Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/D6EE1EFE055511EEA37AC8494AD9E6FC.roa
File: D6EE1EFE055511EEA37AC8494AD9E6FC.roa (raw, json)
Hash identifier: oUt21oQyRcYFeyIoTpveRUVSzhhNTG7bwuYrK/bZUtw=
Subject key identifier: BD:31:D6:79:36:34:2F:98:C6:90:1F:E0:3B:FE:0F:5C:1D:63:E3:9F
Certificate issuer: /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial: 01AB
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Authority info access: rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/D6EE1EFE055511EEA37AC8494AD9E6FC.roa
Signing time: Wed 07 Jun 2023 17:07:53 +0000
ROA not before: Wed 07 Jun 2023 17:07:49 +0000
ROA not after: Sun 07 Jun 2026 17:07:49 +0000
asID: 29286
IP address blocks: 80.250.32.0/24 maxlen: 24
80.250.33.0/24 maxlen: 24
80.250.37.0/24 maxlen: 24
80.250.38.0/24 maxlen: 24
80.250.39.0/24 maxlen: 24
80.250.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 06 May 2024 00:25:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Validity
Not Before: Jun 7 17:07:49 2023 GMT
Not After : Jun 7 17:07:49 2026 GMT
Subject: CN=6480b969-78ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:73:15:92:c7:f8:6d:55:4d:09:4f:46:fb:
3c:5a:ed:fe:0b:67:43:8c:f6:d2:0a:6d:af:fe:ea:
21:b5:d3:dd:c4:30:f6:4a:8d:0b:e3:dc:f8:5f:24:
84:40:e1:ff:37:72:d2:fd:9e:a4:ae:b4:34:1c:cc:
79:28:93:bd:10:77:af:4e:5a:99:c2:ee:18:e0:cf:
97:03:df:d6:af:63:85:0d:5f:26:a4:ff:f2:24:89:
ab:cc:e4:a0:37:a0:24:3f:3d:00:3a:9a:3e:3e:72:
04:ae:0a:8d:a2:2f:70:a7:61:9a:f7:62:11:09:a4:
20:fa:7c:7c:f1:21:10:40:e6:5e:ca:18:c0:d6:6e:
b8:05:95:f6:28:5c:b6:e6:7b:19:ca:ec:bc:00:a3:
ec:aa:2a:c7:42:2b:80:0a:d3:4c:87:9e:d2:53:c1:
55:03:8f:a7:9d:0c:c0:52:d9:44:fc:ca:c1:84:82:
93:a3:7f:4d:01:aa:fa:72:e6:66:55:c6:9e:88:d6:
c7:8f:d2:ea:c9:8b:17:83:ed:ec:30:3d:32:85:53:
ad:0e:5f:ce:4b:cf:7f:fc:a7:88:0c:c1:15:73:05:
25:cf:da:82:11:8e:83:3b:eb:b9:45:09:9f:80:b9:
82:94:53:eb:b2:69:bd:32:09:2f:37:0a:bb:14:9a:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:31:D6:79:36:34:2F:98:C6:90:1F:E0:3B:FE:0F:5C:1D:63:E3:9F
X509v3 Authority Key Identifier:
keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/D6EE1EFE055511EEA37AC8494AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
80.250.32.0/23
80.250.37.0-80.250.40.255
Signature Algorithm: sha256WithRSAEncryption
b5:ac:20:6e:e1:9b:15:3e:81:8a:7f:06:cf:e7:c2:b5:cd:f7:
d9:6f:90:79:b6:ec:0d:df:8a:d1:8e:fa:fe:03:43:a4:54:a0:
7d:90:3f:8f:5a:aa:80:31:ff:8c:d3:50:c9:c1:1b:4d:3c:6d:
10:69:3e:41:60:e2:8a:1f:e2:0c:e5:40:a9:3a:7c:ce:f7:6b:
08:f4:51:1a:32:9e:79:94:1a:df:3b:da:9b:4d:21:10:32:0b:
4a:ac:3a:05:89:66:0b:94:22:05:7c:3e:4a:13:8f:e1:92:08:
7b:5a:95:5e:2f:99:ed:e1:52:ae:55:21:4f:04:0e:7a:e3:26:
95:9b:4b:dc:11:fb:6a:a0:90:ee:05:4e:05:db:da:84:04:bf:
d7:fd:d8:4c:00:a6:f1:d1:13:5f:fa:8f:b5:2f:39:ae:48:74:
24:4d:ed:4f:fe:09:98:ae:60:47:8e:13:17:ce:34:bb:19:e1:
65:1d:fd:62:76:85:c7:2b:44:7c:e4:b9:59:72:a4:c3:3b:ae:
c6:a1:78:55:af:55:9f:64:46:d1:c3:cf:9f:dd:c6:60:06:00:
ff:c9:f9:d7:f8:97:21:fb:a0:8f:87:5a:b0:b6:53:bb:cd:ca:
3f:16:aa:21:a7:07:98:45:27:ac:cc:9f:43:96:54:42:4e:1d:
57:10:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:06:03 2024 by rpki-client on console-ams.rpki-client.org