Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/CAC86F829B7911EB9C8AEE6CF8AEA228.roa
File: CAC86F829B7911EB9C8AEE6CF8AEA228.roa (raw, json)
Hash identifier: cRcLcik8i+TyllzdHcW3JEfLJ5cwxs7RcND5vl+JdK4=
Subject key identifier: 0E:70:91:30:D2:F5:13:10:9A:05:02:4C:50:96:6C:AD:AB:7B:0B:E1
Certificate issuer: /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial: 5C
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access: rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/CAC86F829B7911EB9C8AEE6CF8AEA228.roa
Signing time: Mon 12 Apr 2021 10:28:17 +0000
ROA not before: Mon 12 Apr 2021 10:28:09 +0000
ROA not after: Wed 30 Apr 2031 10:28:09 +0000
asID: 10474
IP address blocks: 192.96.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 May 2024 00:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Validity
Not Before: Apr 12 10:28:09 2021 GMT
Not After : Apr 30 10:28:09 2031 GMT
Subject: CN=607420c0-722f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:a0:eb:bb:e4:99:eb:33:ae:56:b0:f4:f4:
e9:3f:ef:58:74:06:33:98:fb:9b:3c:b1:36:a4:b2:
4c:5a:dc:9b:02:40:42:53:68:d7:c1:c4:8c:f2:e4:
4b:3c:94:a7:32:86:e0:3e:f0:ad:81:41:38:e1:6c:
72:f9:31:a0:28:af:eb:2a:67:94:86:5a:07:f1:78:
8f:9c:74:6f:a4:bd:22:70:12:aa:6b:10:da:0d:44:
49:e4:8d:ef:8a:58:88:bb:a8:a0:87:39:35:f8:18:
81:c7:d3:0f:7d:bb:53:3a:41:97:4b:00:d8:b2:53:
39:9e:6e:42:74:00:3e:98:53:0c:11:67:46:4f:46:
12:1f:35:cf:c1:3a:84:1d:3f:90:e1:b4:ec:64:db:
8a:3a:ac:f9:ab:69:51:d4:db:79:74:72:ba:81:94:
ce:3b:73:b1:26:6a:2d:81:33:d4:b0:b7:10:51:92:
63:0e:a1:dc:da:08:7e:c0:bb:a5:3b:0e:28:dc:5a:
ef:b5:ae:5b:e4:8c:8d:1e:8c:56:53:aa:41:13:6f:
ef:43:14:f7:ee:6e:0a:e2:4f:01:c1:89:a7:72:0f:
09:c0:48:97:f1:3b:c4:7b:cd:3a:b4:a8:57:34:38:
75:8d:1e:d7:2a:dc:fe:1e:5c:9f:c8:01:e1:c7:f9:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:91:30:D2:F5:13:10:9A:05:02:4C:50:96:6C:AD:AB:7B:0B:E1
X509v3 Authority Key Identifier:
keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/CAC86F829B7911EB9C8AEE6CF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.96.37.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fe:5a:24:9f:a2:4f:74:b5:f8:b3:72:03:00:f6:9c:52:9b:
57:7a:cc:fe:2f:53:fd:c7:17:07:3e:27:7f:93:39:18:22:02:
0b:e8:9f:1c:94:c2:34:60:ed:ac:72:fa:ad:b8:4f:b4:fc:cb:
71:2b:40:ff:24:46:a5:24:5e:0c:5b:00:f9:93:42:84:f2:d2:
3d:c9:07:a6:c6:75:82:31:c9:0d:60:b7:77:c1:28:fa:e1:f4:
b8:09:18:8f:8e:52:97:3e:25:91:16:54:ea:3b:f8:47:8e:39:
6f:ff:99:b4:14:fa:cb:31:9b:7e:28:88:32:15:70:fa:60:d5:
e1:c7:ea:1c:fa:7c:6a:7c:c6:43:c7:35:e6:6d:a2:ef:c6:8c:
fe:4f:e4:43:ae:d4:c2:9c:4c:3a:c7:0c:ce:c0:5b:da:7e:80:
6a:44:0f:b1:48:6a:07:be:1b:7e:d1:d3:a7:bf:6c:92:a0:20:
6b:cd:f7:79:74:f0:c8:0a:36:9a:92:1d:5d:b6:d9:4a:7a:3a:
66:1f:d8:53:8d:9b:22:06:b6:eb:30:7c:4b:ec:4f:40:a8:e6:
d1:61:93:c5:db:36:62:75:e4:5b:78:22:a6:41:da:3f:87:09:
20:f0:2e:26:73:2a:19:8b:29:6c:47:5a:76:a2:24:1c:ed:79:
87:38:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:36:59 2024 by rpki-client on console-ams.rpki-client.org