Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/2342ECF6166411EF86A28464017001B1.roa
File: 2342ECF6166411EF86A28464017001B1.roa (raw, json)
Hash identifier: LAeP18nBFk8e55lig13p1FU7erjKKZ2bUOy7MssyCfI=
Subject key identifier: 90:C0:41:63:48:A5:CE:EB:45:74:6F:9B:96:7D:18:68:C9:6D:FB:CE
Certificate issuer: /CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Certificate serial: 2C
Authority key identifier: 4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/2342ECF6166411EF86A28464017001B1.roa
Signing time: Mon 20 May 2024 04:48:02 +0000
ROA not before: Mon 20 May 2024 04:47:58 +0000
ROA not after: Thu 20 May 2027 04:47:58 +0000
asID: 36867
IP address blocks: 196.1.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.mft
rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A7021AF/serialNumber=4B48662004089F5BB68194AB04B830CD433A2B70
Validity
Not Before: May 20 04:47:58 2024 GMT
Not After : May 20 04:47:58 2027 GMT
Subject: CN=664ad601-35cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:22:10:34:7c:14:9e:de:4a:8d:6f:fc:47:
e9:4d:91:93:1a:48:f9:f0:08:ca:30:18:7c:b6:7d:
19:bd:3b:5b:3b:a8:f5:79:38:d1:89:ce:0f:7b:30:
62:ef:3b:8a:16:3c:9c:a1:5d:32:d9:6a:65:db:34:
47:d5:23:af:85:30:af:35:4e:a7:7d:b8:1f:3a:dd:
d7:13:d5:9a:9a:bc:8e:3d:b9:89:cf:20:3b:08:4a:
43:09:a6:de:e8:36:65:a3:31:db:ee:9f:ad:86:27:
a8:9a:76:58:8d:6e:5f:ab:d7:37:d5:7b:f6:6b:48:
96:bd:b8:ba:9a:3c:33:ea:8d:79:0c:08:6c:ed:61:
1b:b2:24:37:f5:5f:53:71:1c:4e:8a:92:3c:0e:3e:
f7:d8:44:09:02:c0:74:87:a9:ab:f0:11:c2:16:d4:
86:4a:26:a2:20:47:f9:77:1a:8d:fe:ef:0f:1b:4c:
71:0d:b2:01:2a:d7:f3:05:d7:d0:57:23:bc:69:9c:
29:6f:1f:cd:0a:40:3b:d8:63:b1:24:71:d4:52:1c:
25:e7:8c:85:48:a9:ce:c6:15:79:4e:e8:8d:43:9b:
35:16:f2:86:6a:b3:79:1f:5e:4d:9a:1f:a8:f6:88:
bd:d3:83:73:c0:b6:a8:96:44:4b:4a:60:6d:e1:64:
3c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:41:63:48:A5:CE:EB:45:74:6F:9B:96:7D:18:68:C9:6D:FB:CE
X509v3 Authority Key Identifier:
keyid:4B:48:66:20:04:08:9F:5B:B6:81:94:AB:04:B8:30:CD:43:3A:2B:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/S0hmIAQIn1u2gZSrBLgwzUM6K3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S0hmIAQIn1u2gZSrBLgwzUM6K3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7021/E503991C02C311EFBD1277F5007001B1/2342ECF6166411EF86A28464017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.127.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1b:4c:3c:6f:22:7c:38:bb:ca:ba:e6:33:2d:f2:dc:81:1b:
ae:3e:d6:af:00:2f:f6:aa:2d:f4:22:68:61:fb:a9:d9:0f:1e:
d6:8e:e4:c1:74:9c:33:04:95:e1:f6:f0:76:2a:93:9b:1b:1c:
2e:a9:1f:d9:e7:b6:af:bf:ab:40:16:4a:75:0c:cb:f9:aa:74:
27:02:65:e3:27:cd:76:13:0e:94:68:c9:80:ed:0e:b0:d8:5e:
d4:49:e7:36:0a:27:98:3e:5f:de:1a:7a:29:0e:12:84:28:e6:
a1:d5:7f:77:80:8e:8a:79:9c:a3:02:0c:51:40:75:6b:a5:85:
fe:6f:a8:db:8c:42:4e:54:58:e9:e2:78:67:5c:47:0a:a9:f4:
c8:3e:60:5f:ca:e1:74:21:88:ca:30:4e:3f:ad:2c:c5:b5:10:
10:4e:28:1c:0b:38:bd:40:9c:77:32:39:b8:09:ed:cd:e1:db:
bf:90:8e:df:e3:fe:a5:e8:f2:5c:9c:ce:7f:95:6b:12:4d:a5:
63:26:d9:8e:30:57:38:f8:0d:71:31:13:0e:13:fa:34:ee:ae:
80:d3:e8:56:fa:3c:24:ff:c4:80:25:9c:a9:b0:20:d9:b9:71:
ea:64:db:f0:43:67:cf:36:f5:e2:41:ac:f4:64:54:b3:2b:9c:
cd:e7:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:38 2024 by rpki-client on console-fra.rpki-client.org