Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/1C51EC40F8AE11EE85768D37017001B1.roa
File: 1C51EC40F8AE11EE85768D37017001B1.roa (raw, json)
Hash identifier: v4SLH1+/YwLzvxzHgd67joyDrI2okxiNTqZ9TeEQpC4=
Subject key identifier: 52:CC:21:22:D5:FC:38:20:C2:93:0B:33:C7:D4:CA:F1:79:9C:5E:F6
Certificate issuer: /CN=F36DBC4BAF/serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
Certificate serial: 05
Authority key identifier: FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/1C51EC40F8AE11EE85768D37017001B1.roa
Signing time: Fri 12 Apr 2024 09:21:58 +0000
ROA not before: Fri 12 Apr 2024 09:21:54 +0000
ROA not after: Mon 31 Mar 2025 09:21:54 +0000
asID: 33567
IP address blocks: 197.155.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAF/serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
Validity
Not Before: Apr 12 09:21:54 2024 GMT
Not After : Mar 31 09:21:54 2025 GMT
Subject: CN=6618fd36-985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:bb:32:c0:92:ab:e1:30:98:d0:e3:38:b8:
2d:bf:06:cb:ae:5b:35:9b:4f:a8:6e:64:70:04:48:
53:22:72:fd:e0:62:4c:fd:32:82:56:fe:80:03:d8:
f3:c7:15:e9:1a:de:33:47:c1:83:2a:29:f5:9e:77:
43:fe:97:5f:52:ab:35:9b:da:f6:53:5a:39:cd:a6:
9d:82:d5:a0:93:4e:34:79:09:4e:30:79:ca:e8:40:
63:2d:e4:7a:76:a1:7d:dc:db:f5:a5:27:25:9e:b7:
7f:7b:ac:d7:00:28:06:5b:82:ee:ab:77:c8:13:ee:
ed:cc:3b:c7:7d:02:16:28:dd:70:19:7c:58:0c:68:
1c:c9:cb:e1:85:1d:82:66:c2:d4:c7:3e:44:37:d2:
39:30:21:81:37:5a:e2:71:80:50:91:e5:b7:0e:21:
4a:c4:8e:e9:e8:1c:16:e0:e0:49:9f:21:00:1f:9c:
4e:b9:9e:9e:ac:7b:75:29:7f:b5:67:c6:f1:c4:cb:
fd:f7:aa:44:71:29:2a:15:ce:39:5c:dd:72:7c:7f:
eb:78:43:bc:c4:6d:18:b7:43:84:71:cf:ba:2d:e4:
0d:1f:df:d8:d6:ab:95:01:39:f1:d6:45:3d:ab:d8:
61:b8:7a:c2:8a:7b:04:54:18:28:5a:0f:8e:31:c5:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CC:21:22:D5:FC:38:20:C2:93:0B:33:C7:D4:CA:F1:79:9C:5E:F6
X509v3 Authority Key Identifier:
keyid:FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/1C51EC40F8AE11EE85768D37017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.155.192.0/20
Signature Algorithm: sha256WithRSAEncryption
cb:7a:33:56:76:52:9c:0a:67:1b:2e:81:bf:87:24:25:90:94:
52:46:fc:47:bd:04:7b:9f:9b:d0:f7:ce:bd:8c:d6:cf:6a:05:
00:6a:89:90:67:ba:9b:3f:cd:44:e1:4e:f4:e4:13:b3:8d:5a:
0d:ed:97:10:20:fa:61:71:a2:38:19:30:c8:91:6f:83:63:07:
eb:60:6e:7c:fa:19:a1:99:88:46:02:60:51:80:97:91:99:07:
51:d7:eb:21:a3:00:6d:18:4a:b9:5b:7c:e8:77:72:c7:aa:27:
33:59:30:e2:3e:60:6c:5b:43:99:a0:a2:95:b7:5c:ba:1e:e5:
c9:1d:fa:2f:c1:58:50:0c:16:f5:41:07:53:b9:40:26:ea:2b:
f7:28:00:7d:44:8f:71:ae:1e:76:3d:ea:91:17:04:8d:3f:22:
d1:44:20:e7:a6:fd:30:a9:c9:07:b6:b1:2d:85:3c:45:50:76:
17:d5:0c:56:79:72:04:4c:82:25:dd:a3:fa:89:8b:5e:bd:2a:
7e:4c:c5:0d:a7:5d:d5:09:b4:6e:4b:7f:2f:6f:c5:cc:88:e5:
53:6a:ee:47:51:a3:bc:72:c6:95:e7:38:d3:3c:f5:6b:50:51:
35:19:87:55:d4:d1:95:94:9c:c4:3f:4c:45:fc:32:c7:81:6f:
1f:ad:0c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:40:55 2024 by rpki-client on console-ams.rpki-client.org