Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/E0D747A87C2811ED97EC03DEF1222468.roa
File: E0D747A87C2811ED97EC03DEF1222468.roa (raw, json)
Hash identifier: KuxC2oW0LJganBPkuHcCbqhMMXwVkPZeWM7/glv9ahM=
Subject key identifier: 20:8C:29:95:7B:A2:20:97:A9:FC:09:F2:F3:42:F1:3D:0C:0A:DE:53
Certificate issuer: /CN=F361C3A1RI/serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
Certificate serial: 0600
Authority key identifier: EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04
Authority info access: rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/E0D747A87C2811ED97EC03DEF1222468.roa
Signing time: Thu 15 Dec 2022 03:30:53 +0000
ROA not before: Thu 15 Dec 2022 03:30:49 +0000
ROA not after: Wed 15 Dec 2032 03:30:49 +0000
asID: 36915
IP address blocks: 194.9.82.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1RI/serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
Validity
Not Before: Dec 15 03:30:49 2022 GMT
Not After : Dec 15 03:30:49 2032 GMT
Subject: CN=639a94ed-12d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:79:b3:b4:82:37:21:28:29:6b:ee:3d:11:
bd:a4:0b:74:49:42:cb:b6:d0:d8:a1:3e:b3:71:b5:
77:a8:9e:5d:3b:83:73:fe:cd:87:ed:a9:fa:fa:80:
71:37:54:85:a7:fc:1d:f4:b4:7d:15:07:3a:70:88:
6d:6a:27:ec:a5:83:04:44:68:65:c3:37:74:ca:87:
0f:f5:d2:b3:dd:5f:27:c8:23:dd:51:98:5d:73:f8:
fb:d1:4e:6b:98:94:33:a3:b6:49:ee:7a:39:c3:48:
b5:ef:4e:d7:ed:97:9d:36:02:ac:cb:8f:ac:2f:53:
e5:83:12:50:c6:38:dc:16:eb:c3:dc:31:29:99:22:
6c:34:4d:03:02:79:62:53:a5:40:dc:e6:75:26:20:
89:9f:53:44:2f:e4:f0:b2:47:e6:bd:d3:b9:cb:5c:
ba:79:00:a0:69:61:a8:43:7f:f9:71:4e:93:aa:44:
2f:18:59:8e:45:fa:ef:44:41:11:b9:3c:33:6c:9f:
6e:b6:d4:35:29:d0:15:59:f1:55:2b:ab:30:43:79:
87:f6:79:aa:2a:31:08:4f:c1:6f:1a:a5:fd:fe:e7:
c3:60:74:e7:13:3c:7e:91:49:18:cb:8e:4a:7f:10:
c8:1c:1d:f8:c4:a4:e6:46:0b:77:80:4e:62:bb:0d:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:29:95:7B:A2:20:97:A9:FC:09:F2:F3:42:F1:3D:0C:0A:DE:53
X509v3 Authority Key Identifier:
keyid:EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/E0D747A87C2811ED97EC03DEF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
194.9.82.0/23
Signature Algorithm: sha256WithRSAEncryption
19:f7:4c:ad:1e:6e:b5:a6:fd:77:35:3b:ac:f0:51:85:ec:41:
ca:37:ed:98:ab:1f:5e:e4:ac:87:4b:98:80:e4:26:7a:9c:28:
54:be:1f:99:6c:c4:b7:9f:21:f1:24:59:c1:4c:93:24:3f:ec:
2e:85:fe:a1:37:d6:26:94:f7:90:aa:eb:74:92:4a:01:ef:ed:
01:f1:41:8c:2f:6c:fe:ea:c9:4a:7d:6e:34:bc:c3:2a:a5:b0:
20:8e:36:d8:ba:90:bc:e0:07:48:6f:60:e2:57:55:69:0a:ed:
5c:08:df:9a:35:b1:18:1b:9b:0c:5b:ef:7c:92:1f:62:89:a2:
74:e4:c7:97:bc:a5:12:59:9a:b4:75:a9:80:c6:1d:e4:1c:65:
5c:59:95:74:85:e2:21:81:79:0b:b6:ad:92:b9:8e:a7:36:2a:
99:d5:68:68:30:d1:43:d3:fe:ba:a6:3a:db:56:ca:16:d2:dd:
d7:73:f0:4d:60:d4:69:1e:ee:5d:a6:ab:7e:f9:e7:d2:f6:5c:
7b:37:84:ab:f4:b9:20:67:23:a6:3a:25:ec:9d:51:cd:f8:56:
b0:ec:b3:69:a4:cf:78:40:75:72:3c:f1:5e:ef:77:40:1b:94:
c0:39:12:1a:89:d3:38:e3:81:20:ad:ab:45:6f:3a:e5:36:df:
df:ff:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org