Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F40CAC2416DB11EF9F9EC625017001B1.roa
File: F40CAC2416DB11EF9F9EC625017001B1.roa (raw, json)
Hash identifier: FhHMK4DH8WtwR0kzaRdnZtxlyJfMUI4lVx1Gn3pfKJ8=
Subject key identifier: 00:A0:D6:41:80:C3:21:39:22:15:EA:5B:4F:BF:89:E1:87:91:5D:B6
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 062D
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F40CAC2416DB11EF9F9EC625017001B1.roa
Signing time: Mon 20 May 2024 19:05:42 +0000
ROA not before: Mon 20 May 2024 19:05:37 +0000
ROA not after: Fri 30 Jun 2034 19:05:37 +0000
asID: 20011
IP address blocks: 197.93.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1581 (0x62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 20 19:05:37 2024 GMT
Not After : Jun 30 19:05:37 2034 GMT
Subject: CN=664b9f06-346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4d:55:46:c0:9c:84:8c:e7:e8:6c:6f:6b:63:
95:8c:41:90:54:e7:50:eb:03:de:e1:e9:d2:27:24:
1c:2f:6a:71:b9:0d:68:ca:59:2f:0f:d4:8d:35:45:
77:1a:33:06:ec:a6:13:6b:54:78:3c:41:24:63:da:
02:7d:d9:f2:fd:fd:f0:4f:2a:53:3b:c8:2d:af:2c:
c1:05:0e:7c:ac:af:e9:fb:86:09:2c:9b:58:b0:2e:
62:c6:79:2d:9f:a0:bb:d8:ad:c8:b6:19:54:3d:10:
10:37:5f:97:df:bc:5b:5b:6e:6d:a7:e7:2e:d3:b1:
85:06:ae:87:51:22:41:f4:2e:e0:c2:1f:1b:8a:19:
5f:ef:2b:b5:af:f4:6f:42:e5:2b:15:df:51:41:e1:
36:1d:b9:ff:c5:eb:55:e4:f4:8a:2b:48:79:6a:75:
6c:48:d6:1e:87:c0:4d:fd:81:df:e4:2d:39:e4:d4:
5e:30:86:87:ec:50:f8:86:97:00:2c:9f:e0:5c:1a:
51:fd:a6:e7:2d:41:28:1b:f4:e5:ba:f1:ce:ea:a2:
ca:b1:a9:5b:a5:4f:2d:b1:38:2a:16:2e:d9:c5:61:
39:ef:e1:cd:0b:0f:49:8f:7c:dc:84:02:69:20:ab:
bd:45:ea:05:3f:48:11:62:83:41:98:d4:29:94:06:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A0:D6:41:80:C3:21:39:22:15:EA:5B:4F:BF:89:E1:87:91:5D:B6
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/F40CAC2416DB11EF9F9EC625017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.93.216.0/21
Signature Algorithm: sha256WithRSAEncryption
44:7a:2a:75:5b:24:ed:dd:6f:f7:48:44:21:e8:5b:d3:ec:60:
b6:75:24:d0:7d:76:26:46:25:a2:7a:4f:c3:56:5d:0a:cb:5c:
04:03:fd:33:a3:d1:9e:8d:ef:22:79:57:ca:4e:ad:04:03:c8:
9b:67:08:02:8e:b2:02:61:9d:ef:a0:2f:c5:2b:97:af:7b:8d:
df:c4:a4:b7:86:98:b3:96:8c:60:d1:bd:3b:b4:46:a4:d7:e4:
6e:8f:63:44:34:62:45:d3:61:1b:6a:20:25:71:b6:43:5c:f6:
d4:b1:ae:34:98:79:07:b5:0f:87:e8:ed:6a:9b:24:90:4d:5f:
1a:e9:2f:29:5a:33:fd:d9:04:29:38:f5:89:29:ef:3f:6f:05:
19:31:d4:62:f3:b8:53:11:6e:a3:19:3a:4e:26:c6:c7:a9:c5:
52:76:43:27:38:36:85:b3:c9:00:9c:81:63:d3:3a:83:36:13:
e3:d4:77:db:f8:75:31:92:52:7e:42:ce:ce:cf:d1:b1:d2:3b:
8f:89:5e:23:e8:17:6a:20:b8:86:74:25:92:89:cd:e1:66:5d:
93:62:11:c6:dc:36:95:4d:c2:03:7d:4f:12:05:d5:f4:5b:1e:
f3:28:3b:b4:3c:54:e1:45:5a:93:2b:d7:e4:88:11:7b:e5:36:
93:ad:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:44 2024 by rpki-client on console-ams.rpki-client.org