Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa
File: 9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa (raw, json)
Hash identifier: ic/Fv7vDPLdwq215X1uSW0oAemEyGKLMsbDQyRvHOkE=
Subject key identifier: C2:40:E7:D0:0F:C8:60:BD:EB:26:30:87:F6:3E:A0:E0:7F:56:8A:62
Certificate issuer: /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial: 03F7
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Authority info access: rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa
Signing time: Thu 06 Jul 2023 12:50:01 +0000
ROA not before: Thu 06 Jul 2023 12:49:57 +0000
ROA not after: Sun 06 Jul 2025 12:49:57 +0000
asID: 21003
IP address blocks: 62.68.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 25 Jun 2024 00:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1015 (0x3f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Validity
Not Before: Jul 6 12:49:57 2023 GMT
Not After : Jul 6 12:49:57 2025 GMT
Subject: CN=64a6b879-1518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:b8:02:b5:60:25:d7:7c:fc:af:66:4d:8b:
f1:27:bf:42:74:5f:5d:05:1d:5f:c0:b2:57:cb:af:
44:fa:b2:96:b9:66:e3:ba:c4:7d:e6:44:4a:e7:7d:
ad:1d:4c:6d:42:0b:42:dc:30:97:04:58:00:da:89:
ca:9a:8d:fd:a8:8f:8b:83:1f:30:1b:bd:33:51:69:
36:c5:16:10:08:5d:ff:8b:ba:95:84:d4:87:52:38:
b6:8e:22:84:94:1e:34:1d:db:78:68:b2:d0:ff:5c:
74:8b:32:b6:ff:a8:3a:bb:51:f7:03:54:ed:ee:0d:
36:1b:e5:8f:9c:3c:03:df:e3:76:3e:a2:66:be:51:
9b:1b:7b:f9:d1:e7:54:65:ea:dc:b9:aa:05:de:2e:
1b:29:3f:4a:61:32:49:0e:79:ba:20:1a:4c:a7:86:
32:6f:5f:00:3f:16:11:0a:34:e3:81:c5:8e:94:4c:
6f:5b:ec:14:fe:49:52:b8:c6:86:af:e1:70:8f:98:
91:3c:46:2c:23:dc:2b:38:28:9a:a2:20:eb:00:0c:
84:11:74:15:55:55:09:c9:75:3a:ec:3f:99:30:dd:
a8:98:72:94:49:ae:fe:41:f3:b5:95:11:5f:66:4d:
6b:c4:4f:76:7b:e5:f2:18:38:05:96:5f:be:fc:17:
41:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:E7:D0:0F:C8:60:BD:EB:26:30:87:F6:3E:A0:E0:7F:56:8A:62
X509v3 Authority Key Identifier:
keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.68.32.0/19
Signature Algorithm: sha256WithRSAEncryption
49:12:7c:1c:74:7e:cc:7b:5a:b4:4c:c1:ea:96:88:d5:1b:0f:
0f:96:8f:57:e7:22:d1:05:2d:e5:6a:95:1d:ad:3b:bc:af:96:
24:8d:73:89:d8:6f:1b:11:95:92:dd:a8:c8:c3:8e:13:17:8b:
a0:c0:48:ef:94:ba:13:41:92:e0:62:0e:e5:6f:72:d9:e1:3e:
c5:bb:af:38:43:4d:c2:ed:85:a7:e9:45:f8:6a:56:47:5f:86:
87:71:82:75:4f:d7:5c:da:ab:4d:14:f3:1e:e8:10:7b:60:9f:
d6:5a:62:3f:69:9e:bf:3f:f3:39:68:08:f2:1e:09:68:75:6e:
08:ce:08:91:e6:d7:07:39:3c:2a:f4:f3:21:37:fd:bd:83:64:
cd:0a:3a:6d:db:13:d2:85:82:6c:93:3c:04:cf:ad:00:c1:4d:
18:b5:4a:95:cc:ea:08:61:48:57:17:69:42:95:f4:47:45:5a:
ed:5c:96:bf:86:02:b3:5e:86:77:e5:bf:07:e8:77:dd:2d:41:
95:72:b1:4d:ce:4b:d6:de:73:03:17:17:0d:a7:21:c4:89:1e:
f0:b8:10:9b:00:19:ea:00:27:19:00:b9:ab:9c:70:57:c9:68:
ee:ce:2b:0e:8c:5d:1f:d6:82:5b:c9:aa:97:1f:79:e6:95:34:
84:a9:40:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:50:42 2024 by rpki-client on console-fra.rpki-client.org