Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/C4FA7896D03C11EBA8661749F8AEA228.roa
File: C4FA7896D03C11EBA8661749F8AEA228.roa (raw, json)
Hash identifier: jwtHTncC31IOpjtFvay6E41Imtg2OhsGMmhIT7FmeKQ=
Subject key identifier: 9C:C3:65:46:74:BE:A5:83:1C:BF:70:BA:CC:05:39:78:8D:65:25:51
Certificate issuer: /CN=F3627EC7AF/serialNumber=16F298A5700A954AF7548360EE40312B4415F289
Certificate serial: 0F
Authority key identifier: 16:F2:98:A5:70:0A:95:4A:F7:54:83:60:EE:40:31:2B:44:15:F2:89
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/C4FA7896D03C11EBA8661749F8AEA228.roa
Signing time: Fri 18 Jun 2021 13:54:59 +0000
ROA not before: Fri 18 Jun 2021 13:54:54 +0000
ROA not after: Mon 30 Jun 2025 13:54:54 +0000
asID: 29918
IP address blocks: 197.211.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627EC7AF/serialNumber=16F298A5700A954AF7548360EE40312B4415F289
Validity
Not Before: Jun 18 13:54:54 2021 GMT
Not After : Jun 30 13:54:54 2025 GMT
Subject: CN=60cca5b3-a18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:f3:b7:03:cb:d8:d5:32:e4:28:3a:d1:7a:
b2:dd:8f:d2:65:03:65:15:7d:69:23:4f:39:2c:43:
68:04:bd:f1:6c:dc:6e:8e:ca:ae:22:64:24:3b:2f:
a4:6d:bd:b9:29:6d:86:e0:b9:37:ea:79:a6:ae:73:
b7:6f:68:ae:a1:ca:a5:f4:cf:cb:21:83:63:44:4f:
85:46:28:2c:8e:cc:1a:bd:e5:66:23:84:73:51:a8:
4f:f1:ac:d0:e6:35:cc:71:df:66:f0:2a:12:e0:99:
eb:28:c2:9d:40:8c:a9:5e:81:5d:32:7b:f9:80:24:
9a:1b:9f:28:f0:ee:5c:2c:93:03:e9:f5:78:df:2f:
1c:da:d7:9e:71:f1:1e:13:42:2d:85:74:43:47:f8:
73:59:41:8a:30:8d:ef:a2:3b:fa:52:13:69:b4:68:
91:b6:66:c9:16:e6:8b:15:52:b5:d3:d8:bd:3f:d5:
ce:e8:36:d7:2f:24:e0:2a:4c:85:d4:7a:91:c7:4c:
c2:4d:b2:67:ea:5b:ed:a7:22:ac:d3:05:01:58:7e:
08:9e:79:65:5a:30:eb:c7:45:bf:13:34:05:8f:6f:
a2:c5:5b:d3:e4:1b:ac:1f:8e:b7:30:ab:6c:9c:43:
44:f2:a8:58:ab:dd:c8:7d:b1:10:26:12:d0:1f:ed:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:65:46:74:BE:A5:83:1C:BF:70:BA:CC:05:39:78:8D:65:25:51
X509v3 Authority Key Identifier:
keyid:16:F2:98:A5:70:0A:95:4A:F7:54:83:60:EE:40:31:2B:44:15:F2:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/C4FA7896D03C11EBA8661749F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.211.64.0/19
Signature Algorithm: sha256WithRSAEncryption
44:4c:5a:aa:cd:57:33:bf:e9:52:1f:90:73:b4:27:c5:d0:3a:
96:eb:97:3e:86:8b:5b:b4:11:10:9b:3d:ec:24:c2:dd:81:27:
1f:50:a6:bc:50:97:d4:49:2a:65:66:69:f7:2e:87:35:64:2a:
31:76:06:90:7e:3f:d4:8c:3c:34:94:b6:19:56:76:de:12:8d:
8b:0b:7d:78:a5:ae:75:6c:f6:35:a6:9a:41:f2:79:03:ed:65:
71:35:f9:66:e5:71:dc:90:c1:af:48:e3:27:f8:3b:b1:2e:6e:
21:a2:ee:f6:93:22:e1:9c:00:aa:9b:73:ea:70:a9:cd:fe:11:
15:09:c1:3d:9d:a6:34:ae:04:49:33:8a:bb:17:75:a2:00:91:
a4:bb:be:0d:66:b3:9b:82:12:ae:76:29:bc:e5:9c:77:08:84:
1d:d3:50:ca:bb:18:5f:90:07:90:15:e1:c2:76:18:2e:31:5a:
bc:7b:90:1c:aa:b1:58:fd:be:1f:9e:77:b1:d6:85:23:d8:94:
42:b0:80:61:64:b1:0d:1c:bf:7e:37:6f:22:51:0c:93:91:7e:
d0:8e:eb:f1:71:db:c9:2b:cc:3a:a4:4b:4f:bf:9d:9c:ba:e6:
2f:7c:ea:ad:09:bd:f3:a8:58:80:b5:37:85:d7:a2:ed:49:26:
a6:c8:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:38:33 2024 by rpki-client on console-fra.rpki-client.org