Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/ECE620A296AB11E9A2CC3244F8AEA228.roa
File: ECE620A296AB11E9A2CC3244F8AEA228.roa (raw, json)
Hash identifier: qOlZLpS7RK9Dr36jbEKFtmL31ZZpQ1zZJ9/887yVsqY=
Subject key identifier: B4:D8:79:3A:5D:E9:CB:7F:3A:91:1A:9E:AA:50:1C:75:2E:C8:B6:82
Certificate issuer: /CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Certificate serial: 14
Authority key identifier: 60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/ECE620A296AB11E9A2CC3244F8AEA228.roa
Signing time: Mon 24 Jun 2019 18:14:37 +0000
ROA not before: Mon 24 Jun 2019 18:14:32 +0000
ROA not after: Mon 25 Jun 2029 18:14:32 +0000
asID: 37049
IP address blocks: 41.242.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.mft
rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BF27AF/serialNumber=6057F489F5ADC4E9269C260D702C81AAB6AA2E6D
Validity
Not Before: Jun 24 18:14:32 2019 GMT
Not After : Jun 25 18:14:32 2029 GMT
Subject: CN=5d11130d-bbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:82:d7:da:cb:bd:d9:bb:6e:43:bb:db:ed:
78:31:f0:28:ff:e2:62:ae:0e:04:c0:cd:cb:23:98:
e6:b7:14:23:e5:8c:07:d2:24:4f:d2:42:6f:49:b0:
01:f9:23:0a:67:7e:28:42:ce:5a:dc:a4:8d:cf:df:
b5:99:9e:e9:bc:2d:4b:10:21:af:1f:79:d5:0c:db:
77:8f:71:ce:5e:6a:93:84:4a:d3:e8:d5:40:87:84:
5d:0b:49:42:db:bd:54:27:4c:5f:02:59:17:1e:02:
89:f0:d7:2e:eb:52:36:2b:5a:f6:f2:99:1e:f6:e3:
98:96:15:66:16:d3:37:7a:f3:2b:8e:da:4a:aa:b0:
be:d0:ab:ec:fe:39:dd:71:bb:af:39:86:b1:76:47:
80:ab:3e:48:ef:09:b2:9b:e3:06:5a:86:9e:bf:3e:
74:98:93:53:75:1f:92:24:ad:28:33:e1:a8:bf:43:
ba:a4:3a:ef:d3:29:5a:36:8d:ed:66:82:bc:61:85:
20:5e:c2:3a:c3:c6:8e:e5:ff:f8:00:cb:8e:97:e9:
4d:3b:a6:c8:53:cf:5c:97:26:81:c5:86:b4:67:5d:
c3:61:67:0a:c1:10:f9:78:e3:8c:9c:be:99:97:16:
af:79:70:5a:5e:1a:2f:61:ab:64:6c:29:05:c6:31:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:79:3A:5D:E9:CB:7F:3A:91:1A:9E:AA:50:1C:75:2E:C8:B6:82
X509v3 Authority Key Identifier:
keyid:60:57:F4:89:F5:AD:C4:E9:26:9C:26:0D:70:2C:81:AA:B6:AA:2E:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/YFf0ifWtxOkmnCYNcCyBqraqLm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YFf0ifWtxOkmnCYNcCyBqraqLm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/451248DA91EA11E9BA92847AF8AEA228/ECE620A296AB11E9A2CC3244F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.242.160.0/20
Signature Algorithm: sha256WithRSAEncryption
68:22:61:64:cc:71:a0:4c:96:a1:13:e9:f4:59:55:94:f5:9c:
9f:1e:d2:8c:bd:30:88:c4:a7:8c:37:ef:bf:b2:2d:fe:e8:00:
cc:16:9e:e7:00:9d:85:7d:d2:5d:d8:3e:31:90:d9:69:b9:93:
e5:ac:f5:6f:93:54:c4:a1:ae:39:6a:b3:4f:51:08:9b:1c:3d:
5a:6c:48:fb:a0:fd:18:8b:0a:5b:49:4d:3e:b7:c2:8a:7d:c2:
fb:8f:cd:70:e1:3c:97:ff:c7:ae:af:a0:cd:f8:cb:60:7b:9a:
8b:f7:89:62:c1:97:15:f1:9e:2c:f6:99:6a:f5:35:e3:ef:17:
3c:08:fd:5c:aa:84:94:03:a2:b9:bd:4c:c3:b1:a4:9f:57:6a:
5d:64:19:f7:72:79:b4:20:d7:2c:92:25:9f:29:7c:21:2b:5b:
40:41:0f:78:88:62:44:36:b4:e7:c6:ad:bb:64:04:df:bc:81:
32:29:1e:2c:73:3e:88:82:25:41:b0:75:bc:4c:8b:46:c4:0f:
e4:91:2a:c0:0c:f9:37:39:01:ed:b0:f4:e0:f0:94:36:76:a9:
c7:e0:ab:6f:7c:7a:d2:d6:8c:38:52:c4:ae:41:fa:1d:04:1b:
72:f5:21:db:1d:df:6d:9f:49:15:b7:be:92:90:5c:14:a9:bc:
08:1c:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:13 2024 by rpki-client on console-fra.rpki-client.org