Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/D3FB7C1E86F511EA872C9285F8AEA228.roa
File: D3FB7C1E86F511EA872C9285F8AEA228.roa (raw, json)
Hash identifier: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=
Subject key identifier: 66:F8:AC:3A:C2:33:96:8B:C7:75:1D:FD:D7:94:91:5B:74:66:4C:B7
Certificate issuer: /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial: 05
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/D3FB7C1E86F511EA872C9285F8AEA228.roa
Signing time: Sat 25 Apr 2020 13:08:17 +0000
ROA not before: Sat 25 Apr 2020 13:08:13 +0000
ROA not after: Tue 01 Dec 2037 13:08:13 +0000
asID: 0
IP address blocks: 196.60.44.0/24 maxlen: 24
2001:43f8:310::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:04:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Validity
Not Before: Apr 25 13:08:13 2020 GMT
Not After : Dec 1 13:08:13 2037 GMT
Subject: CN=5ea43641-6af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ba:fe:52:77:8d:28:25:41:a6:85:f4:24:cb:
4a:57:75:9f:57:d6:4f:e9:6a:59:8a:56:f7:d4:00:
57:b9:1f:1f:7c:ac:3e:13:88:06:71:17:f0:12:42:
68:d0:1d:98:a0:cd:a4:88:75:fa:33:ec:11:66:9f:
54:7b:13:d0:78:f6:fa:68:88:31:b2:ab:2a:30:ca:
89:82:ee:8f:a3:a1:36:59:64:42:e0:ad:9b:41:3a:
6b:ee:7d:99:c6:52:ac:3b:2d:f3:e4:f9:78:2c:25:
5b:c6:8c:41:23:ce:eb:5e:21:aa:f9:80:a6:f5:86:
4b:02:87:d5:8d:6e:aa:4f:df:a4:0f:fd:67:4b:48:
40:4c:bb:ce:08:bf:79:24:d8:f2:0c:e5:1f:7b:f2:
53:f4:5d:68:40:43:16:bf:78:91:50:59:5e:cb:8e:
02:87:d7:a1:c6:09:f1:41:db:c5:4a:a0:f7:fe:52:
46:a5:87:cd:5e:14:f2:62:0b:29:61:7d:38:c6:53:
80:25:48:41:56:cb:1e:de:a2:2a:66:4b:c1:72:c1:
c8:f5:24:42:1e:7f:f8:eb:18:d6:f3:1a:90:a6:8a:
99:e0:ec:d6:ff:a4:30:52:8e:e0:68:4d:78:45:bf:
e4:9b:0f:8f:68:41:7e:87:f1:55:f7:66:24:6a:21:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F8:AC:3A:C2:33:96:8B:C7:75:1D:FD:D7:94:91:5B:74:66:4C:B7
X509v3 Authority Key Identifier:
keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/D3FB7C1E86F511EA872C9285F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.44.0/24
IPv6:
2001:43f8:310::/48
Signature Algorithm: sha256WithRSAEncryption
b9:a7:14:76:d7:ef:b8:fa:d0:98:7b:f6:2b:c7:16:05:64:17:
52:cf:dd:a1:11:fc:71:de:f4:07:22:c0:dc:1c:be:69:a0:ea:
d9:0d:9b:88:d8:dd:7e:f6:b7:e2:36:56:c2:55:94:bc:b5:87:
7e:ca:54:16:de:28:89:7d:01:dc:8a:fe:0f:e7:bf:cd:e0:77:
70:c9:4c:fc:d0:d2:60:8b:4e:c3:3d:e8:e3:c9:26:6b:1c:36:
3f:12:a8:32:63:d8:13:8c:bb:c5:be:6d:6f:ee:81:94:f1:e2:
81:29:53:f9:9d:ad:92:ed:1d:d2:bd:52:54:e7:35:90:d2:ad:
fe:bf:bf:da:73:a8:fc:24:da:1d:16:05:6d:1c:a8:e9:42:8e:
02:77:97:aa:0b:d3:66:49:9c:ea:72:00:99:ca:34:84:88:12:
9e:b8:a3:3d:c9:06:11:f9:e8:9f:8c:c6:25:8b:c5:98:58:30:
8e:aa:47:fe:ba:6c:0e:43:24:97:cc:22:03:3e:bc:0f:e8:0c:
19:bf:56:e4:71:0e:7d:51:98:ab:0f:a6:a9:5b:aa:34:2b:15:
6c:7f:3d:7b:7a:a5:76:23:97:01:d8:39:ee:ca:ce:ab:d0:0c:
c1:5a:96:f3:19:32:5a:c3:75:e5:e9:3c:c8:a8:47:f3:c8:92:
7d:ae:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:01:19 2024 by rpki-client on console-ams.rpki-client.org