Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/06F644A2886211E9862C9963F8AEA228.roa
File: 06F644A2886211E9862C9963F8AEA228.roa (raw, json)
Hash identifier: UqbhxzZyJOFJyGBOr36sTmH2MV8pK2xrkgTJYiq0otE=
Subject key identifier: AE:38:3E:2E:61:26:20:50:CA:47:66:0A:63:57:2C:9A:DC:FA:74:F2
Certificate issuer: /CN=F36AA888AF/serialNumber=22B7237D8A6E234541BA7752AA5FB8F31A90CD80
Certificate serial: 02
Authority key identifier: 22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/06F644A2886211E9862C9963F8AEA228.roa
Signing time: Thu 06 Jun 2019 13:50:23 +0000
ROA not before: Thu 06 Jun 2019 13:50:11 +0000
ROA not after: Wed 06 Jun 2029 13:50:11 +0000
asID: 327824
IP address blocks: 154.118.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.mft
rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA888AF/serialNumber=22B7237D8A6E234541BA7752AA5FB8F31A90CD80
Validity
Not Before: Jun 6 13:50:11 2019 GMT
Not After : Jun 6 13:50:11 2029 GMT
Subject: CN=5cf91a1f-94d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:c3:ad:43:16:6e:16:48:1c:f8:fc:ba:e6:
d3:1b:78:20:4a:97:2c:2a:40:99:6e:51:7e:c1:32:
95:25:45:a1:6a:80:45:ec:60:b2:67:76:15:c3:92:
a0:25:be:3c:95:51:85:c5:75:c9:d5:a9:1b:5b:9c:
6a:e7:ab:a1:d9:4f:81:fa:f2:fd:c0:f3:25:cb:c8:
a3:52:f4:0e:b9:4d:19:e5:a6:8c:f4:32:75:50:ba:
8e:e1:03:b9:2e:8e:cd:8b:6f:1c:6f:aa:cb:74:c1:
b0:4c:57:51:cc:47:67:66:07:17:05:29:8d:7f:fb:
78:25:e9:40:aa:dc:85:43:4c:d3:e2:e1:c2:57:29:
33:3a:20:b1:21:2e:a3:a3:a1:e2:a0:06:f2:6c:a2:
65:ca:4f:97:83:b3:0c:03:85:74:0f:69:53:34:60:
9b:58:57:e6:1a:9c:eb:a4:08:bc:ad:85:95:6a:b7:
cc:01:eb:81:f1:b3:f0:c3:6b:e2:6e:d0:88:92:9b:
ce:2e:d3:09:11:f4:29:69:e3:8a:59:aa:b4:c6:16:
67:c7:a9:b2:4f:b8:a2:cb:3e:5f:22:11:03:a1:b7:
01:7e:1a:0b:b3:d1:5c:98:52:cd:d1:c1:08:e3:dd:
a3:fb:c4:98:4b:82:cc:fc:fa:20:ea:dd:66:3b:ce:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:38:3E:2E:61:26:20:50:CA:47:66:0A:63:57:2C:9A:DC:FA:74:F2
X509v3 Authority Key Identifier:
keyid:22:B7:23:7D:8A:6E:23:45:41:BA:77:52:AA:5F:B8:F3:1A:90:CD:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/IrcjfYpuI0VBundSql-48xqQzYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IrcjfYpuI0VBundSql-48xqQzYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA888/2FD269E2886111E9BD00DA62F8AEA228/06F644A2886211E9862C9963F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
154.118.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:0f:ee:d4:09:de:f1:fc:73:d9:6a:5e:b5:ca:2a:65:64:ca:
3a:93:00:41:4d:09:c9:d2:f3:6d:ce:b8:d8:35:87:b0:6e:c4:
64:7c:da:32:55:86:e8:78:e5:bd:78:5d:ef:84:6d:03:f2:37:
0f:7f:bf:da:2e:97:7e:58:79:46:0e:b8:33:52:5f:18:13:ad:
f8:71:dc:bf:5e:cf:8d:c8:c3:ef:cf:28:94:16:5f:ef:67:e2:
61:6d:e6:eb:50:8b:75:41:51:01:19:3a:ee:6f:02:d7:da:89:
54:c3:ad:c6:55:37:0a:60:c4:92:c4:25:aa:a4:92:06:04:bd:
97:20:bc:83:0f:43:b9:ca:d9:1c:1b:b2:ea:21:72:42:9c:2e:
7e:b5:d7:b4:b1:3c:99:7a:7b:8b:a3:b6:a7:b6:98:0f:ad:fc:
b9:ea:2b:f3:6b:16:6b:76:63:fd:8f:3e:50:f4:67:05:20:51:
4f:94:ae:2b:c3:d7:cd:55:09:f3:5f:1f:ec:b6:69:46:35:7a:
c3:db:cc:46:7a:d3:64:dc:4c:b8:4d:98:0f:99:21:bb:87:96:
e4:69:b8:54:fe:86:5b:0c:28:52:75:58:60:34:3d:c1:8e:2f:
6e:a9:00:a4:54:45:6f:5d:4b:77:26:75:2d:fe:92:3a:0f:9a:
5f:b4:e8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:09 2024 by rpki-client on console-fra.rpki-client.org