Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/A70D973E035811EB8CD6BB2EF8AEA228.roa
File: A70D973E035811EB8CD6BB2EF8AEA228.roa (raw, json)
Hash identifier: xD1TsSOLzb9zgs5taA+QevFCLmTa0OLA9qXS/G/GWVw=
Subject key identifier: 9B:A3:8C:17:A3:32:1A:83:F2:15:BA:37:66:84:E2:65:3F:6A:E3:42
Certificate issuer: /CN=F36D6E6DAF/serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
Certificate serial: 01FD
Authority key identifier: E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/A70D973E035811EB8CD6BB2EF8AEA228.roa
Signing time: Wed 30 Sep 2020 20:08:06 +0000
ROA not before: Wed 30 Sep 2020 20:08:01 +0000
ROA not after: Mon 30 Sep 2030 20:08:01 +0000
asID: 37599
IP address blocks: 196.10.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D6E6DAF/serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
Validity
Not Before: Sep 30 20:08:01 2020 GMT
Not After : Sep 30 20:08:01 2030 GMT
Subject: CN=5f74e5a6-45ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:63:34:69:06:15:2a:4d:0c:48:8d:bd:19:96:
72:a1:7f:b2:6f:93:d3:5e:8b:51:a3:cf:6d:19:1f:
85:0b:8f:4f:06:b5:81:0c:c9:3c:79:c6:e2:43:be:
08:69:c9:5e:4a:48:de:ef:f0:76:3a:08:8f:80:cf:
b9:b1:ab:08:75:ee:38:2b:97:ab:36:08:7c:a6:54:
64:0d:40:aa:38:8e:35:1b:fe:d2:82:27:54:17:18:
b6:59:cd:00:70:4d:53:0a:08:ae:7e:1a:ea:10:4e:
e4:89:67:79:43:b1:e1:5f:eb:39:25:8d:4e:7c:d1:
16:6a:67:1e:48:6b:60:fc:df:79:37:02:61:52:d4:
04:80:b9:bf:b9:05:8f:2b:41:75:bb:46:76:f1:60:
89:a3:9c:b1:4e:dd:e1:f8:cc:7a:3c:ff:b5:00:04:
94:a9:69:33:d4:8e:3d:86:84:7b:6d:0b:e0:f4:1f:
6f:e6:14:c4:b3:35:64:ad:06:52:e5:4d:d6:61:51:
50:7e:f3:7a:e1:ee:eb:cc:83:84:a8:91:39:a1:a8:
73:6b:26:81:06:21:8e:cf:83:c7:bb:af:e8:13:0d:
58:5c:2a:bb:02:d3:db:3a:bd:60:2a:21:b5:34:a2:
27:d5:7c:03:b7:5c:58:03:5e:f1:02:19:d4:5f:34:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A3:8C:17:A3:32:1A:83:F2:15:BA:37:66:84:E2:65:3F:6A:E3:42
X509v3 Authority Key Identifier:
keyid:E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/A70D973E035811EB8CD6BB2EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.10.98.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:2f:eb:77:51:94:fe:61:2c:aa:1a:bd:66:25:ef:70:1f:30:
89:d8:9e:47:53:18:c1:9c:10:c7:00:71:5e:de:c0:8f:dc:f1:
3a:9b:27:8f:e0:c9:b2:5f:7f:96:b4:f1:ac:1f:6b:1a:8d:cf:
bb:7b:47:4a:da:83:37:6c:ab:c1:8a:d8:67:b1:87:49:a3:cf:
8c:59:da:c4:c0:7b:21:19:54:5a:25:22:42:cd:a8:d9:a7:97:
89:fd:16:fa:0c:d3:77:41:4b:d9:be:73:8d:cf:1a:8b:ff:00:
18:3b:26:78:6a:85:95:2f:67:2d:4e:95:e1:be:77:05:09:2c:
e8:4f:93:14:51:1c:9b:bb:59:02:2c:d8:f7:e0:02:73:18:50:
9b:e2:93:34:30:d1:18:e6:9b:06:4f:d2:2f:2c:c6:1d:99:22:
48:f0:f7:4a:83:bf:21:19:06:44:c3:58:fa:06:53:ff:1a:31:
81:f6:15:91:a6:cf:97:51:1b:bc:b4:89:11:96:d3:ed:9b:0d:
50:18:2f:24:cc:b6:47:bb:e4:ae:23:62:34:74:0c:69:c4:e6:
af:6f:31:9a:53:99:11:6e:d5:44:9c:4f:3b:e5:7f:c9:fb:70:
2a:11:a0:6a:39:ee:a9:2b:50:b2:df:59:72:08:ed:5a:f8:fb:
6b:74:42:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org