Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/EAE45BCCDF6F11E9826AA83AF8AEA228.roa
File: EAE45BCCDF6F11E9826AA83AF8AEA228.roa (raw, json)
Hash identifier: pbv4p9icCN4O4WG3leeCL1EpjVjH0clUw2cLgw9t0TQ=
Subject key identifier: AC:A5:1B:E4:CC:BB:13:65:62:4B:93:FA:57:61:51:B0:EA:D0:33:28
Certificate issuer: /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial: 6E
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/EAE45BCCDF6F11E9826AA83AF8AEA228.roa
Signing time: Wed 25 Sep 2019 08:38:59 +0000
ROA not before: Wed 25 Sep 2019 08:38:54 +0000
ROA not after: Sun 25 Sep 2039 08:38:54 +0000
asID: 327795
IP address blocks: 196.192.72.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Validity
Not Before: Sep 25 08:38:54 2019 GMT
Not After : Sep 25 08:38:54 2039 GMT
Subject: CN=5d8b27a3-faad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:b6:35:e8:48:47:0f:da:4a:17:26:54:7a:
d8:1b:6a:ec:c5:13:ad:b5:3e:60:02:f1:dd:34:50:
11:7a:ca:d6:ec:07:95:cb:9c:9a:1e:e1:ee:dc:83:
b0:f8:fa:0d:9f:ec:62:76:42:73:f5:37:05:05:0a:
6e:f1:33:7c:13:49:60:c1:46:fd:0a:b2:3d:44:d0:
23:58:50:73:e3:64:b9:12:5f:81:f0:4f:e0:84:ff:
28:f8:82:17:be:61:60:7a:25:c9:68:a0:da:a1:e0:
f5:1a:c3:6b:59:ae:f2:db:5c:35:34:10:45:f5:4f:
61:21:a8:95:8b:87:4c:18:fc:58:21:63:43:8c:66:
b7:4b:3c:d9:00:67:3b:06:ed:eb:a1:f2:df:96:dd:
63:6c:4e:c1:36:c8:8d:6d:f6:2b:08:9a:cb:b8:04:
c7:d7:39:a1:ce:38:fc:26:71:94:c7:80:7e:02:df:
66:2d:99:c1:31:fd:c6:05:a9:00:f0:14:a4:9d:83:
72:60:23:1f:71:c9:1b:7f:5b:23:1b:5f:8b:bc:28:
64:42:9d:81:54:d0:bb:1e:29:27:9d:88:7e:0b:86:
3f:83:51:69:f5:af:4c:e9:75:8f:29:bd:ae:1a:3d:
37:ba:c2:d1:94:97:5b:15:b1:88:84:f8:cc:39:c6:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A5:1B:E4:CC:BB:13:65:62:4B:93:FA:57:61:51:B0:EA:D0:33:28
X509v3 Authority Key Identifier:
keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/EAE45BCCDF6F11E9826AA83AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.192.72.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:28:42:e3:3c:52:d9:e5:e7:92:04:ca:61:9f:d2:88:98:0a:
50:21:e2:0e:77:0e:d0:b2:bb:c7:03:fd:9c:98:c7:ed:23:7b:
91:3f:b2:22:b6:0f:07:ea:fb:98:93:5d:04:05:36:75:20:ae:
b8:b1:d3:41:8d:79:44:8c:6c:cf:f1:47:f0:2d:83:65:69:21:
d8:48:aa:de:3c:92:5e:4a:5f:78:31:b2:53:16:c8:1c:1b:ce:
4d:b9:b0:38:a3:47:8d:99:5a:47:55:b7:58:1c:21:2a:5b:f8:
d4:86:2c:1e:0b:62:ae:53:03:45:0d:a0:2f:12:7f:08:e0:5e:
a5:47:9d:16:07:37:e7:0f:eb:2f:ba:a7:aa:f2:08:42:97:e5:
45:5f:c5:54:5d:d2:8e:49:8b:ea:0d:59:3f:bf:49:f1:ac:46:
69:a1:c6:1f:63:6a:1d:1e:06:39:ba:ce:19:52:fc:1a:5d:6a:
51:fe:9c:99:4e:16:3f:70:8a:9c:fb:a1:3f:a9:cd:f1:31:04:
a4:d4:61:4c:e2:41:f6:f2:8e:e2:38:43:df:e4:37:5b:b0:84:
5b:e7:51:48:74:7f:37:a4:cc:21:61:08:d1:88:ed:fe:7c:fc:
2d:d2:08:50:77:b4:df:7a:e2:5e:c7:e5:d1:4a:37:6e:33:36:
54:13:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org