Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/8888CB6C101611EE8E25D14E4AD9E6FC.roa
File: 8888CB6C101611EE8E25D14E4AD9E6FC.roa (raw, json)
Hash identifier: aRiUkUxkhjnAyEApwtOMV2SiBO9xDtuz0RNzsfUKt6M=
Subject key identifier: DC:DE:3B:66:7F:C9:B7:3F:4A:F0:D3:89:BB:54:E4:D0:D5:0F:DF:A8
Certificate issuer: /CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Certificate serial: 12
Authority key identifier: 06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
Authority info access: rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/8888CB6C101611EE8E25D14E4AD9E6FC.roa
Signing time: Wed 21 Jun 2023 09:32:26 +0000
ROA not before: Wed 21 Jun 2023 09:32:22 +0000
ROA not after: Fri 21 Jun 2024 09:32:22 +0000
asID: 37684
IP address blocks: 62.12.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.mft
rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Jun 2024 00:25:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B8CRI/serialNumber=0629C99D4760C289B84CDBECF1B6C13CF525EAAF
Validity
Not Before: Jun 21 09:32:22 2023 GMT
Not After : Jun 21 09:32:22 2024 GMT
Subject: CN=6492c3aa-e565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:c6:fb:de:5e:8c:50:a7:53:8a:46:e0:b9:
38:7b:22:b6:bf:f0:f1:65:b5:23:97:b9:93:34:8f:
10:91:70:5c:6f:dd:e0:3c:37:e0:44:2e:fd:9f:4b:
10:7d:20:64:4b:d8:8e:2e:a3:7f:a9:59:ea:f8:3d:
1f:72:98:62:0a:4c:4a:2d:01:f9:97:6f:61:ba:40:
f0:a2:cb:52:e7:5f:f0:c1:80:ff:eb:97:55:d7:5a:
1d:6a:7c:2d:6a:f0:d1:92:f4:b9:a6:e2:64:6d:1b:
0b:8a:3d:b8:42:63:b0:a1:67:5b:68:21:7c:62:82:
6f:a2:18:23:39:b4:ec:52:cb:9a:90:e5:b1:fe:e4:
2c:b6:a1:44:79:bb:14:b6:0c:d6:e8:1a:75:17:a6:
2e:c4:c3:99:c9:29:6c:3f:5b:5d:f9:b1:3c:0d:4e:
92:58:a8:7a:e2:80:c0:4f:93:3b:46:2e:d5:e6:9c:
20:c0:12:d8:85:80:3b:b2:7e:bd:91:5d:5c:76:ba:
4e:50:b9:6c:11:af:a5:16:36:93:d7:25:69:10:b0:
c4:d1:cd:66:e7:54:59:e1:ab:98:71:4d:10:f4:32:
bb:64:1a:68:3a:16:71:60:df:e0:66:1a:85:a2:7d:
d2:f3:77:a2:15:3b:4e:11:e0:40:aa:c4:7c:59:73:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DE:3B:66:7F:C9:B7:3F:4A:F0:D3:89:BB:54:E4:D0:D5:0F:DF:A8
X509v3 Authority Key Identifier:
keyid:06:29:C9:9D:47:60:C2:89:B8:4C:DB:EC:F1:B6:C1:3C:F5:25:EA:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/BinJnUdgwom4TNvs8bbBPPUl6q8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BinJnUdgwom4TNvs8bbBPPUl6q8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/B50CA4AA0B6211EEB2D35E8A4AD9E6FC/8888CB6C101611EE8E25D14E4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.12.117.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:80:fe:e4:7b:aa:44:19:35:1e:b9:ca:11:9f:c9:a6:27:de:
27:1f:0d:cf:4d:0b:e3:02:aa:dd:98:3d:62:bc:5b:b9:d2:84:
cb:88:96:a4:40:7c:c4:84:7d:18:5b:68:e1:9b:35:f2:a5:fc:
9f:1f:9c:fa:ab:0c:ba:cb:3a:10:76:4b:68:2d:4f:c1:2a:e8:
56:b9:c2:32:9a:08:1d:a8:38:1f:01:01:1c:3b:55:35:75:ca:
2d:41:9c:93:02:c9:2c:0c:74:e9:7b:3b:f8:ad:06:06:ba:74:
33:ec:2e:30:d9:0c:fb:9e:be:f3:cb:a4:e2:cf:40:3a:52:1c:
19:c9:bb:75:e2:a4:fc:f1:8f:19:9a:af:ec:97:3f:13:07:68:
9f:85:ac:1a:d1:d6:ea:9f:2c:a0:a3:74:00:b1:3f:b5:07:90:
3e:b6:e5:d9:83:c8:d7:9b:d2:fa:63:23:22:76:cd:17:90:19:
d9:46:09:35:fd:6a:8c:e3:6a:82:91:aa:cf:92:56:30:c3:e0:
c6:2e:94:7a:70:52:da:f3:58:43:9d:1e:c6:42:c8:b7:04:53:
fc:0f:83:89:44:68:4d:71:53:8d:8c:9f:d5:5a:87:6c:ef:25:
34:59:a2:0a:7f:3e:30:89:77:87:2e:05:b5:67:8f:e7:18:86:
89:c2:cd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 03:05:54 2024 by rpki-client on console-fra.rpki-client.org