Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/556811145FEA11EF84A2058A762E951A.roa
File: 556811145FEA11EF84A2058A762E951A.roa (raw, json)
Hash identifier: P0gvfxM0hcVTDkEmLqEkHZpP55/CRPi31FOdnN+KXYg=
Subject key identifier: 6E:68:91:04:0C:54:23:C2:F4:BE:45:A6:F0:C2:B8:2B:3A:B9:66:2D
Certificate issuer: /CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Certificate serial: 02
Authority key identifier: 0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
Authority info access: rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/556811145FEA11EF84A2058A762E951A.roa
Signing time: Wed 21 Aug 2024 18:22:33 +0000
ROA not before: Wed 21 Aug 2024 18:22:20 +0000
ROA not after: Sun 31 Dec 2028 18:22:20 +0000
asID: 36974
IP address blocks: 62.193.160.0/19 maxlen: 24
81.22.64.0/19 maxlen: 23
193.17.215.0/24 maxlen: 24
195.166.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.mft
rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Oct 2024 00:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3619C8CRI/serialNumber=0F5A66D676D16FC7927C4E24694A1E8C77A4406B
Validity
Not Before: Aug 21 18:22:20 2024 GMT
Not After : Dec 31 18:22:20 2028 GMT
Subject: CN=66c63069-27c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:56:6a:55:98:6c:b6:84:07:b9:42:e7:57:
31:b5:9d:f4:55:6f:55:ce:f0:70:ce:0f:68:dd:06:
5f:d5:bc:e6:27:3e:f3:ff:c8:b8:3d:69:bc:be:00:
05:8b:15:93:e3:fe:b4:c1:19:8c:cf:52:26:26:e0:
53:5d:68:91:4d:85:a3:7b:70:07:51:77:c7:57:e0:
22:3d:b7:a8:ae:be:b6:6a:4a:30:11:62:c2:e4:2f:
01:41:8a:f1:73:7b:08:8f:b5:0b:ad:79:10:43:f3:
d0:f6:97:ee:ad:e7:93:9f:9e:6d:58:94:16:74:a5:
02:f7:8f:fe:b6:07:73:24:ca:90:6d:38:da:72:49:
15:33:10:b6:07:b7:4d:c0:84:05:76:8a:03:bd:30:
67:f5:63:c3:3c:c6:1b:05:b2:3d:b0:70:5c:1c:0f:
5b:05:2b:6e:31:9b:66:4d:8f:f5:3e:69:f9:d2:11:
60:bb:4a:98:83:24:a0:08:3c:63:93:c4:6d:dd:e1:
c9:9b:11:8c:76:fe:0c:d5:dc:cd:a8:aa:52:45:15:
6a:86:8a:8c:a5:76:32:58:5e:ba:c4:94:9b:f9:f1:
1a:19:4d:8f:cc:f1:87:2e:98:ea:d4:f5:f8:6b:c3:
d5:b0:16:44:91:45:25:9e:96:59:96:a6:5b:7c:da:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:68:91:04:0C:54:23:C2:F4:BE:45:A6:F0:C2:B8:2B:3A:B9:66:2D
X509v3 Authority Key Identifier:
keyid:0F:5A:66:D6:76:D1:6F:C7:92:7C:4E:24:69:4A:1E:8C:77:A4:40:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/D1pm1nbRb8eSfE4kaUoejHekQGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/D1pm1nbRb8eSfE4kaUoejHekQGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/DE28B16C5FDA11EF8ACEB9A9762E951A/556811145FEA11EF84A2058A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.193.160.0/19
81.22.64.0/19
193.17.215.0/24
195.166.224.0/19
Signature Algorithm: sha256WithRSAEncryption
90:a9:0c:16:1b:75:e9:d7:6a:f8:85:57:38:bd:dc:c3:e4:a6:
a4:5e:5e:d3:44:c8:6b:7f:5e:71:12:91:5a:ba:82:6e:1f:1a:
c7:fc:bf:e9:e4:c6:32:1f:75:7d:87:f7:b7:c0:35:f8:a1:d3:
cf:b7:dc:5f:e4:a5:7f:6b:e0:a3:2e:66:ae:72:19:14:a8:06:
0d:09:a5:52:b0:e5:a5:27:29:f7:94:bd:8d:ba:6a:dd:e5:ba:
5b:cb:47:2d:63:ab:d9:86:e5:2e:43:6e:21:60:f2:66:c8:b4:
91:9c:0e:5a:03:ba:c1:7b:02:00:9e:f7:f8:47:00:f8:19:b5:
f0:fd:f2:be:2a:b6:a7:0f:79:b2:c0:95:86:62:28:0a:da:f9:
f2:c8:68:81:71:6b:c4:73:85:44:3d:23:ff:7e:67:f2:86:06:
51:8a:fc:7d:70:b7:b8:82:09:67:82:f4:03:af:13:ec:8c:19:
cc:df:7f:74:b6:4b:2e:47:35:79:8b:59:2a:5b:39:29:d7:79:
95:6d:d1:90:3b:69:f5:1e:a3:ae:a7:34:e2:e1:e4:04:39:2e:
87:88:e0:f8:51:5c:c1:a0:ea:00:09:a1:69:41:b8:4c:10:94:
ce:1e:19:04:06:e5:c4:a9:e6:31:f1:96:79:b3:fa:58:0f:db:
dd:21:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 06:21:06 2024 by rpki-client on console-ams.rpki-client.org