Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/E2607140088811EC87996F1ED8A014CE.roa
File: E2607140088811EC87996F1ED8A014CE.roa (raw, json)
Hash identifier: S4JitjOStFRR8cgmSQYBbl1OID2iXoiGKmCjeALCbHw=
Subject key identifier: D5:8F:4F:F7:0C:5D:50:B1:A5:0E:A4:AE:89:2C:B1:3C:65:45:79:27
Certificate issuer: /CN=F36862C7AF/serialNumber=D154ABC2A31E0FD603D7C705CC0F95DD1A9CE208
Certificate serial: 20
Authority key identifier: D1:54:AB:C2:A3:1E:0F:D6:03:D7:C7:05:CC:0F:95:DD:1A:9C:E2:08
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/E2607140088811EC87996F1ED8A014CE.roa
Signing time: Sun 29 Aug 2021 05:20:55 +0000
ROA not before: Sun 29 Aug 2021 05:20:51 +0000
ROA not after: Sat 31 Aug 2024 05:20:51 +0000
asID: 37334
IP address blocks: 41.76.96.0/21 maxlen: 24
197.221.96.0/19 maxlen: 24
2c0f:ff30::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
rsync://rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36862C7AF/serialNumber=D154ABC2A31E0FD603D7C705CC0F95DD1A9CE208
Validity
Not Before: Aug 29 05:20:51 2021 GMT
Not After : Aug 31 05:20:51 2024 GMT
Subject: CN=612b1937-a63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e7:8c:47:92:6c:23:e4:77:fd:34:87:4f:73:
03:5c:36:b5:fb:1a:a4:f2:6e:6f:b2:88:88:c6:e1:
94:eb:ee:f4:ef:ee:c9:11:1f:ff:ea:5a:dd:86:8b:
b1:a3:15:24:9b:f6:ab:6d:75:8b:b4:6b:41:97:9e:
ba:6e:59:f8:ee:8e:2c:84:57:82:5c:82:e8:ab:d8:
f3:6e:0d:5e:60:aa:bc:ad:6b:95:62:37:59:ef:55:
c8:d4:ad:00:19:b9:5b:d1:2c:54:44:83:cb:5c:18:
24:df:1e:39:07:7a:0a:ce:81:a7:96:cf:a2:2e:f2:
ec:63:2f:24:43:4e:7b:f4:f2:48:8e:c7:a8:a4:52:
b6:51:d2:47:a2:67:32:7a:a8:4a:07:2a:99:82:2d:
25:86:8b:11:b7:e5:a0:14:b8:f2:cf:3f:9f:5f:8f:
b2:50:dc:3f:f3:28:6f:d3:5a:89:8c:95:ae:b8:02:
fd:53:6c:c4:4f:bd:6c:b2:5c:64:ca:7d:7c:d7:b3:
b3:59:a5:cf:a7:95:25:d0:b1:82:f3:b4:cb:de:2f:
48:ef:cc:45:ba:96:a3:1f:a3:a2:fa:4e:19:c3:1e:
8c:98:cb:87:39:6f:c7:d8:c3:dc:ac:e9:59:f1:fc:
21:82:52:7c:bf:30:c2:f7:a8:07:af:43:53:3e:20:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:4F:F7:0C:5D:50:B1:A5:0E:A4:AE:89:2C:B1:3C:65:45:79:27
X509v3 Authority Key Identifier:
keyid:D1:54:AB:C2:A3:1E:0F:D6:03:D7:C7:05:CC:0F:95:DD:1A:9C:E2:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/E2607140088811EC87996F1ED8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.76.96.0/21
197.221.96.0/19
IPv6:
2c0f:ff30::/32
Signature Algorithm: sha256WithRSAEncryption
29:69:03:53:50:87:69:20:09:b4:9c:a0:53:11:d2:5d:7c:88:
07:26:32:be:de:7f:e5:ec:0c:dc:7e:e7:8a:79:8d:7a:c9:36:
7f:71:11:b8:69:55:87:4d:0a:ec:30:4a:0f:8a:0f:8f:10:39:
87:f8:cf:bd:a4:73:00:2d:31:97:9c:ff:cf:30:77:77:62:79:
d8:8e:4e:ed:15:de:71:de:52:b7:1b:e9:b5:92:56:9b:25:83:
9b:5c:60:aa:91:0c:8d:da:21:06:6c:07:e2:dc:90:2a:87:78:
46:ba:27:f9:09:90:58:5c:24:b2:17:52:d7:06:48:75:9a:0f:
6e:61:68:72:27:de:93:b8:7d:de:c6:83:90:7d:3b:20:5a:b5:
23:1b:91:8b:2c:82:ea:b4:34:87:1f:53:67:45:2f:2e:2d:35:
62:5d:8e:b3:8a:84:06:2c:ad:c7:41:9a:1f:e9:4c:e7:2a:7f:
5f:9e:8d:4d:a4:f2:a0:ee:c4:53:89:12:bd:7c:52:de:32:96:
79:ba:74:e9:78:f2:e7:9c:20:57:fd:47:c7:df:3f:5d:a0:9d:
ba:37:02:4e:ce:6a:73:a6:23:17:25:ba:96:da:1c:64:83:5f:
a6:1c:5d:53:41:bd:31:fc:8d:6b:b3:2b:28:91:72:dd:40:f9:
83:6e:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:57 2024 by rpki-client on console-ams.rpki-client.org