Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/5A992ACC659811ED9CE9B7C8F1222468.roa
File: 5A992ACC659811ED9CE9B7C8F1222468.roa (raw, json)
Hash identifier: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=
Subject key identifier: 1D:3E:02:D7:76:9F:2B:9B:28:37:B6:12:83:6E:CF:61:19:2A:D1:24
Certificate issuer: /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial: 02
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/5A992ACC659811ED9CE9B7C8F1222468.roa
Signing time: Wed 16 Nov 2022 10:20:55 +0000
ROA not before: Wed 16 Nov 2022 10:20:50 +0000
ROA not after: Mon 01 Nov 2032 10:20:50 +0000
asID: 11845
IP address blocks: 196.45.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Validity
Not Before: Nov 16 10:20:50 2022 GMT
Not After : Nov 1 10:20:50 2032 GMT
Subject: CN=6374b987-2017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:08:95:24:56:d3:b4:7d:36:75:7c:45:45:
49:16:32:f8:f4:df:d3:a2:94:41:81:36:91:b2:de:
94:e3:19:71:56:23:ca:69:a6:19:05:ce:69:a1:81:
ed:c4:26:ff:12:eb:ff:0a:2a:fd:e6:9b:7f:cc:13:
6c:af:de:3b:a8:18:c7:9a:6a:4a:e8:9b:e5:06:a9:
e1:91:45:33:a8:82:52:90:b6:b8:79:61:e4:cd:32:
67:42:b8:6d:09:92:14:25:1f:d5:46:22:ff:b8:94:
64:f7:0d:6e:6d:ad:a3:22:ac:34:36:86:37:eb:7e:
63:c2:e1:d7:a7:cf:5b:42:70:9c:3f:75:f3:13:b5:
de:91:3f:36:bc:af:35:b2:1a:1e:65:ee:78:09:c3:
ee:03:5c:be:61:06:ac:ea:4b:cc:9e:97:31:e7:4f:
14:a0:12:db:ed:52:2c:f8:c0:48:29:ef:bc:db:0c:
e8:a8:1f:40:08:77:8a:79:bf:c5:1e:c7:3e:0a:54:
c0:ef:4c:b2:d8:3c:c2:54:3b:be:67:37:1c:da:da:
15:56:30:76:50:de:09:0b:e6:3f:88:58:35:f1:c7:
68:c6:10:f4:51:13:94:9f:40:9f:7d:5b:28:96:70:
f2:04:bb:66:22:26:9c:67:a0:ff:cc:85:92:86:38:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:02:D7:76:9F:2B:9B:28:37:B6:12:83:6E:CF:61:19:2A:D1:24
X509v3 Authority Key Identifier:
keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/5A992ACC659811ED9CE9B7C8F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.45.176.0/21
Signature Algorithm: sha256WithRSAEncryption
25:12:25:43:8e:65:80:b4:ad:90:a5:5c:91:45:b7:88:35:6c:
d8:51:6f:44:d1:b3:b9:d5:5a:e3:43:e8:a5:67:38:cb:06:8d:
f5:14:ec:ff:b1:02:4b:ad:b4:53:dc:38:c2:e9:35:e0:30:6d:
c9:d9:7e:ab:dc:85:d6:8a:9b:d3:5d:99:af:40:bd:f1:c8:fe:
f9:75:bf:56:e1:8c:82:68:ea:6a:c1:8d:10:2e:ae:4d:88:7e:
b2:da:b6:77:75:b9:07:e9:06:70:3b:e3:0d:4b:32:b4:bd:91:
a8:11:ad:52:50:54:d3:6e:51:18:24:81:1a:30:ef:80:21:ff:
a2:02:50:6b:8a:42:7d:0a:c4:4f:29:de:74:af:44:10:86:74:
0b:ed:9c:ec:40:3d:7c:3f:99:b8:f9:c2:77:b8:a6:b7:c4:d0:
30:dc:54:d0:32:72:79:7d:f0:ca:ea:ae:e7:27:91:41:52:00:
cb:f3:7e:8b:3e:db:94:a6:7f:e0:a0:cf:93:ef:7d:97:8f:9f:
6e:ea:5f:e5:ce:5e:c1:b2:74:de:40:b2:a1:86:96:c0:ba:ed:
22:cd:3f:f2:b2:9d:06:ca:64:d2:f1:33:65:9c:96:d7:1d:f1:
9d:1c:ff:7e:1c:25:13:69:dc:43:1b:21:78:77:e9:6b:6a:f6:
0b:2a:0f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:58 2024 by rpki-client on console-fra.rpki-client.org