Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/881335FA7BAA11E9A046BD3EF8AEA228.roa
File: 881335FA7BAA11E9A046BD3EF8AEA228.roa (raw, json)
Hash identifier: OkMDhpXF8khmK7w80DsO5vKxDjM8RKk6XbZwgTPRn50=
Subject key identifier: EA:B8:11:77:18:D5:63:2E:88:08:AF:7B:22:C9:B7:76:0A:1E:AF:54
Certificate issuer: /CN=F36D5C19AF/serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Certificate serial: 04
Authority key identifier: 40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/881335FA7BAA11E9A046BD3EF8AEA228.roa
Signing time: Tue 21 May 2019 09:26:38 +0000
ROA not before: Tue 21 May 2019 09:26:32 +0000
ROA not after: Thu 31 May 2029 09:26:32 +0000
asID: 37497
IP address blocks: 197.148.64.0/21 maxlen: 30
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5C19AF/serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Validity
Not Before: May 21 09:26:32 2019 GMT
Not After : May 31 09:26:32 2029 GMT
Subject: CN=5ce3c44e-498d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:17:a7:91:ce:a7:38:38:7b:12:16:e3:83:
19:7d:e0:82:b3:7a:3a:5b:fb:ba:7c:b6:86:b5:1e:
c1:e4:0d:44:36:2f:fd:9a:6d:cc:01:2b:bb:6d:24:
80:b3:92:9c:a4:cf:84:a2:20:a0:8a:06:9e:b1:ee:
c6:61:30:7c:2e:3d:19:e5:1d:40:72:2a:26:ec:4b:
59:a8:d2:3a:bc:47:e6:b3:33:3e:cc:b4:bd:a8:84:
ee:f3:30:90:bc:3f:75:a6:0a:b1:38:f1:14:8b:5d:
fb:9c:af:20:8f:9e:5f:1b:b1:a9:d2:e8:a9:2f:c4:
aa:2f:61:44:8d:a8:6e:fe:42:28:c6:4f:17:f5:e2:
88:6d:ab:f5:f4:76:58:dc:42:50:24:09:c1:85:ad:
f6:7d:0f:be:89:10:79:c7:d7:5f:a7:39:b1:56:6d:
b7:b7:f2:9e:70:75:12:ea:76:7d:90:e1:74:2b:a4:
85:86:bc:6b:d4:2a:68:d2:f2:26:59:5e:34:38:5a:
b4:84:de:18:7c:0e:a7:6f:ab:ef:e2:ef:b5:15:e6:
43:23:09:75:9a:85:02:72:af:9a:80:e4:d7:b2:de:
62:56:5c:59:5e:ad:a7:67:1f:45:9d:b4:76:0f:b2:
3e:52:28:d8:b0:32:90:1f:bd:3d:87:5c:18:68:af:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B8:11:77:18:D5:63:2E:88:08:AF:7B:22:C9:B7:76:0A:1E:AF:54
X509v3 Authority Key Identifier:
keyid:40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/881335FA7BAA11E9A046BD3EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
197.148.64.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:9b:42:92:74:cd:95:dd:c3:fc:15:44:f8:08:ef:b0:79:f0:
6a:9c:48:f5:19:ea:04:27:5f:e9:75:c8:42:ec:30:95:05:c4:
4d:c5:f7:8b:b3:53:cd:00:f0:a5:18:7c:91:57:8b:cf:38:e8:
32:00:17:70:bf:ce:d1:80:46:bf:ec:f9:63:50:94:60:a2:8a:
d2:17:64:e7:63:92:f4:94:81:e3:7d:a1:c8:ee:63:cc:0e:36:
f9:e7:10:fe:14:03:d2:e5:d6:86:b4:37:7d:2b:5c:19:d0:07:
71:c0:8a:9a:25:a0:df:b6:48:01:2b:e0:23:6f:b2:b8:77:1c:
01:10:35:6f:58:7a:a9:d3:fa:db:38:3d:f0:d2:54:5c:0a:9d:
d7:02:21:82:2e:9b:af:74:59:55:85:ee:18:4c:0a:3a:80:2f:
7b:44:1a:cd:5d:0f:2b:12:7e:87:a6:74:62:60:96:c1:c7:31:
cc:05:97:84:e6:16:26:ac:70:2e:ef:9b:24:d0:82:1d:1a:d0:
43:68:39:cf:9e:dc:36:68:0d:f1:7e:a7:e8:41:65:ee:6c:4c:
a1:8d:8f:3a:a8:71:86:fe:48:5a:3f:fc:e9:b6:f4:df:54:24:
f5:87:0b:a3:d1:79:b5:27:34:e6:71:ed:c3:65:39:88:4d:21:
00:7a:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:04:19 2024 by rpki-client on console-fra.rpki-client.org