Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/55209FF653FD11ECB014987BD8A014CE.roa
File: 55209FF653FD11ECB014987BD8A014CE.roa (raw, json)
Hash identifier: SOlE5tDe006s1bx16bbK7e1yA/aiR6Dr9EuXwLJs87g=
Subject key identifier: DB:3B:1A:21:15:5B:84:D3:98:00:4F:35:9C:A0:ED:5F:BE:CD:85:6A
Certificate issuer: /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial: 03DB
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access: rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/55209FF653FD11ECB014987BD8A014CE.roa
Signing time: Fri 03 Dec 2021 05:53:26 +0000
ROA not before: Fri 03 Dec 2021 05:53:22 +0000
ROA not after: Wed 17 Dec 2025 05:53:22 +0000
asID: 139065
IP address blocks: 192.142.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 987 (0x3db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Validity
Not Before: Dec 3 05:53:22 2021 GMT
Not After : Dec 17 05:53:22 2025 GMT
Subject: CN=61a9b0d6-f8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:95:e3:a9:8f:89:04:b5:65:d2:6a:2d:2f:
bb:43:3c:37:65:d6:f9:6c:19:fd:45:73:df:f1:c8:
ef:1c:87:c9:49:be:69:cd:84:0a:b3:04:45:cc:00:
cd:f6:6f:44:3c:19:1c:33:e0:35:0c:a9:8b:97:e3:
b1:5e:68:84:96:45:54:84:f1:12:90:39:5d:63:b5:
43:e8:b8:96:7a:12:4b:96:1c:47:25:7d:20:bd:d4:
dd:44:14:dc:f0:c1:96:22:1f:ba:57:db:5d:26:b6:
64:21:58:06:f7:0c:4d:e2:53:21:f4:59:42:d1:bc:
8c:6e:47:4a:16:f1:ec:93:c0:79:4e:ab:db:3a:ea:
2f:b8:e1:e2:d0:d3:23:2d:76:0b:6c:ec:bc:82:d2:
92:f6:b3:52:fa:6b:18:45:80:d8:71:d9:dd:53:35:
b0:55:8d:67:5f:5c:98:58:00:7b:0a:9b:47:26:0c:
4c:7c:e3:dc:cd:91:a4:dc:cb:6d:30:f5:36:60:ad:
fa:eb:30:be:fb:b2:12:ce:b4:ce:c8:89:d0:0c:cf:
ac:df:8f:81:f6:f4:7f:58:62:15:9c:d1:6a:f3:6e:
e7:5a:a7:41:be:ab:43:3a:b3:8a:ad:d2:dd:d4:8c:
cc:8c:c4:04:59:99:e5:cc:b9:2b:dc:4a:c5:2a:ad:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:1A:21:15:5B:84:D3:98:00:4F:35:9C:A0:ED:5F:BE:CD:85:6A
X509v3 Authority Key Identifier:
keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/55209FF653FD11ECB014987BD8A014CE.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.142.60.0/22
Signature Algorithm: sha256WithRSAEncryption
56:4d:87:83:83:8c:d0:95:a9:3e:40:8a:22:ce:f1:dc:42:26:
51:ec:24:43:fe:b3:3c:2d:7c:d6:71:cc:5f:7c:ce:f9:07:e3:
41:0d:21:58:f3:d2:5b:ad:8e:ee:1f:b2:f2:5c:b2:c8:be:96:
d6:5c:2e:91:b9:65:0b:1e:ab:f9:9b:2f:39:81:2e:ba:77:02:
e1:68:fa:f2:68:b8:34:44:0a:f0:7a:28:fc:1d:f7:51:be:4b:
1e:e9:41:5a:ae:4b:73:ff:55:c6:a0:72:bc:3c:58:3c:7a:81:
02:f0:32:16:0a:fc:0d:6d:fc:7a:05:ef:53:97:92:b0:f6:08:
35:54:55:7e:53:41:60:44:8c:87:3a:52:a7:99:d9:d3:0d:4e:
d3:b7:d0:4b:31:ef:9e:fb:eb:b6:a1:d0:2b:e1:51:d9:fa:43:
25:cc:92:7c:6d:76:39:c8:1c:a3:be:f8:c2:ef:37:ac:33:3c:
84:cc:af:cc:b7:ad:ac:fe:8a:d1:b5:e9:7e:25:06:8c:ad:20:
98:a3:d2:c5:73:40:04:ee:6a:2c:99:d9:da:eb:bd:40:48:59:
a3:d2:ec:83:9c:e6:0a:21:f3:d8:16:ca:cc:03:05:2e:d7:f3:
9d:c5:71:07:56:f1:94:94:17:c5:66:2d:11:c1:9d:8d:87:18:
44:0e:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:03:50 2024 by rpki-client on console-fra.rpki-client.org