Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/11A20D3E101511EE97F5814A4AD9E6FC.roa
File: 11A20D3E101511EE97F5814A4AD9E6FC.roa (raw, json)
Hash identifier: joY+ihhWamcd/sNRV42/x8HqISipPK+gnNX8V3U1lvk=
Subject key identifier: 41:54:45:B4:BA:10:7F:DD:AF:E1:D0:21:07:E2:13:E6:E5:A8:DF:E2
Certificate issuer: /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial: 0A
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Authority info access: rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/11A20D3E101511EE97F5814A4AD9E6FC.roa
Signing time: Wed 21 Jun 2023 09:21:57 +0000
ROA not before: Wed 21 Jun 2023 09:21:54 +0000
ROA not after: Fri 21 Jun 2024 09:21:54 +0000
asID: 37684
IP address blocks: 62.12.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Jun 2024 09:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Validity
Not Before: Jun 21 09:21:54 2023 GMT
Not After : Jun 21 09:21:54 2024 GMT
Subject: CN=6492c135-a434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:a5:f4:86:0a:c8:e1:3f:d9:b2:11:e8:80:
2d:e3:cc:ef:bb:44:6b:81:2c:c3:b4:d1:35:5f:18:
ec:fa:18:a6:3a:d4:9b:21:f8:53:64:90:ba:27:f8:
fa:af:e4:6d:53:64:bd:3f:39:3d:fa:41:8d:85:cc:
65:07:eb:bf:bf:e1:2e:4f:04:de:7a:56:f9:87:b9:
c7:43:f0:5a:a5:a8:b1:75:af:f6:48:b3:2e:ca:1d:
fb:04:28:7a:a9:21:ac:34:2e:42:2e:f5:29:aa:0c:
d0:ed:5b:31:c8:cd:80:85:26:a6:f1:a6:82:21:71:
38:d5:7e:e9:14:6a:9d:57:86:01:51:7a:2b:fc:07:
ac:f3:87:b6:8d:24:bd:77:3f:51:79:ae:4d:46:ab:
af:47:83:f9:bc:c4:dc:a7:80:ec:8e:12:0f:8b:35:
f6:fa:71:fe:5f:0f:c3:35:57:4c:d7:82:86:83:f8:
ab:4f:56:47:17:b6:b2:a4:e0:ea:50:46:3c:01:ef:
c0:0f:d8:0d:e9:e1:09:e2:91:18:cf:72:e2:16:36:
39:e6:b0:ed:24:eb:60:8d:39:65:a9:76:b6:56:b7:
92:b1:fa:e3:09:4f:3e:36:1e:6c:c6:40:ed:da:b9:
2a:cc:8a:36:44:52:4c:8d:5e:aa:2b:6f:f7:bc:2d:
b5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:54:45:B4:BA:10:7F:DD:AF:E1:D0:21:07:E2:13:E6:E5:A8:DF:E2
X509v3 Authority Key Identifier:
keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/11A20D3E101511EE97F5814A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.12.112.0/24
Signature Algorithm: sha256WithRSAEncryption
51:10:46:45:2d:f7:6c:d5:a6:9c:6b:9e:0f:d7:f7:a4:61:9b:
e8:20:85:65:3c:3f:d5:65:36:ab:a1:57:0b:6d:56:53:f3:34:
c6:1b:cc:2a:c2:a9:94:dc:56:e8:6c:ad:3c:fa:e0:5c:10:49:
c1:bb:0a:d6:ee:d9:de:79:e8:dc:3c:95:44:a9:ae:c9:2e:6c:
ee:6a:8f:12:94:79:25:26:0d:f7:c8:4d:aa:6a:82:80:09:80:
f2:60:b6:0c:02:48:4a:ec:91:fd:d3:3d:7d:21:4f:e4:f4:84:
dc:05:31:a1:d5:7c:9e:46:43:a3:39:a4:f4:5c:60:a5:15:4e:
6c:3b:c6:7d:bc:33:a5:cc:ad:c3:0b:cc:3e:84:e8:55:52:35:
0f:4a:f8:c3:4a:3a:85:05:d1:59:70:24:66:f9:cf:b1:6a:df:
d1:80:9e:fc:62:b5:c8:d5:2a:ea:47:e8:00:42:e3:33:4c:e9:
13:93:4f:2d:e2:12:19:5d:8f:77:39:42:d1:c3:57:33:11:24:
41:31:60:46:58:12:24:c3:f8:ce:f5:6f:7a:26:25:ef:0c:9a:
9b:f0:9d:43:c9:56:91:3f:95:37:42:72:fa:33:b8:e6:57:cc:
47:21:69:49:97:cc:0e:50:fb:fd:c4:e1:ff:f9:5f:c5:2b:2d:
40:ec:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:08:14 2024 by rpki-client on console-ams.rpki-client.org