Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/1E00E01A052911EE84BBD2454AD9E6FC.roa
File: 1E00E01A052911EE84BBD2454AD9E6FC.roa (raw, json)
Hash identifier: sJsPXhS2u3JarGDtOh1UZa0tPJmz8vwB7/YeLKri/dk=
Subject key identifier: 52:46:95:F5:83:F2:6C:CA:FB:4A:88:6A:EC:29:25:58:84:02:0A:41
Certificate issuer: /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial: 51
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/1E00E01A052911EE84BBD2454AD9E6FC.roa
Signing time: Wed 07 Jun 2023 11:47:45 +0000
ROA not before: Wed 07 Jun 2023 11:47:42 +0000
ROA not after: Wed 08 Jun 2033 11:47:42 +0000
asID: 30986
IP address blocks: 196.201.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Validity
Not Before: Jun 7 11:47:42 2023 GMT
Not After : Jun 8 11:47:42 2033 GMT
Subject: CN=64806e61-affc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:cd:d0:3c:51:5d:0f:02:fb:a4:57:be:a2:
30:ab:de:26:fd:18:68:64:7c:ab:7e:6d:78:cc:d3:
5f:b0:67:b5:7e:15:75:4e:06:99:7c:80:d7:db:29:
97:76:53:b2:ea:ca:5c:a9:b7:f1:f6:6b:4c:7a:5b:
81:1b:c6:aa:48:16:fc:38:b2:8a:e0:a9:e1:c3:68:
d9:ee:b3:77:9c:a4:79:84:37:2c:d8:c0:f1:75:99:
69:b2:77:e7:ee:e8:15:38:46:38:bd:ea:bf:cd:d1:
c8:b8:c8:60:c0:18:95:f7:30:cf:7d:b4:d4:dc:f8:
4e:eb:43:91:e7:e4:24:75:ac:5a:1c:e5:13:71:33:
a4:65:01:8e:95:2b:9b:94:fb:5d:4d:53:8d:0d:fe:
1e:93:5f:a6:44:26:f1:ef:12:f5:60:21:b7:c1:40:
ad:5d:6e:eb:43:d9:85:0a:3d:4a:4e:eb:c3:ec:b4:
11:ca:1d:85:b5:84:78:7a:f6:7d:a0:91:c4:59:b5:
b6:b6:00:38:bb:ef:8f:bf:91:12:cc:48:53:cf:8d:
f4:58:72:ff:14:d3:43:74:16:00:ff:39:e1:bb:02:
7f:1d:d1:4d:17:db:fb:36:aa:c5:50:9d:ff:b1:f8:
2b:2a:e5:e5:b0:19:c5:85:28:67:ee:03:02:4d:e4:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:46:95:F5:83:F2:6C:CA:FB:4A:88:6A:EC:29:25:58:84:02:0A:41
X509v3 Authority Key Identifier:
keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/1E00E01A052911EE84BBD2454AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.201.32.0/19
Signature Algorithm: sha256WithRSAEncryption
54:20:d7:5f:7e:e0:81:19:ed:af:dc:a9:05:56:77:cf:8c:30:
c1:76:31:79:b2:99:eb:67:b1:30:64:e9:34:d3:ee:36:8c:3b:
8f:36:f8:b6:fe:ee:6c:fa:e9:40:5a:5f:51:17:db:14:b5:20:
76:a8:17:a9:0a:00:df:d5:a0:4a:69:d7:70:00:e9:be:77:36:
8b:9d:e9:00:10:06:4a:31:2d:f0:15:ba:17:85:ad:0f:25:19:
3b:ac:5e:f3:d9:98:74:43:3a:9b:03:69:8d:57:09:66:ce:70:
8d:b1:f7:c0:bc:bd:20:d9:b5:fc:36:84:52:26:84:a7:be:a6:
a7:e1:63:3d:a0:47:7f:f4:cc:af:60:ea:84:85:4f:99:9a:1b:
f2:aa:68:3b:ab:48:6e:52:53:67:11:dd:f8:96:ba:7a:0e:6f:
b7:da:aa:7d:7a:d7:52:03:bc:df:65:3d:b9:53:d9:04:8f:75:
4f:1a:3a:bc:b6:3e:7b:51:45:aa:57:1d:c0:f6:33:67:dc:1c:
3a:dc:ae:74:fa:e6:b8:ba:15:49:10:bf:b1:20:07:74:13:16:
23:3a:3a:26:32:aa:97:ba:ab:5e:67:b0:56:b5:2e:6f:11:87:
80:75:eb:91:b5:a7:92:0a:48:79:57:4e:6f:b2:8e:31:32:e3:
6f:1b:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:34 2024 by rpki-client on console-fra.rpki-client.org