Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/32C3FF14184C11EFBABCB663017001B1.roa
File: 32C3FF14184C11EFBABCB663017001B1.roa (raw, json)
Hash identifier: jVOSrPy6rBmNjgBvmjlpyANo+SgMJVoT9LMIbEspZNM=
Subject key identifier: 0F:44:ED:8D:01:A9:58:BD:26:AF:03:44:01:F9:57:DE:52:51:3D:83
Certificate issuer: /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Certificate serial: 075B
Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/32C3FF14184C11EFBABCB663017001B1.roa
Signing time: Wed 22 May 2024 15:01:42 +0000
ROA not before: Wed 22 May 2024 15:01:38 +0000
ROA not after: Sun 31 Dec 2034 15:01:38 +0000
asID: 8094
IP address blocks: 196.21.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Jun 2024 00:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Validity
Not Before: May 22 15:01:38 2024 GMT
Not After : Dec 31 15:01:38 2034 GMT
Subject: CN=664e08d6-0cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:d3:3b:2b:d8:5a:bb:22:8a:85:11:67:26:
32:53:88:48:50:c8:c7:85:8d:48:c3:0e:ef:f5:94:
04:de:5e:5f:c0:87:07:1a:24:b9:d9:7a:4b:b2:c9:
30:d3:4d:e3:07:25:0f:e1:f9:cd:7e:03:f1:cf:ad:
4f:3a:d8:d5:f4:04:df:7c:c9:aa:8a:78:37:70:58:
ef:22:1c:ec:d1:1e:3f:8d:9a:60:a3:03:70:35:9f:
24:53:df:5a:fd:47:b5:d2:f2:d3:f9:1f:6f:d3:71:
d1:6b:48:d7:c8:8e:0e:22:b9:56:84:83:17:66:1f:
e1:24:df:aa:27:07:68:84:8a:e0:b4:69:97:c1:50:
ff:c8:90:9a:4c:a3:4b:41:b3:27:15:6c:ee:af:25:
e7:15:b3:12:84:0b:36:9c:03:73:c5:13:be:74:1d:
03:92:8c:7f:d0:97:a3:ba:ca:b1:22:58:91:c1:49:
61:cb:9a:c5:77:78:c2:a8:9b:d9:19:5e:ac:52:de:
5b:e5:90:4b:62:6d:14:a9:2b:23:2b:93:6b:68:3b:
94:6a:e4:70:e2:e5:50:4c:7d:ba:77:eb:ff:11:cb:
8b:c4:5c:cf:a5:0e:d0:b1:be:0e:e9:f3:99:a5:d8:
fd:c6:08:9e:3c:1f:37:82:d5:b3:56:e6:ce:49:ef:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:44:ED:8D:01:A9:58:BD:26:AF:03:44:01:F9:57:DE:52:51:3D:83
X509v3 Authority Key Identifier:
keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/32C3FF14184C11EFBABCB663017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.21.164.0/22
Signature Algorithm: sha256WithRSAEncryption
74:b4:aa:78:96:fd:b4:4e:65:38:cc:c0:76:7b:69:db:03:fb:
93:a6:17:6f:6d:74:2e:b0:de:68:06:06:99:9d:80:d3:97:6f:
07:3d:bb:88:6f:6d:93:77:4e:1e:32:8c:6a:65:d9:0c:25:61:
61:6f:7f:e3:88:bd:a4:01:da:e5:e6:dd:28:ed:9f:d0:b5:7e:
5e:1e:52:52:20:12:94:87:91:7f:74:14:47:65:09:0f:2b:9c:
bc:0c:94:c8:43:18:d5:61:be:f2:99:3d:bf:2b:4e:63:e1:34:
30:e1:7b:e7:b8:ac:08:3d:7f:1d:36:10:18:c2:a3:e6:3e:cc:
1c:4f:ec:5e:56:9d:4f:01:59:1b:49:34:eb:a8:49:24:a5:cc:
c5:c1:10:24:c9:df:2a:5f:4e:66:b1:ae:60:af:03:67:16:ec:
b0:79:35:f3:3c:95:f2:f1:bf:3c:6c:61:da:4a:5f:70:da:ff:
3b:41:3b:3b:79:db:5f:69:97:16:5b:9b:5d:23:e3:0f:0d:1b:
d2:a9:f5:73:11:00:cf:f0:0b:e4:95:42:90:d3:f3:d8:25:47:
fb:cb:07:cf:70:6e:b9:6c:fb:aa:fc:94:18:2e:84:e9:35:d8:
f2:22:4a:fa:97:c6:1e:85:a0:fc:84:c6:38:5c:8c:ed:83:a5:
fa:34:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 02:20:35 2024 by rpki-client on console-fra.rpki-client.org