Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/A9CE075A727B11EBB196600DF8AEA228.roa
File: A9CE075A727B11EBB196600DF8AEA228.roa (raw, json)
Hash identifier: 2lOEEWfkem+GQmI+FhB9pSh9A8qYyCMy8BSlQP5EokY=
Subject key identifier: 1E:DD:FB:CD:CB:79:58:25:CE:41:A2:DB:00:CD:73:DD:EE:8B:A1:5B
Certificate issuer: /CN=F36BDB53AF/serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Certificate serial: 0672
Authority key identifier: E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/A9CE075A727B11EBB196600DF8AEA228.roa
Signing time: Fri 19 Feb 2021 06:28:23 +0000
ROA not before: Fri 19 Feb 2021 06:28:15 +0000
ROA not after: Mon 15 Dec 2031 06:28:15 +0000
asID: 15022
IP address blocks: 196.44.32.0/20 maxlen: 24
196.223.64.0/19 maxlen: 24
197.255.144.0/20 maxlen: 24
197.255.144.0/23 maxlen: 24
197.255.150.0/24 maxlen: 24
2001:43d8::/32 maxlen: 48
2001:43d8:c000::/48 maxlen: 48
2001:43d8:c008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.mft
rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Jun 2024 00:04:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1650 (0x672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BDB53AF/serialNumber=E1AEBAB4B1EF74DB2FA6E7F6B0C8612B0CE1BFDB
Validity
Not Before: Feb 19 06:28:15 2021 GMT
Not After : Dec 15 06:28:15 2031 GMT
Subject: CN=602f5a86-0bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:8d:5d:cd:28:bc:61:43:85:41:f3:86:56:
ab:cf:f5:51:e8:b4:68:92:af:0e:47:32:84:53:68:
9e:4f:e8:2f:a3:84:e1:59:80:65:93:02:67:46:d8:
d7:e3:6f:4c:27:d7:60:da:8b:44:52:06:10:7d:85:
b2:e8:05:fd:d6:6e:29:73:24:29:79:9a:ac:e9:c7:
19:aa:c5:2b:81:cf:1e:eb:3a:81:48:b5:e6:63:da:
d2:8f:5c:49:5d:41:ea:f2:1b:54:39:1e:91:67:ad:
ca:ba:69:13:2d:8b:ef:58:5e:c0:39:b8:f7:e6:ef:
91:43:da:5e:4e:b6:bd:a0:56:5e:32:d9:21:1b:60:
2b:f7:ba:81:93:0f:b7:03:7f:45:71:6a:4c:4e:32:
80:1d:d9:0c:62:25:5a:c3:bd:c3:f8:24:80:6f:3f:
4a:e4:eb:f7:2a:8b:82:f6:5a:a0:8a:66:70:55:d8:
88:c6:e9:61:69:2c:10:6d:5b:49:5c:43:9f:2c:16:
f7:84:fe:f9:5d:a5:09:c8:dd:d1:00:09:2f:14:02:
b2:60:8b:ee:3b:50:bc:72:8d:97:c9:67:4f:d7:d7:
94:32:ff:7c:0f:1e:73:76:e7:cb:cc:7b:a2:c8:05:
f9:12:e7:01:63:07:76:4e:70:02:e8:fd:46:21:8d:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:FB:CD:CB:79:58:25:CE:41:A2:DB:00:CD:73:DD:EE:8B:A1:5B
X509v3 Authority Key Identifier:
keyid:E1:AE:BA:B4:B1:EF:74:DB:2F:A6:E7:F6:B0:C8:61:2B:0C:E1:BF:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/4a66tLHvdNsvpuf2sMhhKwzhv9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4a66tLHvdNsvpuf2sMhhKwzhv9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDB53/5453645A799711E6986B7147F8AEA228/A9CE075A727B11EBB196600DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.44.32.0/20
196.223.64.0/19
197.255.144.0/20
IPv6:
2001:43d8::/32
Signature Algorithm: sha256WithRSAEncryption
71:54:2e:15:f5:04:76:6c:b5:25:20:3a:d6:49:53:50:2e:38:
d8:b0:f1:d2:18:dd:7b:e6:4e:87:22:0a:d9:51:33:3e:69:d5:
0f:d5:5c:ef:83:f9:55:1a:26:da:c1:50:f1:b8:c8:3c:d4:df:
6b:b0:fa:7e:e4:09:37:bb:75:bd:2c:cc:c4:4e:18:50:16:ce:
b7:40:dc:b7:ba:2b:63:cb:5d:6d:9d:35:eb:ea:74:b3:6d:70:
83:44:6a:e0:62:38:32:3b:1b:59:59:b5:b8:3c:7a:27:fa:86:
49:e1:c5:53:50:62:94:dd:07:52:7c:17:5a:16:70:33:d2:26:
d0:b6:44:5e:89:29:17:73:2b:d8:79:3e:2c:7c:c2:0a:1b:39:
b3:27:d6:a5:06:21:59:d6:48:9e:bd:1b:45:f0:23:35:05:53:
73:47:79:c5:13:2d:5f:2a:e0:fb:f2:80:c9:03:3f:03:7a:02:
fa:36:2b:51:11:1c:0c:86:da:80:ed:04:a3:a1:08:bb:e4:19:
40:7e:5d:70:4a:8d:a7:59:3a:0d:79:90:96:f7:43:d5:ce:2b:
35:d1:96:39:bb:c7:25:5b:2d:19:23:9f:10:7e:09:03:76:c1:
68:07:c4:b0:e0:36:66:69:bc:09:7f:7f:f0:85:aa:18:85:3f:
eb:5a:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 01:19:55 2024 by rpki-client on console-fra.rpki-client.org