Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/CAADEE44732811EE8F7D4C794AD9E6FC.roa
File: CAADEE44732811EE8F7D4C794AD9E6FC.roa (raw, json)
Hash identifier: n+gRBiM7ZIC2gV0nUjF3LshJXh3uqCbjGwvZ0X8j1XA=
Subject key identifier: EC:D3:22:E8:84:85:52:63:8F:C0:74:30:06:DB:B4:87:61:94:8A:71
Certificate issuer: /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial: 020F
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/CAADEE44732811EE8F7D4C794AD9E6FC.roa
Signing time: Wed 25 Oct 2023 11:22:33 +0000
ROA not before: Wed 25 Oct 2023 11:22:30 +0000
ROA not after: Fri 25 Oct 2030 11:22:30 +0000
asID: 25818
IP address blocks: 197.231.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Validity
Not Before: Oct 25 11:22:30 2023 GMT
Not After : Oct 25 11:22:30 2030 GMT
Subject: CN=6538fa79-f384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:55:40:4c:53:09:6d:98:13:d8:82:8c:30:
1a:53:cd:93:fe:b5:3d:8f:09:5f:97:64:e1:74:ef:
2a:a3:1a:16:41:6c:93:ef:b1:dc:3e:22:17:79:4a:
e2:5b:3b:20:cd:13:ed:50:a4:61:88:6e:5b:38:aa:
ce:e2:1a:14:fa:8f:fb:fe:76:9f:20:fb:2d:44:14:
8b:fb:4c:5a:0a:b5:50:44:6f:ff:10:57:e9:95:b4:
a3:2c:00:50:af:2e:8f:c1:08:52:9c:28:1f:75:1c:
2f:29:b7:21:a6:fb:77:c4:ce:03:df:5c:43:b7:72:
f3:5b:21:d0:0f:d4:8f:09:c2:09:46:6b:73:40:44:
db:94:6a:b2:29:fb:de:8a:29:02:98:a9:31:de:4f:
51:ee:ad:3f:ac:81:66:89:df:be:47:b7:06:4c:48:
d4:e0:68:3d:ad:2f:e0:b1:46:b1:bb:e8:8d:df:fa:
5a:43:37:18:8a:4c:11:7a:40:c8:3d:9a:c7:bd:8f:
42:fa:28:6f:80:28:50:c9:a2:a6:20:17:42:2e:bb:
ca:77:82:c2:22:10:61:2e:b4:76:c8:51:ce:5b:e6:
10:6f:70:90:2a:48:65:be:00:aa:e4:a2:ad:b0:6b:
dc:2a:7e:44:9a:6c:c0:29:82:52:9b:3e:1a:d7:94:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D3:22:E8:84:85:52:63:8F:C0:74:30:06:DB:B4:87:61:94:8A:71
X509v3 Authority Key Identifier:
keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/CAADEE44732811EE8F7D4C794AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.231.160.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:5e:a8:cd:85:e0:a9:74:e2:0c:af:7b:80:a2:6d:bb:43:db:
b4:c8:ab:f0:8b:ae:9c:43:74:d2:76:a7:54:14:96:d0:eb:92:
2f:65:51:92:95:6a:67:b4:58:1e:a8:23:a6:40:66:a5:78:ea:
1e:d7:35:8a:00:17:04:81:01:fb:88:1a:c6:d0:d4:5e:0b:2e:
94:1b:af:fe:f8:52:56:4c:09:1a:15:2d:54:0a:e4:4f:ad:b2:
f2:af:f4:7b:4d:da:1a:2f:41:af:5f:c8:92:48:f9:76:87:98:
7e:64:66:c9:c6:2d:02:31:86:53:60:c9:7c:8a:03:f7:03:ff:
60:bc:fd:fb:1f:be:68:ac:33:ec:e4:23:af:83:f9:ef:6f:dc:
1e:d6:7b:bc:ce:73:2b:cd:44:19:0f:84:af:f6:e8:0c:9d:2f:
30:7a:51:dc:e2:ba:ac:5e:f0:78:68:5c:69:ab:ec:09:d6:1f:
45:50:e8:a8:66:09:d9:9a:33:3d:fa:5b:9a:f6:e8:ec:3c:ef:
fa:99:1b:5d:6d:4a:54:7b:ca:e3:17:10:76:02:58:45:1f:56:
38:2c:23:cb:92:0c:a3:e0:d0:ea:89:51:c4:be:e9:36:05:00:
f7:12:b3:d9:70:a8:9c:c2:83:b6:9d:38:ad:00:f8:be:ba:c5:
56:b7:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:15 2024 by rpki-client on console-ams.rpki-client.org