Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/335AE6084A2F11EF9F06A342762E951A.roa
File: 335AE6084A2F11EF9F06A342762E951A.roa (raw, json)
Hash identifier: +Jag2XtPaReW28LLYskeApEkdXybNuIZuhATM6amnqA=
Subject key identifier: B6:0C:DE:20:4C:1B:4C:0D:5C:38:32:B0:DC:A2:C5:08:28:CC:17:0C
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 49
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/335AE6084A2F11EF9F06A342762E951A.roa
Signing time: Thu 25 Jul 2024 02:40:06 +0000
ROA not before: Thu 25 Jul 2024 02:40:02 +0000
ROA not after: Mon 14 Dec 2026 02:40:02 +0000
asID: 37140
IP address blocks: 196.175.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Sep 2024 00:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Validity
Not Before: Jul 25 02:40:02 2024 GMT
Not After : Dec 14 02:40:02 2026 GMT
Subject: CN=66a1bb06-307e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:58:80:2a:0d:1a:ff:a9:21:cc:3a:d2:25:
26:84:43:67:17:e7:a8:b1:3a:78:c8:3b:11:63:98:
89:07:11:eb:73:82:8b:9a:58:0b:f0:25:43:9c:86:
2e:6e:45:f1:7c:d8:9f:ac:1f:9d:d8:50:49:b2:85:
98:81:09:10:f9:b2:e7:33:e2:8e:6c:8e:31:d7:2e:
9c:53:11:63:ad:15:04:33:ab:1f:a5:fb:d7:04:fd:
77:02:fb:2b:7d:f9:81:c4:d1:00:90:87:6a:f2:2e:
37:29:36:87:68:b0:0e:a9:67:f5:f4:17:4a:bc:55:
5f:c7:d0:93:09:20:d3:99:28:23:4e:83:dc:69:7a:
62:b5:9d:f8:46:7b:40:95:cc:82:0f:cd:44:ac:45:
ea:22:9b:d9:d8:c0:15:f2:5c:6a:1f:81:a9:7c:6a:
3f:37:29:ba:3c:7e:e1:f8:27:89:09:25:ab:d0:d8:
c8:2c:3c:89:3a:d4:82:43:74:0c:1b:54:1a:5f:d4:
a6:31:cc:77:96:93:3d:fb:e9:30:d8:8c:d7:91:b5:
5c:dc:e1:20:41:c2:c2:16:3c:59:70:d1:58:5d:73:
e2:3d:3c:ac:a9:00:3c:73:40:0a:23:f0:d6:50:b2:
ee:15:c4:d3:d3:63:07:d8:6c:74:c0:ad:fe:8a:81:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0C:DE:20:4C:1B:4C:0D:5C:38:32:B0:DC:A2:C5:08:28:CC:17:0C
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/335AE6084A2F11EF9F06A342762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.175.2.0/24
Signature Algorithm: sha256WithRSAEncryption
df:94:a1:0f:b4:b8:26:ce:20:7d:ea:5e:02:57:cf:34:ea:07:
35:4a:5d:39:58:63:e0:7c:9b:9a:ef:08:14:40:20:7d:cb:98:
ee:cd:25:95:f9:3e:20:c6:59:7e:02:1b:53:f4:b2:fa:3c:28:
6f:1a:ef:d8:37:4c:53:31:ae:29:6e:b2:74:8a:96:19:e1:66:
95:66:9f:49:80:a9:61:42:1f:0e:50:1e:88:d9:58:dc:8a:7b:
cc:74:59:bc:e6:82:99:0a:46:7f:77:96:a7:80:58:43:35:96:
55:a0:f6:4a:8b:6d:0b:9a:58:b2:b4:0f:61:d7:ec:4b:a1:87:
28:e0:d1:4c:f8:68:20:cc:1f:78:9c:3d:e2:2d:f9:d3:5f:4a:
69:0c:29:68:d2:68:dc:da:d5:b3:e5:a8:5f:9f:49:ba:f2:1d:
15:df:44:a9:16:89:af:c5:d1:2a:cc:2a:9c:2c:ab:02:5e:61:
52:5c:87:ea:06:f2:21:a0:ba:43:4a:de:73:83:55:93:de:92:
e3:74:18:33:64:66:3b:ca:47:3e:ed:88:37:96:17:b2:a5:dd:
9a:95:17:3e:d2:71:52:cd:43:6b:f9:20:10:2b:88:0b:85:a0:
4f:fb:81:7a:bf:fa:04:2c:92:64:88:a3:c7:73:9c:75:18:20:
a5:d7:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 03:58:06 2024 by rpki-client on console-fra.rpki-client.org