 12258
IP address blocks: 196.41.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 25 10:22:00 2021 GMT
Not After : Mar 25 10:22:00 2031 GMT
Subject: CN=605c644f-7914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:5d:00:59:ff:dc:3c:af:0c:95:31:64:0e:
e1:e7:d8:35:34:bd:e4:37:30:93:f5:c7:00:d3:70:
0c:ba:53:96:f1:51:c5:8a:60:07:5a:50:5d:2c:6d:
11:f4:f2:03:da:10:5b:f7:29:d0:25:dc:a0:e1:e6:
c7:d5:a9:f6:48:52:bf:f9:a1:57:1e:58:15:a2:ca:
c3:57:1d:fe:1b:cd:1f:b5:52:89:c2:02:e3:2d:65:
c6:43:89:e8:01:bc:47:7c:34:6a:e0:df:c5:31:f4:
42:59:4b:32:c4:2d:aa:c7:c1:d7:92:2b:bf:6d:fb:
3c:b9:ea:50:81:1a:21:0d:ab:a7:6f:c0:73:ca:c6:
21:fe:67:e4:50:73:e3:04:9c:29:76:c1:95:e6:a2:
64:11:34:c2:f6:a9:82:63:51:a8:83:8a:82:d4:89:
b2:29:a1:af:4d:d4:a7:20:65:2c:5e:ff:30:48:15:
29:45:f0:42:fa:43:4e:48:19:94:8c:23:fb:12:90:
1e:5d:6c:92:55:03:36:36:b6:e1:ab:e1:ea:0a:85:
85:a0:f8:65:95:40:fa:c8:ad:9d:d1:c6:d5:7f:d6:
30:6f:85:61:96:ea:2a:53:b3:08:43:06:af:8b:ee:
95:d2:cb:b9:e5:04:ca:dc:63:60:bb:6d:3f:f5:bd:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:84:28:A1:11:35:D7:13:1A:D1:56:5B:C4:A9:38:48:1E:5A:14:93
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F34BEB348D5311EB9075BE4EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.41.128.0/19
Signature Algorithm: sha256WithRSAEncryption
dd:c0:77:48:02:20:31:bd:bc:8c:02:29:fc:db:69:3c:71:75:
94:35:4b:27:18:0b:10:47:d0:cf:ac:8a:8c:a9:aa:e8:cc:f6:
dd:a1:3a:29:7f:30:75:fd:50:cf:e0:ad:95:bf:4f:fe:4a:4e:
bc:81:2e:aa:33:a7:ed:b4:1b:62:88:66:95:9b:c5:01:4f:7c:
aa:58:dd:bc:84:25:5e:ab:02:e5:2d:3e:0c:15:68:e0:75:a4:
13:4d:70:07:4f:d8:61:55:31:2f:cc:67:40:28:1d:db:6e:f6:
37:0b:9d:df:02:b4:10:85:0a:9f:83:1a:7b:6c:29:20:ca:b2:
42:ec:fd:e3:6e:c3:b5:e0:02:6c:60:a1:c0:39:9e:0e:fe:3c:
51:b8:4d:04:4a:15:d4:b3:b3:c8:b6:c6:0f:a5:8f:73:db:31:
1c:1b:1f:e4:67:d3:26:b9:4c:cb:8b:b1:fa:ce:f5:14:6b:bc:
7c:bd:29:48:d9:e3:f8:a3:82:de:6a:44:8c:f3:84:ea:54:d6:
b4:7b:a5:63:00:bd:df:3a:33:bf:75:b8:fb:0d:80:b9:4f:2f:
9c:06:c7:fe:f0:a0:ea:8e:4f:be:04:9f:67:af:83:7a:92:48:
1b:34:3d:fc:23:34:1e:f8:0f:85:72:b3:d4:68:69:38:00:25:
45:96:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org