Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1365094EE86611EE98937E8A775412E6.roa
File: 1365094EE86611EE98937E8A775412E6.roa (raw, json)
Hash identifier: qXaNSWUUkd1/tms6qUkC+QkBIEWZLZ22f40aCebhs1c=
Subject key identifier: BB:77:47:76:87:C0:36:1D:17:3F:28:A2:C2:0B:EE:0A:58:96:4B:1C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1004
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1365094EE86611EE98937E8A775412E6.roa
Signing time: Fri 22 Mar 2024 16:06:00 +0000
ROA not before: Fri 22 Mar 2024 16:05:57 +0000
ROA not after: Sun 22 Mar 2026 16:05:57 +0000
asID: 29802
IP address blocks: 196.251.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 May 2024 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4100 (0x1004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Mar 22 16:05:57 2024 GMT
Not After : Mar 22 16:05:57 2026 GMT
Subject: CN=65fdac68-a4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:6c:d8:ca:98:fa:ab:71:14:06:14:4b:e9:
08:8c:ac:e5:0d:79:b5:ba:4e:97:78:1e:07:80:d2:
7a:bc:6d:f1:6a:5a:3a:c7:55:c6:6e:02:10:87:9b:
df:a7:9f:96:ba:67:95:13:9d:c1:b6:9e:b0:68:2f:
c1:19:8e:cf:08:92:c2:14:83:36:86:6a:4c:77:1d:
a4:b6:76:71:df:54:58:76:34:01:23:a9:b4:2d:5f:
c0:ac:b0:e8:82:47:c5:a3:6c:ab:06:30:1e:a9:35:
50:d6:e3:29:1d:ac:53:fd:92:90:f8:d1:f3:22:e3:
a1:26:e7:63:68:91:08:2b:2a:f7:0b:f8:11:e9:64:
7f:9d:7c:b2:e4:e7:aa:9f:3f:b4:73:96:4b:8e:1d:
1f:a3:97:28:51:60:a2:00:fc:71:62:88:c4:42:2b:
f2:43:ed:db:ba:78:3a:be:67:08:b0:89:18:cb:ee:
f9:30:eb:a6:5a:ef:18:0f:3e:01:39:bd:7b:43:b9:
b2:b9:64:d6:73:e2:2b:0d:8d:2f:41:94:17:68:4d:
87:96:89:46:72:1d:1c:cc:fb:33:8b:91:43:c9:29:
5d:d0:cb:90:64:5c:d2:b5:aa:0d:9a:79:e9:69:6a:
30:c3:1f:72:05:4a:4e:76:14:27:5b:7b:dc:a0:4e:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:47:76:87:C0:36:1D:17:3F:28:A2:C2:0B:EE:0A:58:96:4B:1C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/1365094EE86611EE98937E8A775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0c:69:3f:38:c4:ba:b7:3f:c5:17:5d:19:f0:dd:96:76:23:
79:c9:f9:40:34:82:40:fe:f7:ea:dd:29:44:0b:bd:45:87:d0:
36:13:a3:f1:73:c8:96:63:19:1c:35:ef:0d:72:a8:21:c6:ac:
85:59:9c:29:f2:24:ea:02:ed:e6:2b:81:64:85:fd:8f:36:a2:
52:7b:ba:27:24:b5:06:68:c1:29:d8:45:c7:9c:57:31:97:66:
5c:ac:d6:75:45:40:08:ba:30:8f:7b:3e:d6:b7:34:5c:1f:75:
3e:52:ba:ca:1b:56:31:81:6c:30:45:a2:79:8f:8e:9e:c7:62:
d3:c1:35:8e:1d:de:92:de:64:d7:ae:ea:fd:ee:0d:ca:bf:76:
74:64:2d:3c:4f:4b:00:07:b6:7f:58:f0:37:c9:36:4c:f6:c3:
f2:ec:4d:71:4e:08:3f:64:12:46:aa:73:67:1b:da:27:d7:64:
4d:bc:dd:cc:e0:bf:ff:fe:b6:d9:37:4a:60:91:0a:67:5a:f7:
5a:a3:a2:02:4c:f2:1f:86:11:c7:f9:a7:f6:a4:73:d0:46:6c:
e0:2b:7d:87:5f:4a:ee:a9:29:0c:39:ca:57:c6:d6:28:db:8c:
cc:bd:98:62:92:cd:4c:a3:b1:02:17:9b:d4:b9:82:e0:12:d7:
cb:fa:67:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:03:10 2024 by rpki-client on console-fra.rpki-client.org