Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/967BDEC2CAC611EBB315B07EF8AEA228.roa
File: 967BDEC2CAC611EBB315B07EF8AEA228.roa (raw, json)
Hash identifier: rrwzjMLuJ8XBOJ0Sx6mydLVOYE2Mr2vW7phRspI/eR0=
Subject key identifier: 53:77:BA:AF:7E:AB:52:BF:5C:0C:37:D7:69:16:30:AE:6A:11:4A:3F
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 072E
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/967BDEC2CAC611EBB315B07EF8AEA228.roa
Signing time: Fri 11 Jun 2021 15:06:24 +0000
ROA not before: Wed 23 Jun 2021 15:06:20 +0000
ROA not after: Wed 25 Jun 2025 15:06:20 +0000
asID: 11845
IP address blocks: 196.3.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 May 2024 00:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838 (0x72e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Jun 23 15:06:20 2021 GMT
Not After : Jun 25 15:06:20 2025 GMT
Subject: CN=60c37bf0-6069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:bd:fc:c0:e7:ab:1b:c9:27:9b:73:0e:c8:
7b:e2:f4:48:55:d6:b3:ef:e7:0f:57:b9:56:fb:21:
57:6f:96:b5:99:e8:3a:71:7a:2e:22:ab:05:c3:08:
5d:c3:c3:f1:3f:53:5f:70:81:f6:12:3e:ae:cb:5c:
e6:7e:54:10:33:34:61:69:00:14:ec:20:c9:69:cf:
49:65:71:7b:13:73:06:25:e2:f0:21:82:c6:2e:78:
b4:da:c3:d5:29:7f:c1:5b:37:7d:a8:89:2d:09:1b:
2a:12:f3:64:e2:18:01:b4:33:32:dd:95:62:9a:62:
28:53:d9:2c:44:a7:b3:b3:f8:a1:af:18:6d:f5:d5:
8e:37:35:b9:bd:5a:ff:ba:13:35:73:6b:96:ef:20:
8d:41:f5:c5:67:2f:4f:c1:dc:06:2b:65:bc:85:89:
b8:f5:d4:91:9e:4d:f4:bb:c3:36:ff:48:fb:5f:10:
25:14:61:fe:3e:6d:bc:a9:0f:a6:fe:a7:56:89:2a:
d0:42:7d:69:21:6a:15:7c:c2:90:e8:fe:8d:c0:77:
f9:9b:c9:d7:1f:fa:39:ee:22:f9:66:61:97:49:20:
3f:1a:af:9e:d8:df:06:34:f8:bc:20:41:d6:aa:05:
0a:52:36:8e:ef:0d:6f:18:89:d4:8a:92:22:c0:06:
57:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:77:BA:AF:7E:AB:52:BF:5C:0C:37:D7:69:16:30:AE:6A:11:4A:3F
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/967BDEC2CAC611EBB315B07EF8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.3.164.0/22
Signature Algorithm: sha256WithRSAEncryption
dc:31:01:d7:f0:ca:de:5d:a8:0f:34:dc:d4:9e:8b:18:f2:dd:
84:79:c9:d8:dd:ab:5c:01:e4:d2:a3:86:b1:a1:31:f4:07:00:
48:22:d5:00:01:ab:37:e9:83:87:e2:69:50:11:3a:57:f6:98:
a9:7c:2e:b8:e2:21:77:62:40:be:69:00:89:a7:42:e1:c9:3c:
b9:cc:dc:d8:92:ff:c7:e3:22:31:47:cc:44:28:55:17:28:a4:
46:2d:ca:ed:f0:8b:29:fe:34:0f:53:48:af:96:c6:eb:23:28:
e5:6e:b7:8b:97:4a:34:c8:58:44:09:18:5b:3b:c0:99:3f:30:
b5:a5:4c:ac:5f:82:ad:81:f0:dc:c3:15:80:4a:2e:45:a7:53:
9f:db:61:b3:d0:89:4a:fa:f5:fc:30:ea:f9:28:31:fc:18:87:
16:e8:ea:49:c6:90:18:ac:b2:0f:93:b8:3c:32:9e:c3:89:e8:
05:eb:c4:2c:57:fc:09:32:9f:ad:53:4e:d0:13:0d:f2:55:82:
c0:31:4f:3f:e7:2f:38:7c:aa:4c:13:05:00:5d:f7:65:bd:52:
a0:37:f1:31:3d:20:52:83:39:cf:78:d5:04:39:b3:a1:77:24:
5d:2a:0f:35:20:ae:1f:56:66:ec:55:8e:13:ce:1e:18:f4:63:
07:28:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:22:16 2024 by rpki-client on console-fra.rpki-client.org