Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/44FF457CB46311E58407FA55F8AEA228.roa
File: 44FF457CB46311E58407FA55F8AEA228.roa (raw, json)
Hash identifier: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=
Subject key identifier: CA:8F:28:2C:1B:1E:A8:5D:95:88:0B:41:32:0C:A0:8F:D6:0C:42:5A
Certificate issuer: /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial: 04
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/44FF457CB46311E58407FA55F8AEA228.roa
Signing time: Wed 06 Jan 2016 10:51:42 +0000
ROA not before: Wed 06 Jan 2016 10:51:34 +0000
ROA not after: Wed 31 Dec 2036 10:51:34 +0000
asID: 37100
IP address blocks: 154.72.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Validity
Not Before: Jan 6 10:51:34 2016 GMT
Not After : Dec 31 10:51:34 2036 GMT
Subject: CN=568cf1bd-7e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:1c:44:96:e3:c0:5e:09:cf:a9:93:55:99:
32:1b:ad:f4:b4:45:69:89:a1:e6:ca:bd:d3:5b:c7:
8a:90:04:e2:77:7c:d8:83:8b:a0:9a:84:ca:e2:f9:
d6:20:eb:1c:12:68:59:ec:24:a3:8b:5d:6d:78:53:
a3:4f:0b:d7:ef:c9:46:28:2a:e6:91:5e:78:1e:96:
37:84:22:fb:95:f7:c9:fc:0b:28:de:59:37:3e:5b:
18:22:9b:05:d9:ae:6d:9a:8e:a4:18:20:03:a5:20:
36:60:88:3d:c0:84:fa:6e:97:c1:42:75:46:52:3e:
6b:f5:e6:d9:41:d9:07:f4:4a:20:87:cc:43:34:b9:
de:42:5a:87:ed:8e:4d:f3:d1:05:77:a1:09:97:de:
be:83:f4:e1:3a:5a:69:5f:97:70:74:85:b9:92:56:
63:3c:49:1d:49:2e:44:a5:fe:b1:9a:fa:9c:dc:c9:
4f:5e:c1:1b:8d:c1:f1:85:8f:d8:1f:1b:d4:9d:73:
b3:aa:a4:dc:e4:4e:af:e8:92:eb:d9:20:f1:1e:fa:
71:bf:05:96:e4:77:46:bb:2e:47:38:ee:d0:d0:58:
35:1c:b7:34:59:f6:95:25:df:42:8b:4e:75:0d:8b:
dc:64:f6:28:2c:62:d4:e4:f4:e5:5c:27:ce:36:51:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8F:28:2C:1B:1E:A8:5D:95:88:0B:41:32:0C:A0:8F:D6:0C:42:5A
X509v3 Authority Key Identifier:
keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/44FF457CB46311E58407FA55F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.72.240.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:9a:15:66:05:68:c0:cd:32:26:d3:34:70:fd:e5:3b:29:11:
bc:44:8b:19:77:ba:87:cf:77:6b:14:2a:3e:4b:29:21:eb:65:
96:81:2a:8f:ab:22:b8:6a:4e:76:64:6b:29:69:9f:b9:59:8e:
f5:ee:1f:82:26:ae:23:77:16:da:03:46:2a:f1:1a:12:8e:1b:
65:9e:a6:57:42:ee:e2:e4:5d:96:9e:b6:23:a9:58:a4:34:50:
be:3f:84:53:b2:e8:fb:ae:4d:97:85:a8:0b:8d:cd:7b:81:83:
d4:e8:68:e2:12:db:0e:32:39:50:05:0c:88:07:1f:20:62:91:
ae:cb:6c:27:4d:14:1d:2b:69:61:46:bb:67:1e:ce:98:78:4c:
21:ac:dc:01:a7:ba:c4:7c:b8:ad:cb:01:89:9b:7a:a5:7a:5f:
ae:7c:10:68:68:a5:ad:44:e7:74:1c:5c:3b:a9:6f:06:62:52:
59:60:d0:07:83:59:3c:71:11:93:da:b9:8f:0d:d9:35:40:bd:
be:b6:8a:18:91:8b:61:88:8b:bc:fe:aa:00:f1:68:77:72:9e:
d9:9a:6d:46:bf:7f:15:ae:3f:38:c9:25:f7:3a:ad:88:8c:31:
46:f3:b0:00:79:c7:de:39:25:20:10:13:0c:75:2b:b0:e8:13:
14:ab:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:29 2024 by rpki-client on console-ams.rpki-client.org