Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/FAA9A2508C5811EB9130DE3FF8AEA228.roa
File: FAA9A2508C5811EB9130DE3FF8AEA228.roa (raw, json)
Hash identifier: vOldhAJUNJ8aOM6sMfbLec613i7WWMY9nlZ/Vxw7n+I=
Subject key identifier: 0B:57:65:6B:62:51:94:B3:42:03:B6:9D:3D:0B:3F:91:4B:E0:71:0C
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 23
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/FAA9A2508C5811EB9130DE3FF8AEA228.roa
Signing time: Wed 24 Mar 2021 04:25:35 +0000
ROA not before: Wed 24 Mar 2021 04:25:30 +0000
ROA not after: Mon 24 Mar 2031 04:25:30 +0000
asID: 3741
IP address blocks: 196.34.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Mar 24 04:25:30 2021 GMT
Not After : Mar 24 04:25:30 2031 GMT
Subject: CN=605abf3f-34dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:96:c0:f5:0d:f9:d5:aa:0c:cd:63:6f:f8:
cc:9f:81:4d:a8:d9:cb:b7:4d:91:ee:d3:27:c9:6a:
63:2a:e6:34:ff:af:11:59:8b:b9:24:c3:71:03:9f:
89:7d:03:b2:18:a7:76:bb:bb:05:eb:7b:ff:97:71:
36:47:51:76:b2:20:a2:bf:7e:85:e8:9f:b6:39:65:
d7:d7:b7:70:a9:01:57:cc:74:dc:8a:d9:d5:7c:69:
ee:58:a4:6b:2d:67:8b:bd:41:36:e8:dd:9b:a0:51:
8b:d6:0c:b4:7f:f3:65:01:66:3a:9a:f8:1a:09:1f:
da:0a:e7:dd:21:87:92:c5:4d:e2:73:fc:83:53:9b:
c2:c7:d9:05:c2:93:96:8e:6e:bf:94:2a:fd:53:0b:
3d:b0:71:25:e8:e9:cd:d4:5d:91:41:a7:02:e8:90:
d9:6e:5f:35:7d:82:44:eb:41:54:29:9b:fb:2c:93:
e5:50:75:2f:5a:a5:d1:ca:e3:69:56:e9:84:83:93:
00:6d:d5:2e:19:9d:ee:fd:d7:d0:d1:d7:3e:df:9b:
4a:28:49:bf:29:d5:bc:3c:65:e2:e3:ab:16:50:c9:
94:6a:f7:93:2d:64:c7:48:ee:69:75:45:eb:af:48:
27:20:fc:06:89:35:63:89:c6:1b:28:e0:23:1b:3e:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:57:65:6B:62:51:94:B3:42:03:B6:9D:3D:0B:3F:91:4B:E0:71:0C
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/FAA9A2508C5811EB9130DE3FF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.34.0.0/15
Signature Algorithm: sha256WithRSAEncryption
21:b3:fa:bc:ab:c9:62:8c:da:7f:b6:4d:03:6e:bd:d0:11:36:
ad:2f:b3:bc:8f:95:92:e5:be:18:62:44:aa:f2:e2:50:3a:9a:
a7:5b:48:b4:41:f7:f6:36:94:24:42:44:05:93:d8:3d:0a:3e:
68:ed:d4:24:66:71:0f:97:71:a1:0c:5d:d7:62:75:e7:1c:a3:
2d:77:cd:b1:4f:af:a7:73:77:5c:c6:69:41:da:cd:14:a3:2b:
ca:f4:82:b7:e4:cd:27:fd:c8:09:ea:ab:65:f9:d3:5e:b4:8d:
1a:62:65:ad:7f:57:44:85:50:9f:ac:78:98:a8:09:9d:33:9e:
93:5b:05:09:0b:07:fd:9b:19:c9:81:e9:31:43:db:da:4f:46:
f7:ee:17:42:7b:24:6e:86:a4:15:1e:59:5f:bf:61:4e:77:f5:
95:cd:e4:4f:57:a8:32:0e:51:39:9f:6b:84:78:e6:86:e2:ad:
78:a4:7b:3d:7f:85:36:bd:75:14:5e:2a:98:37:28:11:9f:9b:
2e:76:df:90:da:b4:38:f9:78:c0:66:21:6b:b5:d1:20:46:2f:
73:c2:48:86:ca:e0:f6:b4:be:81:c6:7a:9b:ab:ff:0b:a0:5d:
4a:cf:74:1f:ab:54:54:47:4a:1a:40:49:ed:8c:94:fc:35:83:
3c:89:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 02:49:26 2024 by rpki-client on console-fra.rpki-client.org