Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/60E7510AFAFD11EEB483D20C017001B1.roa
File: 60E7510AFAFD11EEB483D20C017001B1.roa (raw, json)
Hash identifier: M+guvwSynGfTHvTOyvTfqunoeJ7intrM84s+ebCzAj4=
Subject key identifier: 13:49:6C:4E:3D:5C:4F:E6:81:8D:D0:77:5A:E4:02:ED:12:0C:9F:CA
Certificate issuer: /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial: 0120
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Authority info access: rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/60E7510AFAFD11EEB483D20C017001B1.roa
Signing time: Mon 15 Apr 2024 07:54:26 +0000
ROA not before: Mon 15 Apr 2024 07:54:22 +0000
ROA not after: Tue 11 Apr 2034 07:54:22 +0000
asID: 14618
IP address blocks: 163.201.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Validity
Not Before: Apr 15 07:54:22 2024 GMT
Not After : Apr 11 07:54:22 2034 GMT
Subject: CN=661cdd31-826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:fa:29:62:2d:6a:64:3e:68:96:3b:40:a1:
0d:60:f2:c3:6b:1e:f4:ae:39:8a:fe:69:0b:0f:df:
24:12:10:00:17:f6:08:c6:10:22:4e:e0:f7:6c:34:
d9:be:b5:65:fb:73:5a:39:41:19:89:c7:b9:10:8c:
44:9f:9c:62:67:93:8a:6c:b1:8c:96:3a:26:3a:dc:
fd:14:0f:a0:fe:58:ec:fd:f6:01:b1:81:59:ce:39:
ae:1e:d1:74:d6:dd:fe:ee:c5:69:8a:25:5a:45:60:
3e:05:7c:ca:a4:45:50:c1:e8:5a:e6:93:07:7e:01:
99:28:93:35:3c:8e:c4:7d:5e:df:ca:0b:df:f3:a7:
5f:23:2d:bc:6e:71:0a:6b:ed:b6:d8:4f:1a:31:74:
56:62:8d:29:ba:11:74:4e:d8:80:b7:88:45:01:81:
ba:7b:c8:4c:9a:fd:a4:03:12:88:b2:6d:07:d6:56:
1f:64:f6:91:35:c1:d6:51:2e:6b:73:c2:83:1a:fd:
2e:ce:bb:bb:b4:8a:52:74:63:50:50:d1:9e:0b:4b:
21:3f:42:d7:a1:c0:6a:0c:f5:bc:d4:89:f5:f8:6b:
d4:f3:95:f2:9b:31:9b:49:12:bb:3d:5e:ad:85:dc:
50:78:57:ca:1e:c0:c1:64:df:52:81:cf:a9:2e:c6:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:6C:4E:3D:5C:4F:E6:81:8D:D0:77:5A:E4:02:ED:12:0C:9F:CA
X509v3 Authority Key Identifier:
keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/60E7510AFAFD11EEB483D20C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.201.84.0/23
Signature Algorithm: sha256WithRSAEncryption
10:f5:00:ca:90:92:52:cc:9f:86:94:3e:10:89:c4:aa:a6:b9:
ad:e5:8e:61:88:a7:9c:e1:c6:07:4a:cf:81:fe:14:53:ed:b1:
f5:40:69:18:af:27:de:dc:57:de:0b:8a:8c:6c:8b:a8:ed:c7:
52:fa:b2:30:5b:3e:ce:61:a7:c3:da:bf:b2:ba:82:cf:77:41:
a4:85:0f:75:4f:a2:de:83:ff:b6:3c:d4:e9:c5:87:84:f9:f5:
5c:77:77:1b:26:10:2f:5c:38:ba:fd:20:ba:6e:c0:7e:92:8c:
ed:8c:3b:a5:d5:61:e7:c2:70:f2:7c:85:70:f1:cb:36:45:89:
1b:80:4c:28:40:63:f3:de:ab:b6:4c:08:e3:f1:af:8f:f4:9c:
a8:71:4d:41:e8:55:10:4a:fa:94:45:b9:99:4c:b8:99:1e:18:
3e:b6:ff:b0:68:99:27:46:cf:0b:76:52:1c:ea:2c:fe:28:49:
e7:e1:0c:af:86:18:b6:c3:cd:f8:87:bb:86:ad:fc:15:00:c2:
1f:04:3c:2a:6e:7d:78:23:c0:6f:92:b6:32:54:04:6f:61:50:
19:47:55:e5:f4:ad:09:2f:59:64:38:37:2d:cb:dd:a2:eb:c7:
26:7d:2d:6a:bc:7f:0f:c8:5d:27:b7:1f:94:82:dc:06:08:9e:
86:3c:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:25 2024 by rpki-client on console-fra.rpki-client.org