Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/AA2ED722D22511EDA73BE0D2F1222468.roa
File: AA2ED722D22511EDA73BE0D2F1222468.roa (raw, json)
Hash identifier: Bz6y/9VDXHlj+h8pTwHUCwEbbK4O3DXKaYbf9T3u4Kk=
Subject key identifier: 2F:28:73:F4:2F:48:A0:95:68:94:7E:01:5C:77:14:49:A8:74:E1:4A
Certificate issuer: /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial: 0B0A
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/AA2ED722D22511EDA73BE0D2F1222468.roa
Signing time: Mon 03 Apr 2023 13:44:33 +0000
ROA not before: Mon 03 Apr 2023 13:44:30 +0000
ROA not after: Wed 01 Dec 2049 13:44:30 +0000
asID: 0
IP address blocks: 196.60.120.0/24 maxlen: 24
2001:43f8:690::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 27 Apr 2024 00:04:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2826 (0xb0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Validity
Not Before: Apr 3 13:44:30 2023 GMT
Not After : Dec 1 13:44:30 2049 GMT
Subject: CN=642ad841-85bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:54:d0:eb:ee:e7:db:a3:f5:02:7a:85:2b:
ad:34:e1:a6:df:0f:9f:0c:28:cb:d4:ee:e6:b7:8e:
2f:23:a7:2d:5e:98:06:e2:d9:db:14:d8:76:09:43:
56:88:fc:d9:e4:fd:6c:aa:fa:71:05:24:5f:7a:e5:
4c:22:2a:e2:99:50:48:fb:a1:43:12:39:d9:f6:93:
74:41:59:18:09:77:d7:c9:12:64:7a:dd:c6:79:93:
0f:a5:6b:dd:ff:fb:2b:1b:ee:c3:d6:d6:b4:be:32:
24:48:bb:ec:00:9f:d0:61:c5:ed:c8:bc:27:93:1d:
9d:a0:7a:00:06:e9:52:15:75:5a:82:64:c2:ad:2a:
0b:da:f0:fc:dc:36:02:0c:2f:d9:62:2c:87:af:62:
8c:f7:ff:3d:89:a9:a8:f6:d0:b5:72:91:fd:56:31:
d0:5b:0b:3a:75:b3:48:39:cd:90:70:38:3c:3d:11:
c1:70:63:d0:9b:1e:c0:02:a0:d4:75:c6:6c:c9:b1:
8a:cd:a0:d6:6d:fe:bf:fd:a0:01:95:57:f9:16:cc:
b9:18:a7:3f:52:7c:28:41:14:e4:69:7a:f2:c8:4e:
83:bd:05:e5:db:d2:55:f6:da:e2:4c:c1:f8:bb:42:
69:c8:c2:33:96:fa:2d:dc:45:c4:ac:e2:bb:62:08:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:28:73:F4:2F:48:A0:95:68:94:7E:01:5C:77:14:49:A8:74:E1:4A
X509v3 Authority Key Identifier:
keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/AA2ED722D22511EDA73BE0D2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.120.0/24
IPv6:
2001:43f8:690::/48
Signature Algorithm: sha256WithRSAEncryption
1b:2f:e1:eb:bb:2c:37:5a:bd:94:ff:07:15:9f:12:2f:1e:a5:
a8:ed:f2:e6:a7:c7:49:c9:83:2c:17:1d:b6:c7:a1:64:8b:46:
57:86:8c:87:01:f6:b5:33:15:ac:04:a5:f6:82:d8:a5:fb:24:
f2:53:c3:f8:a3:2c:2c:ac:39:0b:a8:13:98:5e:35:6f:82:2c:
c8:81:b6:a1:c7:a6:93:7c:7f:cd:cb:b3:b1:d1:10:b8:da:9b:
49:da:27:13:89:38:13:13:6b:00:1b:40:96:ea:fa:aa:74:4e:
34:3d:bc:75:75:44:81:a8:b3:12:a6:c5:dc:de:90:1a:46:41:
c2:11:82:76:ff:0c:78:07:a4:5e:61:af:27:d2:d1:6a:44:2f:
45:aa:68:b0:c6:95:51:56:b9:89:24:1a:13:9d:11:fb:98:b0:
f5:6d:4c:23:91:da:15:77:a6:66:48:7a:f9:22:6e:aa:3b:b6:
ee:8f:77:17:d6:27:c9:8f:64:66:c6:0d:08:3d:96:57:f4:23:
4f:23:32:b8:16:c4:cb:6e:af:26:72:ea:a3:07:0c:e3:21:64:
87:69:c9:f7:a9:34:a2:c5:bf:47:aa:3c:09:66:87:4f:07:d3:
6f:fe:de:42:84:64:22:ed:4e:45:f9:0c:99:96:22:c5:ff:60:
f3:a4:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:20:06 2024 by rpki-client on console-fra.rpki-client.org