Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/16CB7A5899EB11ECACD0636D5A40D577.roa
File: 16CB7A5899EB11ECACD0636D5A40D577.roa (raw, json)
Hash identifier: x7L3wvCqWw+zEgUzMlq7vT0ReA0eUQdXe2dVF/Hgatc=
Subject key identifier: 34:C6:C7:86:71:72:6E:C7:2D:45:BE:C7:EE:90:EF:4E:6C:E1:DE:BD
Certificate issuer: /CN=F36DC7ABAF/serialNumber=7BA891054608365FB8EB2380DD6700FDD36B930D
Certificate serial: 02
Authority key identifier: 7B:A8:91:05:46:08:36:5F:B8:EB:23:80:DD:67:00:FD:D3:6B:93:0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e6iRBUYINl-46yOA3WcA_dNrkw0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/16CB7A5899EB11ECACD0636D5A40D577.roa
Signing time: Wed 02 Mar 2022 05:39:12 +0000
ROA not before: Wed 02 Mar 2022 05:39:09 +0000
ROA not after: Wed 27 Feb 2030 05:39:09 +0000
asID: 3741
IP address blocks: 196.3.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/e6iRBUYINl-46yOA3WcA_dNrkw0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/e6iRBUYINl-46yOA3WcA_dNrkw0.mft
rsync://rpki.afrinic.net/repository/afrinic/e6iRBUYINl-46yOA3WcA_dNrkw0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DC7ABAF/serialNumber=7BA891054608365FB8EB2380DD6700FDD36B930D
Validity
Not Before: Mar 2 05:39:09 2022 GMT
Not After : Feb 27 05:39:09 2030 GMT
Subject: CN=621f0300-c2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3c:23:39:b0:86:68:c9:cf:1a:e5:87:dd:af:
39:a6:3d:0d:d0:8d:9e:fa:e7:03:6c:50:0b:9f:a9:
c7:e7:75:13:8b:50:89:47:33:fe:2e:43:5f:86:6b:
8c:29:e6:a7:4f:e5:c0:be:51:e6:70:7f:ea:5b:ab:
22:a9:17:2b:ba:00:4e:43:ea:b1:a1:ed:e4:9d:19:
9d:9e:51:94:0f:78:d8:db:b4:4f:28:95:2c:1c:c1:
44:9c:12:50:65:0f:7f:f5:f6:ee:4b:66:cc:fe:86:
7e:b8:b1:6e:98:f6:fc:32:91:47:ab:c3:b8:05:d1:
52:1c:34:ca:d6:1f:ba:86:e2:a7:8c:56:3f:f7:b5:
29:9d:33:63:ee:ad:6b:34:46:e6:7c:75:cb:c2:94:
7d:0e:8a:87:94:f6:a5:fe:d5:00:b4:cf:10:23:4e:
11:09:43:7a:bb:cc:8f:93:b4:4d:dd:f1:07:d9:f0:
95:65:63:1a:3a:d3:ba:cc:61:c4:04:51:99:ca:ed:
1a:94:ee:09:13:e3:c1:ec:62:3d:22:70:b9:8e:bc:
c9:aa:c6:a3:69:eb:d4:2e:c7:a4:1e:c3:d6:a0:d6:
a4:fc:70:b9:dd:6e:de:f0:6f:91:42:01:fe:b0:19:
38:28:a6:a5:5a:9e:47:0b:23:c0:23:ef:93:04:a3:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C6:C7:86:71:72:6E:C7:2D:45:BE:C7:EE:90:EF:4E:6C:E1:DE:BD
X509v3 Authority Key Identifier:
keyid:7B:A8:91:05:46:08:36:5F:B8:EB:23:80:DD:67:00:FD:D3:6B:93:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/e6iRBUYINl-46yOA3WcA_dNrkw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e6iRBUYINl-46yOA3WcA_dNrkw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DC7AB/2B4A370E99EA11ECAD087A6A5A40D577/16CB7A5899EB11ECACD0636D5A40D577.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.3.162.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:97:48:88:cc:48:58:98:dc:bf:91:ca:e8:e5:56:d1:fb:86:
0b:18:91:ff:38:d1:63:cf:75:48:41:70:c8:e8:df:53:96:8a:
ea:a8:6a:4a:41:cb:cf:1d:c7:3f:45:85:08:93:27:ce:75:a1:
7e:48:4b:89:ea:25:6c:5b:f0:09:fd:91:95:f1:45:49:bf:31:
da:4b:53:29:cb:df:9a:88:8a:1a:e2:28:85:f9:92:39:6c:e7:
6e:59:39:c4:49:34:3e:1c:b4:5d:df:59:dd:4b:8b:15:82:30:
9b:70:6e:f9:8e:55:f1:c2:93:1e:af:0d:a1:5e:a5:48:a5:45:
7a:90:34:95:34:d1:ba:e4:7e:12:fd:04:77:e0:75:09:e2:10:
d4:2a:c2:27:da:4d:ba:59:52:77:a6:4f:74:60:50:2e:61:7c:
d3:2a:9d:74:d5:78:fd:fa:d1:9a:41:37:4c:eb:6c:ab:81:64:
64:3c:e1:78:2e:f0:63:27:49:60:79:c0:d0:21:34:44:cc:f7:
52:56:4d:a0:1d:32:f5:ff:2c:ba:0a:f3:65:7f:77:2a:33:8c:
9d:c9:34:2b:bc:7d:93:9b:34:08:3f:a0:25:1a:84:9b:cb:49:
24:aa:77:ab:b0:e9:a6:b1:68:df:99:f9:cf:10:c8:5e:57:ba:
63:00:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:29 2024 by rpki-client on console-ams.rpki-client.org