Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/98A7885C8DDF11EE856E001B4AD9E6FC.roa
File: 98A7885C8DDF11EE856E001B4AD9E6FC.roa (raw, json)
Hash identifier: TrALYequ4gbamTwRj8gCMuUP9BJ+K7+H8Khcj3l43ng=
Subject key identifier: E6:62:98:43:6A:FE:B8:21:88:B9:14:A8:43:5F:DE:DD:29:71:B1:2B
Certificate issuer: /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial: 013B
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/98A7885C8DDF11EE856E001B4AD9E6FC.roa
Signing time: Tue 28 Nov 2023 11:16:37 +0000
ROA not before: Tue 28 Nov 2023 11:16:34 +0000
ROA not after: Tue 14 Nov 2028 11:16:34 +0000
asID: 37148
IP address blocks: 197.211.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Validity
Not Before: Nov 28 11:16:34 2023 GMT
Not After : Nov 14 11:16:34 2028 GMT
Subject: CN=6565cc15-75d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:21:21:a4:b5:04:17:2f:4a:04:c9:d4:e1:
b9:08:0b:e7:82:93:52:93:5d:9b:a4:10:4c:4e:d3:
71:22:f3:60:ed:02:c4:20:c4:88:de:5b:1d:37:7b:
7e:99:3d:f7:40:a7:38:8f:ef:2e:67:f7:b3:a8:ec:
4e:d6:a7:01:22:ee:4e:68:4d:e9:26:c2:31:c1:b2:
26:5c:92:8c:2c:e2:e0:b6:81:1e:cb:2e:b3:a8:05:
b1:d4:e8:b7:e7:32:14:aa:b5:87:24:b3:8a:a6:4b:
bd:55:aa:0b:ac:9a:de:e3:10:35:bb:01:8a:a5:f8:
5a:07:8e:49:18:34:47:aa:60:5e:8e:02:5a:3c:b6:
85:7c:c8:7f:7e:d2:e0:25:b3:24:e6:5e:de:f3:e9:
b8:7d:bc:da:95:57:1a:cb:97:57:ff:24:99:27:4c:
89:69:fb:b9:10:2d:88:96:0b:b9:0e:8d:53:32:64:
1f:f0:b4:97:6f:65:0a:17:5b:5d:43:47:47:bc:15:
cd:e2:3a:a5:0b:ef:8e:37:b6:6a:2b:dc:2e:cd:d1:
ea:2c:3a:63:71:fa:0c:82:58:71:db:c0:52:4c:6a:
ce:12:53:98:df:0f:e0:77:01:ed:82:96:68:38:74:
36:ac:be:28:02:a9:15:a1:4f:58:60:4c:43:32:ec:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:62:98:43:6A:FE:B8:21:88:B9:14:A8:43:5F:DE:DD:29:71:B1:2B
X509v3 Authority Key Identifier:
keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/98A7885C8DDF11EE856E001B4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.211.32.0/19
Signature Algorithm: sha256WithRSAEncryption
06:07:00:35:41:83:22:6f:bb:60:c4:bc:0e:55:f6:e5:3e:21:
99:60:68:34:61:70:23:7e:a2:3c:c9:e7:ed:74:05:eb:87:90:
78:03:01:3f:86:e0:b4:ed:08:fe:05:dd:f9:92:fc:9a:d1:a7:
4c:6e:9c:a0:f6:52:38:c6:65:b8:74:ed:ce:48:a6:e5:ec:e6:
e0:d4:e9:63:d1:2c:29:45:0b:e9:a1:c1:89:a0:ac:37:ca:8e:
1b:8c:72:b6:37:62:f2:30:4e:2c:db:65:ac:8d:e6:67:23:fd:
3b:2a:0d:68:8d:3f:8e:c1:22:66:fd:80:7c:15:e8:a6:c4:53:
30:d8:7a:e5:5e:e8:98:24:62:bf:59:ba:70:ba:b6:12:46:d6:
01:7b:39:d8:0d:33:f0:fc:a5:e7:2b:e5:01:b8:69:db:e0:80:
ce:93:ea:e4:af:0e:ae:64:46:d5:eb:48:b0:f8:f4:7c:4e:67:
85:ec:5e:4e:60:97:a4:63:f6:94:00:f1:8b:40:5f:b4:5b:f7:
9c:b3:ca:b6:ce:f6:cd:2f:0d:88:c1:ec:fc:ab:4b:71:ce:6f:
fc:db:db:1a:2e:9e:2b:7c:90:21:75:58:6e:be:5b:a1:1e:69:
41:ce:90:d8:b0:3a:4a:0c:f1:4e:54:67:52:6b:c4:da:18:98:
85:53:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:00 2024 by rpki-client on console-fra.rpki-client.org