Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/55A54EE42E9611EDA379C780F1222468.roa
File: 55A54EE42E9611EDA379C780F1222468.roa (raw, json)
Hash identifier: 92dmko5SHijeHZEqNigi1tIoOa55D1fkpQHQwRV5fc8=
Subject key identifier: E3:46:C6:26:3A:53:1B:81:32:F1:95:A0:67:11:62:8B:7C:2F:79:11
Certificate issuer: /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial: 04
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/55A54EE42E9611EDA379C780F1222468.roa
Signing time: Wed 07 Sep 2022 10:17:53 +0000
ROA not before: Wed 07 Sep 2022 10:17:49 +0000
ROA not after: Wed 01 Sep 2049 10:17:49 +0000
asID: 329105
IP address blocks: 196.49.88.0/24 maxlen: 24
2001:43f8:1681::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 May 2024 00:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Validity
Not Before: Sep 7 10:17:49 2022 GMT
Not After : Sep 1 10:17:49 2049 GMT
Subject: CN=63186fd1-24dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:0f:0e:cf:ec:9b:f7:aa:a9:cf:f5:5f:38:
d4:2b:9e:f3:68:c1:11:4c:53:7b:9c:3d:fd:1f:c3:
00:97:7c:b2:1d:b0:0e:97:f6:fa:60:a7:3c:f1:f5:
d0:c2:b1:07:fa:fc:36:02:b5:e4:66:c9:13:98:34:
45:19:68:fa:e7:98:b1:5e:e1:1d:7f:c6:f5:22:82:
7e:43:1f:8b:06:d1:77:f1:0a:74:15:8d:ac:45:44:
7f:41:1c:ec:44:48:85:b4:6c:ef:35:59:df:7d:b3:
89:3c:b6:bf:23:c6:32:b3:15:53:7b:a5:d4:67:bc:
26:2f:e3:18:20:28:6e:98:31:bd:15:ec:0c:0c:57:
43:e8:16:4a:db:8d:8e:d1:3b:32:62:6c:77:f8:7f:
86:4f:2a:64:18:57:68:be:92:48:ad:57:db:87:f2:
59:80:2a:11:80:0b:40:db:30:d0:2c:d9:b9:36:06:
43:ff:fe:00:97:d5:05:1d:29:5f:81:4b:70:d3:b6:
f7:73:56:1d:5b:61:19:50:c8:be:82:16:18:b9:e0:
02:21:20:dc:1f:7b:d8:6a:dd:2a:73:2d:15:c9:1d:
b3:8c:29:fc:10:17:88:5b:97:f9:cf:d7:b9:f2:16:
87:12:8b:d2:c5:83:82:9d:a6:62:84:83:3d:fd:f3:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:46:C6:26:3A:53:1B:81:32:F1:95:A0:67:11:62:8B:7C:2F:79:11
X509v3 Authority Key Identifier:
keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/55A54EE42E9611EDA379C780F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.49.88.0/24
IPv6:
2001:43f8:1681::/48
Signature Algorithm: sha256WithRSAEncryption
1b:f9:88:2c:ae:be:91:8b:e5:08:55:89:d1:43:75:0e:ae:9d:
c3:52:df:ad:d3:0c:ae:a4:b1:e4:16:ef:1a:4d:1e:f3:21:ce:
3e:8a:90:d7:d0:2f:af:ff:fe:7c:73:6a:0e:04:76:b7:df:ea:
e2:95:37:81:a1:d1:20:21:c6:c8:67:23:18:77:20:d4:3d:c5:
db:a6:1a:40:a2:ce:05:40:ab:84:b7:35:1e:d6:0c:1f:83:19:
2d:1e:ee:07:b0:3a:f5:00:41:4c:1c:f5:37:67:06:12:1b:44:
67:2c:a7:11:01:58:d7:b9:15:fe:66:78:36:b8:b9:6f:93:e4:
10:ad:38:01:e8:6b:cc:59:be:ae:9d:ae:1c:68:10:d0:9d:cd:
db:43:75:77:c8:4b:26:47:15:13:58:ac:02:ab:44:77:f8:ff:
0b:6f:ba:ad:d9:94:60:62:f3:7e:8c:dc:e5:76:f6:00:6b:6e:
d7:a6:ed:23:7d:2e:24:d8:b6:ca:a6:37:59:f1:a9:eb:ea:61:
16:57:ae:48:e9:4f:5a:bb:fc:3c:37:85:23:4f:45:c0:0f:ff:
2a:4c:a0:30:60:60:4a:ab:4f:65:48:88:19:28:81:bf:8a:d9:
62:64:31:6c:a0:25:a7:57:d2:e0:27:73:bd:b1:9a:66:a0:f4:
71:9f:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:29:11 2024 by rpki-client on console-ams.rpki-client.org