Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/EC1AC2E4FCA011E99F078842F8AEA228.roa
File: EC1AC2E4FCA011E99F078842F8AEA228.roa (raw, json)
Hash identifier: vMaEHZSbtMwTml47SDgjbkHSKoCPHIjAJPxF4JG+NtM=
Subject key identifier: DE:A8:58:79:AD:B6:35:61:63:02:B4:66:B0:93:EE:BD:93:C1:83:1D
Certificate issuer: /CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Certificate serial: 0C
Authority key identifier: 39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/EC1AC2E4FCA011E99F078842F8AEA228.roa
Signing time: Fri 01 Nov 2019 12:12:50 +0000
ROA not before: Fri 01 Nov 2019 12:12:45 +0000
ROA not after: Thu 01 Nov 2029 12:12:45 +0000
asID: 37682
IP address blocks: 196.50.4.0/24 maxlen: 24
196.50.5.0/24 maxlen: 24
196.50.6.0/24 maxlen: 24
196.50.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 May 2024 00:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Validity
Not Before: Nov 1 12:12:45 2019 GMT
Not After : Nov 1 12:12:45 2029 GMT
Subject: CN=5dbc2142-55a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5c:bf:cf:ee:ba:fc:7b:3f:20:03:ae:b1:62:
88:3e:0d:1b:92:dd:4f:d7:e5:6c:d1:a4:78:cb:44:
fd:4d:ae:b5:07:d1:dc:83:7a:62:4f:10:dd:35:7d:
60:d0:aa:50:74:2b:ea:24:ea:72:fc:6a:88:0e:07:
f6:07:1e:96:aa:3f:d3:6e:8c:60:c2:85:62:18:03:
08:55:f2:23:e2:42:f3:a8:bf:32:bf:09:4b:46:ed:
aa:46:3c:ed:69:d0:bb:e7:44:5f:01:4c:69:11:46:
c5:cc:b7:22:9d:5f:62:e4:05:0a:7b:cb:4e:00:b9:
97:e2:bc:85:32:b6:a3:f6:ea:f6:50:a3:96:72:be:
7a:e9:0d:c3:03:09:16:89:6e:d6:50:e4:98:9f:6a:
d3:de:80:22:22:1e:70:23:24:39:17:27:28:75:74:
54:f7:6a:c3:d6:96:9a:e7:90:47:f1:85:9b:93:04:
07:a3:66:9c:3b:c6:9c:c5:6f:ab:27:55:63:76:ea:
78:86:c9:34:1f:74:d8:51:a7:42:5c:93:ad:d9:32:
28:9c:a5:b7:8f:ee:62:25:7a:0e:e7:14:e9:6d:12:
12:37:34:a6:20:76:8c:c4:60:2a:03:02:d8:5e:d8:
ae:00:cf:cf:a2:4e:1c:21:1f:31:56:14:dd:7d:67:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A8:58:79:AD:B6:35:61:63:02:B4:66:B0:93:EE:BD:93:C1:83:1D
X509v3 Authority Key Identifier:
keyid:39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/EC1AC2E4FCA011E99F078842F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
196.50.4.0/22
Signature Algorithm: sha256WithRSAEncryption
04:42:87:e9:d8:c9:b5:f8:3e:e3:78:be:1a:d7:0c:69:d1:ef:
11:ae:85:08:71:e7:3e:4a:a9:63:46:29:c9:41:69:e8:b5:70:
64:f4:98:cd:0f:35:df:be:34:d9:34:01:1e:39:36:40:9a:7e:
3e:55:9f:04:66:fd:71:6e:7e:2d:19:38:96:0e:f4:06:90:ba:
ef:f2:45:5f:3e:e7:e7:48:2d:6e:6e:95:32:d8:de:2d:12:60:
1e:3f:80:50:b4:a5:35:f8:4e:b6:bd:8f:6f:af:84:60:75:76:
0a:99:3a:cb:e6:d1:a6:2f:e3:54:4e:4b:cf:fc:ec:25:dc:19:
8b:21:38:87:44:a6:b7:6c:ed:74:6b:45:39:55:59:4a:a2:24:
f8:73:0a:35:f0:71:19:43:9e:20:a7:3f:95:70:1e:b4:b1:20:
65:12:55:5a:a6:54:6c:03:40:a7:17:14:c6:71:1c:49:80:5c:
51:15:94:dd:f5:9a:2b:2b:da:93:a1:80:d3:f3:31:0e:28:7e:
d8:88:41:08:ad:0d:1a:96:2f:41:c4:5c:f2:21:af:dc:eb:0d:
77:43:67:4c:da:dc:2b:71:79:33:f1:f2:03:ed:b4:ed:c5:f6:
c9:a0:c4:5b:1d:a8:e5:5c:64:d9:13:76:eb:74:4c:1b:e6:dc:
48:2a:d6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 03:49:52 2024 by rpki-client on console-fra.rpki-client.org