Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/6EE63CF0CAC511EBB74A097DF8AEA228.roa
File: 6EE63CF0CAC511EBB74A097DF8AEA228.roa (raw, json)
Hash identifier: WPe/RcweAEsw7x1mmDsXfOpYOObfldXDxTckbMWoLT4=
Subject key identifier: D4:AC:C7:B4:1A:A1:CB:9A:11:FD:00:93:6A:33:6A:F7:6D:CD:D5:56
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0720
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/6EE63CF0CAC511EBB74A097DF8AEA228.roa
Signing time: Fri 11 Jun 2021 14:58:08 +0000
ROA not before: Wed 23 Jun 2021 14:58:03 +0000
ROA not after: Wed 25 Jun 2025 14:58:03 +0000
asID: 11845
IP address blocks: 197.245.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 08 May 2024 00:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1824 (0x720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 23 14:58:03 2021 GMT
Not After : Jun 25 14:58:03 2025 GMT
Subject: CN=60c37a00-514d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:41:90:a8:4d:cf:ea:88:7f:cd:c4:cf:e0:
61:c7:bc:9e:98:70:1d:73:0a:a9:2d:f1:7a:11:64:
ae:ef:e9:0e:3b:bd:05:a8:af:10:8a:1a:73:ba:d5:
42:fa:f9:b0:16:04:e2:bf:c0:1e:9a:fa:dd:1f:2e:
83:24:39:50:e9:be:9c:90:63:27:bc:ba:85:85:22:
03:ab:b7:a1:1f:e6:cf:cf:25:bd:41:98:1e:af:de:
e1:7d:3b:a6:99:a2:cc:7e:a7:c4:73:98:92:ca:72:
34:1e:a9:58:50:77:dc:ed:a8:9f:9b:18:72:d0:68:
fa:83:67:ed:7e:06:08:8d:5d:e1:98:29:25:fa:60:
b6:d2:b2:53:9f:de:1b:56:92:d4:ed:b3:12:54:2c:
19:5f:16:c3:d5:17:f7:eb:07:8b:65:5d:25:41:c5:
cf:6e:43:68:a5:75:69:78:8d:a4:35:c2:e8:b6:1e:
5b:f8:35:f1:b4:bc:e2:28:27:ad:15:91:2a:81:21:
99:fa:a3:c5:56:21:06:01:d1:2c:d9:23:d8:92:e2:
e8:bc:24:4d:38:f6:4b:44:b1:11:80:70:d8:8c:29:
e0:a5:1c:df:62:4e:ae:16:65:4d:51:a4:90:a9:9e:
ae:ee:64:69:af:35:0c:ae:80:7b:e1:0f:34:b6:43:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AC:C7:B4:1A:A1:CB:9A:11:FD:00:93:6A:33:6A:F7:6D:CD:D5:56
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/6EE63CF0CAC511EBB74A097DF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:e9:a3:9e:93:3c:3c:dc:84:e8:d3:8f:3e:ef:01:8d:1c:60:
e1:4e:e7:26:c7:a1:fb:b8:08:71:10:38:c5:59:d6:55:72:32:
23:1f:fc:6b:03:2c:3c:2a:26:6b:fb:a3:41:7f:22:44:88:61:
af:11:a0:cd:89:95:92:78:33:be:8d:e4:8d:89:e0:fe:1c:b5:
42:08:ac:ea:62:39:f2:16:44:5b:53:3a:ed:30:34:55:2a:2b:
be:40:06:a8:27:a2:97:85:fe:ad:e5:1a:66:e4:72:a9:de:47:
95:2d:7e:90:6f:2b:28:db:cb:f4:66:7c:28:34:0f:e2:0e:99:
04:73:8b:93:c6:43:71:d1:ab:51:fa:77:01:15:70:25:c4:8c:
82:d5:10:52:ce:da:e1:83:31:e3:df:17:a6:f1:00:9b:f8:45:
af:40:5f:48:e5:ce:f3:f1:ff:4e:3c:08:29:8f:5f:7d:ae:41:
2b:a0:7f:35:b9:3a:dd:13:c1:fb:f2:c1:9d:82:3a:6c:e7:dd:
e3:85:17:55:b7:7c:43:85:55:97:87:38:e3:0e:b1:7f:7c:c3:
6b:9f:09:8e:c7:2a:87:9a:2c:08:b0:92:e1:1c:c4:89:4d:87:
39:c0:f2:8a:82:69:01:ea:3d:aa:96:5a:b0:80:34:4e:b5:37:
d4:73:44:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:14 2024 by rpki-client on console-fra.rpki-client.org