Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/A38114EA193B11EFBFE3D102017001B1.roa
File: A38114EA193B11EFBFE3D102017001B1.roa (raw, json)
Hash identifier: 3OVDDFhyULj89NUgF6NVKjGcWXCi7Vh0V5m2G3pIkUE=
Subject key identifier: 69:E9:21:ED:66:42:49:05:C7:7D:94:39:13:82:16:B5:8E:E4:17:E5
Certificate issuer: /CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Certificate serial: 076A
Authority key identifier: 98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/A38114EA193B11EFBFE3D102017001B1.roa
Signing time: Thu 23 May 2024 19:35:41 +0000
ROA not before: Thu 23 May 2024 19:35:37 +0000
ROA not after: Sun 31 Dec 2034 19:35:37 +0000
asID: 37520
IP address blocks: 196.21.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.mft
rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Jun 2024 00:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1898 (0x76a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B9F4BAF/serialNumber=9821C87221D270B42FF9DD826048B992C0E0E3F8
Validity
Not Before: May 23 19:35:37 2024 GMT
Not After : Dec 31 19:35:37 2034 GMT
Subject: CN=664f9a8d-6ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:84:79:76:ee:d4:61:26:64:76:83:bf:29:
31:3b:3f:a2:d0:fa:63:bc:b7:87:21:45:27:40:ed:
89:9e:ce:73:20:22:7c:00:0b:71:45:49:c9:01:ca:
09:60:6d:3b:62:c2:59:72:bf:50:35:20:81:7a:ac:
31:9d:d4:39:24:92:b1:ac:29:41:7f:63:fc:88:d9:
dd:b3:e3:38:fd:58:e8:2d:de:bb:ee:c4:c5:c0:a7:
be:6d:22:83:80:79:10:84:a6:1c:49:a2:39:e6:f5:
fd:6e:38:89:c7:47:e2:41:54:0b:5d:97:91:cf:d8:
ad:b9:03:b4:86:07:7f:d2:8e:6a:77:f3:2b:36:c6:
1b:d3:84:79:e6:03:c0:cf:c1:23:ea:6f:ec:36:ae:
3d:e6:0f:7a:a5:78:e8:e4:02:45:f0:c1:62:95:8a:
f7:25:0b:92:8e:9a:58:4c:bf:a1:cd:fc:66:bb:90:
7f:8d:5d:12:ab:95:ae:37:82:85:f8:12:42:4e:d9:
30:1b:35:ab:52:be:59:56:e3:bd:a0:05:43:48:51:
2b:08:52:04:d3:f6:4c:d5:c3:46:cf:b9:2d:7d:52:
47:84:84:70:bb:a9:2a:bb:c2:9e:d0:a3:2f:fc:81:
8a:00:50:cc:52:ef:a4:90:e7:e7:2a:0f:00:7d:85:
15:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E9:21:ED:66:42:49:05:C7:7D:94:39:13:82:16:B5:8E:E4:17:E5
X509v3 Authority Key Identifier:
keyid:98:21:C8:72:21:D2:70:B4:2F:F9:DD:82:60:48:B9:92:C0:E0:E3:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/mCHIciHScLQv-d2CYEi5ksDg4_g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCHIciHScLQv-d2CYEi5ksDg4_g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9F4B/61A2E1A28DE011E9AC14F632F8AEA228/A38114EA193B11EFBFE3D102017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.21.233.0/24
Signature Algorithm: sha256WithRSAEncryption
77:88:b2:07:ef:23:fe:ee:e8:51:fb:c6:39:4d:f2:2a:e8:6b:
56:fd:d9:32:6f:06:41:27:e8:3c:06:96:b8:96:40:7d:16:5f:
e6:cf:71:b1:16:7f:0a:a0:bd:ce:b2:91:79:cb:78:57:0e:62:
f1:1b:4c:90:84:b8:16:9f:45:ab:c3:ec:a8:6c:73:57:fc:02:
8f:16:b9:8b:8b:18:74:27:37:9f:29:6a:c8:6a:16:f7:04:92:
64:af:fd:b1:aa:c4:5d:75:4c:cc:b0:0e:4b:8d:06:58:40:00:
c9:4a:1c:4b:e4:f0:ba:82:97:a8:92:92:8e:24:2c:07:f3:56:
c6:cc:06:df:d6:92:26:35:df:d4:6e:52:9f:71:a7:38:04:69:
b7:96:2e:7d:e4:e6:07:53:a8:e7:15:32:9d:29:bd:b0:dc:51:
f5:43:56:25:27:f2:d2:b0:7a:57:4b:eb:8c:e5:3c:20:b7:48:
d2:04:03:23:65:72:3c:cf:2f:06:0f:87:a9:18:d5:ad:1d:b1:
13:03:bb:67:85:d4:92:be:47:7e:2f:53:f4:84:d1:ae:43:b1:
67:86:59:0a:6f:8f:ef:b7:fc:19:dc:f6:30:04:3f:8f:d6:19:
8e:d2:e0:da:c9:aa:5f:a1:a5:bc:da:1a:7f:25:11:c4:25:13:
08:d8:35:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 01:47:56 2024 by rpki-client on console-ams.rpki-client.org