Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/BDB5A7FC1D5511EC9EEE033AD8A014CE.roa
File: BDB5A7FC1D5511EC9EEE033AD8A014CE.roa (raw, json)
Hash identifier: 2cjNPvlR7PUwI2VKGhKfkSFLYcnzPu/tOkW6A4CpmKI=
Subject key identifier: 17:12:63:84:E1:6D:6E:F4:65:18:98:06:47:8B:31:E3:94:09:D0:81
Certificate issuer: /CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Certificate serial: 02
Authority key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/BDB5A7FC1D5511EC9EEE033AD8A014CE.roa
Signing time: Fri 24 Sep 2021 16:37:43 +0000
ROA not before: Fri 24 Sep 2021 16:37:40 +0000
ROA not after: Tue 31 Dec 2030 16:37:40 +0000
asID: 37887
IP address blocks: 196.49.13.0/24 maxlen: 24
196.223.41.0/24 maxlen: 24
2001:43f8:a10::/48 maxlen: 48
2001:43f8:a11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Validity
Not Before: Sep 24 16:37:40 2021 GMT
Not After : Dec 31 16:37:40 2030 GMT
Subject: CN=614dfed7-d4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:8b:c2:fc:81:9a:5a:58:9c:10:da:9d:38:
0d:37:a2:8e:e0:70:d3:c4:5c:e0:fc:08:dc:c7:dc:
52:97:3f:3b:57:fe:31:0c:11:71:59:71:46:8a:a5:
70:77:2b:ce:22:c7:94:20:d6:b0:ac:8a:c0:b1:80:
65:ba:1c:d3:06:bd:7d:a1:cb:ef:e6:22:82:ee:94:
2a:1d:80:a9:c4:de:c3:bc:66:0f:67:29:cf:fa:a0:
15:69:b5:ec:c3:0c:08:8f:97:eb:32:b4:e1:19:21:
67:ad:df:01:14:b6:15:46:8c:3e:5a:36:9a:8e:85:
ea:b1:fa:f7:f1:6e:53:f2:6a:db:ec:e8:02:0d:29:
5e:0b:b2:a7:bc:35:ab:72:0d:df:d0:1e:50:91:2d:
dc:f1:a8:85:88:26:f9:67:8b:a4:69:ae:75:53:62:
04:88:50:89:be:30:a0:ff:3d:92:b5:b1:0a:98:39:
0c:08:0a:72:69:90:0e:76:ff:a0:9b:4c:08:b1:d6:
b1:51:de:b8:44:bd:8a:89:af:2d:28:ca:5b:c5:02:
f3:40:59:f9:dc:48:14:ae:52:dd:6c:0f:91:4e:ed:
8c:df:3e:12:8e:07:c3:3f:74:09:b1:5c:b7:39:cf:
2c:c9:a6:c6:f4:d7:ae:b2:c3:2b:6e:73:4d:48:ee:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:63:84:E1:6D:6E:F4:65:18:98:06:47:8B:31:E3:94:09:D0:81
X509v3 Authority Key Identifier:
keyid:D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/BDB5A7FC1D5511EC9EEE033AD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.13.0/24
196.223.41.0/24
IPv6:
2001:43f8:a10::/47
Signature Algorithm: sha256WithRSAEncryption
55:8b:ad:66:b6:51:27:79:4a:d9:eb:13:01:c2:ff:bf:e0:19:
b8:28:e3:ef:ca:a9:72:d3:ef:93:4b:7e:3f:79:b9:dc:d2:b3:
df:20:56:b1:a0:db:cb:b9:bf:7f:d9:41:ca:7e:34:ec:e3:74:
10:33:1f:df:f6:bf:4f:e3:ce:44:a9:5e:32:10:63:82:fb:1b:
86:24:1f:7a:c4:00:aa:96:d0:c1:dd:a4:60:e8:36:9c:c7:6e:
48:36:4a:b4:57:39:22:21:e0:09:58:80:90:f0:40:d6:6d:67:
b0:17:17:80:7d:e8:05:2d:d7:a9:f8:0e:40:43:5f:b8:56:82:
3e:8f:a9:29:c1:80:37:6f:f2:d5:5e:85:0c:0e:b9:b3:35:1e:
c4:71:5b:40:88:4b:42:2c:68:ed:37:cb:b9:d4:89:cc:7b:ed:
97:7e:80:b9:fd:c2:e7:cf:96:27:76:e6:00:26:81:ca:0c:c8:
b0:3e:b1:14:b9:dc:64:73:fa:8d:a0:8d:42:09:42:06:0a:01:
de:40:cc:a1:85:ab:9b:3d:b4:12:4c:c8:24:b3:10:50:19:e3:
f8:bd:2c:71:4f:ad:3a:7e:6d:ba:5a:fe:29:a6:7e:aa:72:6d:
e8:63:a5:03:1e:5a:6a:91:c0:b2:13:97:37:e2:6b:dc:2b:57:
00:3e:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org