Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/F6BF2196FC8111E9AC6A242CF8AEA228.roa
File: F6BF2196FC8111E9AC6A242CF8AEA228.roa (raw, json)
Hash identifier: Fd+NxiRRn35EHOCt2v/UUPEoB3ED4QaRhjwZJZVQOG4=
Subject key identifier: A0:0B:12:1D:B1:4C:E4:01:7C:51:48:CE:B3:8F:A9:23:F4:72:E7:0B
Certificate issuer: /CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Certificate serial: 05
Authority key identifier: CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/F6BF2196FC8111E9AC6A242CF8AEA228.roa
Signing time: Fri 01 Nov 2019 08:31:13 +0000
ROA not before: Fri 01 Nov 2019 08:31:06 +0000
ROA not after: Fri 01 Nov 2030 08:31:06 +0000
asID: 37567
IP address blocks: 196.6.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.mft
rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36914A7AF/serialNumber=CA9416BEBC956B4AD58C1CAC1C1D469F68335052
Validity
Not Before: Nov 1 08:31:06 2019 GMT
Not After : Nov 1 08:31:06 2030 GMT
Subject: CN=5dbbed51-9b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:ce:0d:df:5e:02:ff:c4:2a:1b:58:23:21:
33:7b:18:e0:45:c0:0b:27:6b:46:82:87:48:df:9b:
3e:bb:41:84:7d:e3:c3:14:72:75:51:af:e3:29:40:
4b:37:6d:29:36:9b:a6:59:c0:74:ca:97:f8:26:a5:
2c:be:59:c9:d8:c1:56:2e:43:6b:c0:d4:76:69:8a:
b2:7f:2f:d0:33:79:bf:e3:2f:d3:13:e5:da:31:5b:
35:e7:c7:b3:b4:a9:7e:de:08:b9:65:f5:87:87:4d:
0a:83:cc:ad:4e:7d:66:6f:87:2f:11:ca:72:13:0a:
02:95:b7:af:6f:28:8d:07:cd:58:b4:c8:1c:6b:c1:
fd:70:fc:82:03:bf:50:7f:48:4a:f1:1f:88:cc:68:
54:d2:d0:be:9e:54:e2:6d:3a:69:ba:e8:3c:38:e0:
da:a3:34:16:b8:f6:61:e2:2c:5a:f6:29:30:51:3d:
b9:b8:ce:5e:c6:98:bf:25:07:0a:cb:01:fd:8a:ab:
6b:81:2b:82:7d:91:26:8b:1d:3d:96:8e:39:6a:61:
50:39:ec:0e:ce:48:9d:a6:d5:13:47:35:85:c7:97:
7f:f0:69:84:e6:e3:05:9a:5f:17:79:1a:d6:93:49:
ba:a1:0f:55:81:f3:2a:19:3c:fb:05:b2:20:96:64:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0B:12:1D:B1:4C:E4:01:7C:51:48:CE:B3:8F:A9:23:F4:72:E7:0B
X509v3 Authority Key Identifier:
keyid:CA:94:16:BE:BC:95:6B:4A:D5:8C:1C:AC:1C:1D:46:9F:68:33:50:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/ypQWvryVa0rVjBysHB1Gn2gzUFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQWvryVa0rVjBysHB1Gn2gzUFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/C4286154FBFD11E9B772CE47F8AEA228/F6BF2196FC8111E9AC6A242CF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.6.103.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c2:a7:d2:cc:93:74:07:c2:e2:4e:c6:e6:c2:e4:2e:c1:59:
6d:6e:76:5d:09:46:48:97:62:e5:d6:43:3c:ee:68:50:8e:44:
07:c0:12:52:06:65:19:4d:cc:d3:1b:64:64:3e:f9:3c:c1:8d:
b8:f6:e7:ed:9a:cb:64:dc:07:80:41:39:07:3f:bf:60:bd:1d:
c2:bc:e2:c9:0a:4d:2f:ca:58:cb:75:58:2e:b6:5c:08:d5:ba:
01:36:b2:6c:d7:20:93:6d:db:72:2d:71:47:ce:10:29:d7:52:
42:48:1a:02:c8:9d:64:50:a8:a4:e9:57:c6:13:33:a0:95:94:
40:ae:26:3a:87:4c:dd:b0:67:03:d0:ff:9f:b3:9d:57:4e:7b:
d5:7c:aa:f9:1f:eb:1b:71:00:d1:e6:27:49:4d:af:dd:d2:18:
c0:24:26:c0:62:88:9b:01:fa:b0:7c:07:de:d6:d6:bb:90:93:
50:de:e5:f8:2b:aa:59:a9:3a:09:ab:b3:01:64:70:08:e4:fd:
85:3d:b3:f4:79:d3:89:67:a3:7a:f4:2b:cf:3f:a0:15:aa:c1:
01:91:d2:77:4a:9c:16:28:d2:f5:3d:86:ed:dc:a9:c4:e8:83:
2e:2b:6f:45:f3:d1:67:c4:a5:82:fc:7e:6c:1e:bc:48:80:3c:
4c:f5:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:13 2024 by rpki-client on console-ams.rpki-client.org