Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/53D5E47E692911EEB61154754AD9E6FC.roa
File: 53D5E47E692911EEB61154754AD9E6FC.roa (raw, json)
Hash identifier: M9eXTkhtijjaez2K/vv8DttTDCULDmMGvvyO2PiC8ks=
Subject key identifier: 51:04:9E:B0:7D:E7:BA:6A:03:B2:6E:CC:5D:7D:AC:9A:3E:87:F5:D0
Certificate issuer: /CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Certificate serial: 0E
Authority key identifier: 9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
Authority info access: rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/53D5E47E692911EEB61154754AD9E6FC.roa
Signing time: Thu 12 Oct 2023 18:01:12 +0000
ROA not before: Thu 12 Oct 2023 18:01:08 +0000
ROA not after: Sat 12 Oct 2024 18:01:08 +0000
asID: 328619
IP address blocks: 195.234.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Validity
Not Before: Oct 12 18:01:08 2023 GMT
Not After : Oct 12 18:01:08 2024 GMT
Subject: CN=65283467-b6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:3a:92:d1:ce:1b:b2:98:a4:63:67:6d:dd:
5d:5c:33:4a:3e:ef:5d:8f:54:c3:85:c4:18:7e:9f:
08:8a:8f:1e:7d:1a:9f:e2:87:ba:68:0f:b4:9d:7d:
20:71:11:08:a5:fe:8d:73:b0:8b:b5:d8:9d:fc:11:
4e:0e:12:ab:33:89:38:33:01:01:7e:75:bc:88:ac:
ad:a7:bf:5e:f5:29:cc:fa:1a:c8:a6:aa:f5:31:72:
b8:ab:a0:39:38:63:20:28:af:8d:eb:63:54:2a:93:
ae:c2:38:fc:03:53:46:02:7b:c3:fc:4b:16:cf:9a:
cc:60:4d:a2:48:a1:39:d5:24:b9:d5:ca:42:4f:47:
71:56:28:3e:ae:38:b8:85:73:9d:e3:73:39:39:73:
86:8b:61:8d:8b:75:b4:62:9a:9d:a1:16:f2:e7:65:
05:0b:99:e7:50:e7:09:75:b4:76:f1:85:29:2e:b9:
89:4e:3d:0e:a4:48:52:4d:1a:73:7c:92:65:5e:6d:
1b:1c:7e:d9:77:1c:af:3d:30:59:88:e5:1d:9f:69:
49:14:48:1b:d4:d2:68:6c:10:6b:db:51:b2:e2:72:
ed:a1:4f:a8:3b:ed:b6:cf:27:25:f2:29:df:4a:c1:
5e:fa:d1:47:d4:71:d1:5c:aa:90:0f:98:e3:9f:b3:
5c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:9E:B0:7D:E7:BA:6A:03:B2:6E:CC:5D:7D:AC:9A:3E:87:F5:D0
X509v3 Authority Key Identifier:
keyid:9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/53D5E47E692911EEB61154754AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
195.234.120.0/22
Signature Algorithm: sha256WithRSAEncryption
53:c8:e6:0f:43:f9:9d:95:71:11:82:1c:81:2f:28:d4:aa:b1:
94:29:e4:94:c6:6e:97:d7:43:dc:38:51:ac:2d:c3:2e:7a:9a:
38:7d:3f:ff:71:b0:c5:f8:b8:ae:22:26:31:c9:27:b1:6e:ad:
dd:ae:9d:b9:34:0e:a2:bf:a9:18:e2:d1:db:b7:93:68:df:72:
4c:25:b1:65:cb:e3:cb:53:e1:43:7c:de:e3:02:83:95:aa:0b:
05:3b:2b:1d:c3:cb:5a:c9:76:82:e1:d3:66:89:0b:e7:d3:a5:
72:64:15:29:38:6d:b4:a7:04:dc:ba:6a:7a:c4:85:77:94:c2:
9a:0b:36:87:58:d7:df:4e:7f:d0:64:7e:0f:5b:d0:ba:55:6a:
07:75:aa:57:ac:d1:46:2a:27:aa:67:da:f4:84:23:79:84:b8:
4a:e5:14:e3:c5:f0:97:cb:f7:86:ea:45:51:5c:d7:bb:3d:e5:
38:b5:05:55:70:51:68:77:ed:94:e9:9f:ae:a8:fc:b2:bd:da:
8c:9b:65:0b:a7:4c:dd:99:4c:54:10:e8:40:0c:cb:4d:69:0c:
a4:d2:19:5b:cd:8a:63:87:fa:ac:c6:c1:3c:59:08:1b:ba:db:
e6:15:f1:a6:13:35:d4:b4:51:2e:eb:cc:fc:f9:0a:7f:c9:27:
28:52:af:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:36 2024 by rpki-client on console-fra.rpki-client.org