Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/189309602E9611ED8FED3480F1222468.roa
File: 189309602E9611ED8FED3480F1222468.roa (raw, json)
Hash identifier: 9thUVnLZZ7EOpFloeIsOWtyUvJheIIw/Jl2bg+WHMIM=
Subject key identifier: 6B:E7:12:7F:2A:6C:C8:6D:64:79:41:86:C9:34:15:0A:BC:B3:12:BB
Certificate issuer: /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial: 02
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/189309602E9611ED8FED3480F1222468.roa
Signing time: Wed 07 Sep 2022 10:16:11 +0000
ROA not before: Wed 07 Sep 2022 10:16:08 +0000
ROA not after: Wed 01 Sep 2049 10:16:08 +0000
asID: 0
IP address blocks: 196.60.94.0/24 maxlen: 24
2001:43f8:1680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Validity
Not Before: Sep 7 10:16:08 2022 GMT
Not After : Sep 1 10:16:08 2049 GMT
Subject: CN=63186f6b-65b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b4:b1:d2:81:84:ff:9e:48:34:42:c5:33:55:
32:c0:4c:d8:36:ec:58:0b:97:a2:60:00:00:68:f4:
eb:75:b9:1c:ba:9b:ac:24:90:f0:e5:6e:f7:97:93:
48:af:9b:6e:50:c4:a1:06:da:36:d6:de:87:2c:33:
c0:71:59:14:45:88:70:2a:5b:a6:98:94:1b:64:8b:
d0:61:a9:71:80:38:ac:10:01:7b:6b:92:84:44:2b:
d4:89:4e:48:ba:e2:e8:b6:47:c7:ca:8d:d2:c5:a2:
9c:e8:91:bc:f0:61:e9:e6:6b:34:81:f7:23:d9:72:
5e:fc:1a:83:b8:69:4c:a5:fd:a9:c6:7b:11:f9:35:
fe:7f:59:bd:f2:1f:09:df:3e:d9:c4:6c:62:a7:a6:
7f:94:98:6b:95:e7:69:27:4b:d5:13:50:77:31:39:
45:6c:b6:5e:b1:7c:cb:e4:18:0d:8e:de:2f:9c:34:
c9:ed:4b:34:9e:c4:23:6c:f8:17:4d:d9:26:d5:a1:
fc:1b:b9:d3:08:c1:9c:d8:3c:6a:53:34:94:ae:b5:
62:a3:16:a4:37:ce:bb:64:dd:87:bc:f5:49:eb:52:
aa:14:11:bb:a0:d8:0f:e7:76:5a:95:5f:28:94:df:
3b:6f:a0:06:1a:9a:1b:05:c2:d1:4b:06:3a:fd:b2:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:12:7F:2A:6C:C8:6D:64:79:41:86:C9:34:15:0A:BC:B3:12:BB
X509v3 Authority Key Identifier:
keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/189309602E9611ED8FED3480F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.60.94.0/24
IPv6:
2001:43f8:1680::/48
Signature Algorithm: sha256WithRSAEncryption
b1:9f:b7:8c:d7:27:25:37:58:98:51:aa:3c:d3:b6:fb:8b:2e:
9e:d6:a8:29:e6:f8:db:2b:9a:63:7b:a5:52:9a:b2:69:a7:71:
83:d4:16:ce:a4:a7:60:6f:24:64:ec:bf:e2:dd:d0:98:86:8f:
65:09:59:1f:76:ba:85:68:b1:2b:90:a8:76:d3:ff:bd:f6:eb:
8e:63:15:36:37:3a:ea:db:08:ea:b4:86:52:ae:aa:fc:01:a4:
e8:3d:f9:f6:18:82:18:cf:f0:eb:f9:0f:49:d4:32:b7:59:32:
70:98:da:58:38:47:fc:e3:d7:3a:15:a3:e7:ec:30:fb:ee:2f:
71:83:9e:b6:bd:b7:4f:24:92:01:d0:86:3a:b0:42:f4:11:48:
4e:cf:bd:a7:02:1a:77:45:41:34:f8:70:49:80:a1:37:9a:43:
2f:bc:99:8c:54:32:93:0f:0e:52:e5:43:ec:99:8e:ff:75:b2:
c3:46:a4:91:4e:e5:d0:c7:49:3e:c4:d0:dd:db:0e:75:25:5a:
63:00:d3:dc:c6:9e:2d:cc:01:9e:05:4e:d8:7e:77:90:54:9d:
4b:56:be:f9:a9:a0:8e:c2:2b:09:a3:55:2e:53:4d:9a:a3:bb:
df:d4:22:47:7b:e7:1c:32:fb:a0:3a:cc:f8:36:5b:36:58:6c:
29:d4:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:11:37 2024 by rpki-client on console-fra.rpki-client.org