Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/842211360ED611EFB139A14D017001B1.roa
File: 842211360ED611EFB139A14D017001B1.roa (raw, json)
Hash identifier: H6oNS2bTIsWmDDUM2U4/knNL2fFAhAEBvQuUCQnr7Wg=
Subject key identifier: 31:4C:8B:E7:49:AD:59:2B:7B:4E:56:0C:43:C8:39:FC:38:E5:2F:3E
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 0620
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/842211360ED611EFB139A14D017001B1.roa
Signing time: Fri 10 May 2024 14:06:37 +0000
ROA not before: Fri 10 May 2024 14:06:33 +0000
ROA not after: Wed 31 May 2034 14:06:33 +0000
asID: 20011
IP address blocks: 197.87.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: May 10 14:06:33 2024 GMT
Not After : May 31 14:06:33 2034 GMT
Subject: CN=663e29ed-8a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:ac:5f:01:57:42:a1:2d:ba:c7:ff:31:81:
d9:5d:83:61:a2:50:7b:a2:48:e3:ff:4b:f8:38:c3:
22:92:de:e4:4c:e8:e3:1d:06:8a:4f:e9:ea:61:0a:
9b:97:2e:c9:c2:77:2f:0e:c5:ff:cf:1f:db:cc:99:
b2:93:b6:9e:af:24:39:3f:ba:84:55:c0:03:fd:20:
a2:3c:b0:6d:fb:fd:4b:3f:b4:14:80:dd:45:82:8f:
59:84:77:64:28:81:cd:0c:f5:ea:dd:4a:4a:5f:4f:
31:7f:b1:12:f1:6c:72:67:67:01:c9:60:7f:f2:f8:
51:dd:e2:81:c9:2e:7d:bc:b9:3c:32:e5:99:ac:c8:
52:95:a0:5a:e9:bf:fa:09:3d:93:e1:37:07:05:35:
de:02:9f:be:14:4a:0c:2c:0e:43:1d:fb:3b:2f:28:
01:a2:9f:0f:25:f8:93:8f:73:05:0c:c9:a9:21:97:
d0:4c:a3:92:26:94:82:d2:36:40:d6:be:9f:8e:c8:
1b:8b:12:67:ad:51:d9:e5:10:ef:5b:62:cd:a6:da:
e7:01:f3:c2:db:6b:e6:43:0e:f7:64:b8:95:b6:ef:
68:67:4f:30:b4:92:26:ef:47:38:8f:b2:1e:4f:35:
a4:b2:09:7c:3a:3c:11:e6:bc:3a:e0:06:c1:03:3b:
ff:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4C:8B:E7:49:AD:59:2B:7B:4E:56:0C:43:C8:39:FC:38:E5:2F:3E
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/842211360ED611EFB139A14D017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.87.8.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:e6:38:a2:08:35:3a:c7:0a:a1:67:21:40:d8:09:a9:72:ef:
26:73:03:04:d4:46:04:21:da:c2:a2:0c:05:1b:c0:b2:06:64:
dd:4f:c0:65:65:a0:fd:3f:d1:7c:7f:c8:9c:f9:d0:42:d4:28:
95:09:20:86:08:b2:f5:44:f1:7c:9c:5a:a6:f8:a3:56:2d:4d:
54:c9:d9:bd:5f:51:44:83:8a:d7:13:f7:ad:75:44:9a:df:e1:
c0:a1:82:ab:6f:74:43:ec:5a:97:17:9a:a0:ac:0c:b1:f5:ac:
8b:54:64:f1:6f:df:5f:6d:80:38:58:3d:49:07:ed:2f:a6:1a:
9a:60:a9:22:71:4d:71:87:9f:33:f3:ac:49:f8:26:d6:62:29:
83:15:08:bd:64:37:fc:33:84:66:11:c8:89:9a:36:e2:46:da:
3c:f9:0f:bd:c0:bf:50:95:4f:9d:25:68:6d:09:5e:b5:ac:af:
75:60:ec:26:e0:34:90:f5:91:58:ae:fc:e9:fc:26:11:29:d3:
56:b5:3f:9b:9f:9b:20:df:e8:75:f5:df:a0:f7:d0:34:31:8e:
f3:2c:4d:75:01:dc:b3:60:28:e1:7e:fb:82:30:36:3c:36:31:
ff:4e:e9:ad:8f:79:c0:82:78:98:39:e2:ec:da:70:21:53:40:
f2:44:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org