Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/040A9D2CA95211E9BA19AD69F8AEA228.roa
File: 040A9D2CA95211E9BA19AD69F8AEA228.roa (raw, json)
Hash identifier: d5eKRJswPQOdst1U1f3S5KMf2lH/jWZCYOfKv1LJoCI=
Subject key identifier: B4:85:5D:3A:76:6C:33:4E:DE:61:66:13:67:56:AF:D2:14:A1:C5:B9
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 39
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/040A9D2CA95211E9BA19AD69F8AEA228.roa
Signing time: Thu 18 Jul 2019 11:48:54 +0000
ROA not before: Thu 18 Jul 2019 11:48:48 +0000
ROA not after: Wed 18 Jul 2029 11:48:48 +0000
asID: 0
IP address blocks: 196.60.52.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Apr 2024 00:04:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Jul 18 11:48:48 2019 GMT
Not After : Jul 18 11:48:48 2029 GMT
Subject: CN=5d305ca5-9e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2d:93:a5:65:e5:38:2c:ee:a1:96:88:a8:f6:
06:15:6c:4a:9e:39:70:f5:20:a8:24:c5:19:53:3a:
7d:7e:dc:d3:84:93:ed:ef:68:47:8c:d7:13:ec:43:
fd:d6:ac:f9:ef:4f:e9:94:00:51:86:03:bd:38:94:
6b:cb:96:c7:9c:37:78:ba:e3:6e:7c:b7:35:ab:ac:
64:3d:14:d3:11:fb:b4:eb:a0:e0:9f:36:c4:19:52:
41:28:bf:f6:b0:79:57:1a:2f:14:9a:77:99:e2:cd:
3a:fe:44:b2:4d:c0:7b:3c:94:e6:fa:61:76:96:7e:
83:9c:42:7b:8b:b4:14:91:21:0b:67:96:35:3a:0f:
6c:f3:ba:50:e5:5d:80:e3:e7:99:90:7f:b8:bb:6c:
a4:5d:75:a4:f3:25:83:ea:98:69:49:84:cc:dc:3a:
4b:df:92:cb:aa:01:84:91:9f:71:c2:e5:92:17:30:
57:26:0e:15:cd:42:5c:81:ea:e3:9a:3b:55:28:f8:
38:f3:46:0e:ec:c7:ac:89:64:e5:4e:eb:ad:03:db:
78:13:ac:6c:36:1c:0d:2d:61:88:1e:47:2d:3b:fa:
93:72:ad:bf:ae:be:03:cf:3d:c0:c4:23:22:41:d0:
76:0d:f5:6c:74:38:a6:fe:71:f5:20:72:b6:e3:c1:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:5D:3A:76:6C:33:4E:DE:61:66:13:67:56:AF:D2:14:A1:C5:B9
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/040A9D2CA95211E9BA19AD69F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.60.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a0:b8:65:9e:15:34:c8:44:7d:ae:6b:f1:2b:ac:38:28:55:
8a:fb:4a:12:84:f8:a5:2d:2e:2e:39:c5:19:3d:1c:9c:44:c9:
9b:25:21:3a:d7:68:b7:ca:18:01:5e:88:6c:2f:09:0a:67:d9:
67:35:72:ae:2c:5a:22:b3:50:88:63:47:ad:d9:94:ce:30:d3:
d1:47:01:a4:d8:66:bf:7a:5c:dc:e5:0b:10:e5:53:74:77:dc:
dc:7e:9e:bb:92:52:50:aa:9b:be:90:64:32:98:20:53:73:dc:
ff:de:d1:31:62:9f:47:4e:f6:c7:7d:d8:ba:95:0d:b8:3a:72:
21:45:c1:21:5a:62:ae:d5:75:75:16:28:5d:ae:c8:45:1f:12:
dd:12:d9:e5:20:39:df:55:15:20:c5:36:e5:d8:8e:13:66:0d:
cf:08:e7:a3:87:a0:19:c3:79:96:4b:84:8a:b8:da:7d:72:eb:
d8:f1:3f:08:75:b5:e7:a7:f5:e6:d2:d3:7c:e4:5f:96:ce:bb:
15:aa:47:5b:a6:a2:dc:27:01:e0:c5:d4:73:7b:29:34:a0:20:
0b:54:a0:f5:ba:b2:73:62:02:d3:bd:d7:a3:2e:bf:cd:a9:de:
8c:f0:d3:95:a7:70:ee:6f:81:b8:74:d1:d1:ab:f0:89:bb:ed:
53:ca:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 01:48:57 2024 by rpki-client on console-fra.rpki-client.org