Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/0193F69A532F11EC9ACDB21DD8A014CE.roa
File: 0193F69A532F11EC9ACDB21DD8A014CE.roa (raw, json)
Hash identifier: iI3TqolSTdmVetsfOW0QQOug0jNNQHUuD4Xvi/Pq7D4=
Subject key identifier: F5:A9:35:BA:B2:D4:CC:CB:54:AA:A2:82:DD:62:0D:2E:38:31:60:C0
Certificate issuer: /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial: 0D
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/0193F69A532F11EC9ACDB21DD8A014CE.roa
Signing time: Thu 02 Dec 2021 05:16:30 +0000
ROA not before: Thu 02 Dec 2021 05:16:26 +0000
ROA not after: Thu 02 Dec 2049 05:16:26 +0000
asID: 327979
IP address blocks: 154.66.196.0/24 maxlen: 24
154.66.197.0/24 maxlen: 24
154.66.198.0/24 maxlen: 24
154.66.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Validity
Not Before: Dec 2 05:16:26 2021 GMT
Not After : Dec 2 05:16:26 2049 GMT
Subject: CN=61a856ae-692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:17:26:51:07:22:04:03:fe:6a:36:da:87:
35:f5:af:3d:13:73:9d:98:7e:93:ba:70:e7:f8:51:
37:72:79:fa:3b:d1:dc:ba:9d:82:d6:9e:77:f8:d8:
15:30:5d:0d:d1:06:a6:d6:85:bf:22:a2:a1:62:2f:
2f:7b:38:91:64:cc:b5:02:72:6e:97:60:49:81:0f:
42:0f:42:a6:03:20:97:44:3d:80:82:37:92:25:fb:
5a:65:6d:fb:6d:a7:9e:19:34:43:b6:d8:5d:6e:a5:
68:42:ea:2d:42:1b:83:a6:39:f7:e2:c7:8b:e1:01:
96:ae:b9:6d:68:40:4d:13:25:1e:87:6b:d2:49:da:
b1:74:a6:6c:5b:68:34:2e:01:b0:ae:2d:2f:2f:3f:
69:f1:55:86:a6:99:be:57:39:4a:14:91:6b:67:dd:
51:3c:8e:24:01:4f:22:f7:e8:98:9f:b8:3a:25:37:
48:bb:c0:8b:f3:e0:f8:ab:36:86:3c:4b:89:35:89:
62:c8:4e:a5:25:52:fa:4f:05:74:03:37:e3:4d:ad:
a9:73:1d:a3:3c:57:51:b5:fd:6d:7c:f7:15:98:5e:
34:b0:ab:55:ad:97:dc:94:9d:32:e7:c6:bb:05:b2:
60:2b:e4:0a:ea:d9:eb:58:73:8f:92:80:93:80:6f:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:35:BA:B2:D4:CC:CB:54:AA:A2:82:DD:62:0D:2E:38:31:60:C0
X509v3 Authority Key Identifier:
keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/0193F69A532F11EC9ACDB21DD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.66.196.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:78:9a:80:c7:e2:c0:a0:3c:c5:72:97:17:e4:2a:ec:9e:e6:
80:26:93:04:a1:b9:55:b5:02:86:c8:9c:99:b7:17:d4:8d:69:
39:80:51:12:dc:7b:db:fb:28:e5:70:20:13:82:52:23:c4:89:
d4:ff:79:0d:99:c5:60:59:6a:7a:2e:83:f8:67:ec:16:b0:ef:
4c:d9:f4:70:7b:2f:a6:15:a2:7c:d9:53:dd:63:4b:0b:5c:e1:
57:c7:21:90:43:8d:e4:fe:45:5c:7d:17:ff:3e:a3:df:ec:83:
96:f7:9f:55:93:87:45:09:32:29:9e:12:c4:90:32:97:40:55:
f4:2f:cb:10:4e:48:fb:3e:7d:3c:a1:74:28:0c:d3:77:e7:ce:
8d:7f:d4:d0:42:80:77:e3:53:5d:5d:12:b2:32:48:60:34:12:
ad:55:01:35:69:72:62:e1:85:48:74:3b:d2:d3:d7:71:49:2a:
d8:09:56:95:14:56:39:32:30:54:4c:bb:25:13:12:9e:a7:09:
e1:dc:7b:ab:3b:57:d7:1a:5f:06:b2:a1:ac:73:7d:bb:e2:f0:
fd:14:ef:62:eb:e0:fc:35:52:8b:f7:da:d6:7c:39:6b:e6:0c:
dd:5f:e6:f3:b8:da:dd:ed:9f:b7:33:cd:b7:38:e6:bc:59:c6:
e4:0e:45:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org