Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/833F912AA95111E9AEA64269F8AEA228.roa
File: 833F912AA95111E9AEA64269F8AEA228.roa (raw, json)
Hash identifier: CVPSUPHc97z8+REt/xLFN1h3Agjjhgwt02UGfD7Jtsc=
Subject key identifier: 7A:77:73:7B:61:A6:FF:E5:97:AA:1B:BB:08:E0:F6:19:B4:CE:31:D3
Certificate issuer: /CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Certificate serial: 31
Authority key identifier: 93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/833F912AA95111E9AEA64269F8AEA228.roa
Signing time: Thu 18 Jul 2019 11:45:18 +0000
ROA not before: Thu 18 Jul 2019 11:45:13 +0000
ROA not after: Wed 18 Jul 2029 11:45:13 +0000
asID: 0
IP address blocks: 196.223.6.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49 (0x31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FEA6BAF/serialNumber=93C2C99AF0EC4D1A4643497F5F8CBDC7EC45748F
Validity
Not Before: Jul 18 11:45:13 2019 GMT
Not After : Jul 18 11:45:13 2029 GMT
Subject: CN=5d305bcd-c405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:7c:8f:a9:ea:96:16:19:54:c7:ea:6a:1f:
d9:21:8f:04:f0:cf:d6:ae:21:16:01:ee:53:94:09:
ee:df:8e:56:7b:4f:a0:fe:a5:6b:67:b5:32:da:23:
74:c4:2b:58:d2:1c:63:aa:4e:82:43:ee:55:23:42:
28:2f:41:c1:f8:43:0c:af:47:2c:22:b2:ee:4c:4c:
de:fc:46:38:65:0b:1e:cc:48:03:63:b0:42:4a:8a:
b2:2b:7d:04:7c:63:1a:66:0e:92:15:12:12:62:e6:
59:e7:18:34:87:7b:1a:0b:b1:db:01:d3:29:d7:ab:
06:90:d9:53:28:08:e2:84:73:19:d5:3f:6a:35:00:
9c:ef:61:fd:4a:a3:6f:29:7a:e0:06:9e:23:50:e3:
af:2c:12:c5:8b:b1:a0:56:6c:45:dd:6f:36:af:d6:
28:a8:ae:49:32:a6:8b:ef:db:9a:7c:06:82:48:af:
4d:5e:9c:ad:da:e8:52:0c:19:9e:67:02:31:5b:30:
c1:00:96:1c:ad:84:ec:93:3a:5c:0d:b4:c8:65:ad:
ff:21:ba:c5:0d:39:7b:71:da:9b:cf:c0:21:87:59:
50:2d:00:bb:a0:dd:63:e8:d4:a7:ed:3c:e9:e2:88:
c6:83:03:30:8d:9c:a6:b9:a0:a6:a0:47:f7:cc:5a:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:77:73:7B:61:A6:FF:E5:97:AA:1B:BB:08:E0:F6:19:B4:CE:31:D3
X509v3 Authority Key Identifier:
keyid:93:C2:C9:9A:F0:EC:4D:1A:46:43:49:7F:5F:8C:BD:C7:EC:45:74:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8LJmvDsTRpGQ0l_X4y9x-xFdI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FEA6B/7B27920E8B8211E9888B6F73F8AEA228/833F912AA95111E9AEA64269F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.223.6.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:6b:d7:46:ec:03:82:a8:29:a3:98:c1:65:6e:c0:8d:04:0a:
10:29:45:8b:e4:cf:91:57:f8:90:43:1b:da:3f:f0:dc:e6:4a:
65:ca:cb:f9:e8:14:51:70:b7:c9:56:88:15:67:42:69:7b:84:
34:0b:10:50:73:5a:00:a9:bc:2b:25:de:df:7b:83:a4:ea:38:
c8:45:de:da:ad:07:d2:26:5d:f7:ff:e0:e9:db:a7:23:6e:b4:
3f:49:2c:de:25:30:99:b4:34:10:b1:60:4d:9e:cd:d8:62:4e:
c1:49:f0:aa:10:9b:82:6f:f0:8e:1e:72:f6:cb:4a:3a:78:4e:
d8:36:c4:51:36:f9:01:c2:31:9f:b4:0a:d5:6b:76:38:57:13:
65:59:ff:18:2e:70:f5:22:7a:e9:09:59:3f:7d:3b:1f:aa:15:
0b:6c:cc:15:17:45:94:48:1b:a5:4f:c7:15:66:67:c4:0b:e8:
83:5c:a4:ce:fe:0b:39:e5:eb:ff:3b:95:c6:33:cb:d6:18:ba:
7d:84:32:d8:e0:42:cd:ca:35:ef:f5:ef:94:7d:b2:62:31:79:
38:70:7a:aa:52:0c:27:1d:bb:c6:2c:00:06:69:1e:04:ae:ab:
3c:5f:19:ea:52:db:be:ac:4a:38:9a:e5:96:d8:76:2f:9f:ef:
18:cb:da:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:14 2024 by rpki-client on console-ams.rpki-client.org