Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/2B358C9ACA5411E9AB56C482F8AEA228.roa
File: 2B358C9ACA5411E9AB56C482F8AEA228.roa (raw, json)
Hash identifier: 542MHTZAg9mxUFxY3zCZ7p5fwSnjIWtxUnE6kTXmKMs=
Subject key identifier: B0:18:12:0C:CA:07:4C:84:4B:74:3E:6C:8B:49:D5:7B:DD:90:A6:D8
Certificate issuer: /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Certificate serial: 05C4
Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/2B358C9ACA5411E9AB56C482F8AEA228.roa
Signing time: Thu 29 Aug 2019 11:57:27 +0000
ROA not before: Thu 29 Aug 2019 11:57:19 +0000
ROA not after: Fri 29 Aug 2025 11:57:19 +0000
asID: 36874
IP address blocks: 41.177.0.0/16 maxlen: 16
105.233.0.0/16 maxlen: 16
196.6.121.0/24 maxlen: 24
196.22.240.0/20 maxlen: 20
196.41.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 28 Apr 2024 00:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1476 (0x5c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Validity
Not Before: Aug 29 11:57:19 2019 GMT
Not After : Aug 29 11:57:19 2025 GMT
Subject: CN=5d67bda6-8b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:d7:e9:97:d5:f4:ae:ee:5b:59:b9:61:e8:
89:bd:75:b9:86:89:df:e3:c7:d4:73:ca:27:cd:52:
b1:d4:65:b4:b7:32:f1:23:cb:1b:73:83:21:5a:d0:
ab:65:e6:c8:79:3d:11:1e:f7:e2:0a:45:ce:b6:06:
48:4c:a8:a4:24:58:aa:02:1c:21:d5:22:17:a7:9d:
26:7f:e3:67:ef:12:4d:42:83:0a:60:bb:b3:8c:54:
27:8a:e8:ea:3b:b8:f8:90:78:1b:f2:4e:47:0f:81:
36:0a:25:45:f8:97:d0:2d:36:aa:6f:06:88:bc:9b:
e0:26:14:47:50:d7:72:13:14:73:92:31:1f:dd:e2:
7b:89:b9:d1:c5:44:c4:1f:af:31:e6:9a:98:37:be:
12:86:65:e8:20:9a:4b:d3:fe:61:68:69:20:96:99:
76:43:f2:e6:c3:6b:c6:3b:df:cd:2c:db:0f:e7:e1:
a9:c4:6f:e3:83:0a:b8:6e:2f:f6:80:a2:32:22:bc:
85:96:50:3c:f4:3d:d7:0d:c1:b1:e7:c3:53:a0:f2:
51:85:d9:04:1b:36:d2:92:71:24:b2:72:ee:94:03:
d6:99:87:c8:63:43:8b:c3:42:73:3e:34:74:b9:a1:
e9:2d:b7:41:99:dc:3f:00:93:bc:85:0e:cc:a6:f8:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:18:12:0C:CA:07:4C:84:4B:74:3E:6C:8B:49:D5:7B:DD:90:A6:D8
X509v3 Authority Key Identifier:
keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/2B358C9ACA5411E9AB56C482F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.177.0.0/16
105.233.0.0/16
196.6.121.0/24
196.22.240.0/20
196.41.96.0/19
Signature Algorithm: sha256WithRSAEncryption
46:e1:08:44:df:c3:4a:59:92:e9:33:64:67:ff:36:3f:21:09:
6e:97:cb:61:62:d4:c6:b6:ec:36:a6:34:79:44:e7:a4:55:f2:
f9:94:38:07:13:ca:43:d3:c7:4f:0d:49:c7:52:1d:b4:30:d4:
22:d9:68:6e:d0:3b:de:f8:2c:73:7e:39:90:53:13:04:02:1a:
62:e8:e7:ef:fb:11:48:6a:36:1d:22:6d:ad:2a:12:3b:14:e2:
08:61:87:92:68:3b:47:65:a3:48:17:bb:87:c5:09:ca:10:c0:
62:c2:57:bb:a5:a9:15:29:77:ff:25:96:ad:59:45:cb:51:11:
b7:b3:87:1c:c0:63:d8:04:4b:3e:d6:1f:8d:92:2d:02:0c:2d:
6f:57:c2:8f:86:25:b6:77:ab:5a:d5:03:77:00:b0:4d:14:a8:
0f:db:55:7e:84:e4:5d:38:4e:59:3e:f5:a6:2a:a4:8f:f9:3f:
20:c3:c6:77:05:51:d3:a8:81:09:a9:8b:59:24:e5:59:66:ef:
fb:d4:fb:3e:d7:c1:1c:fc:c1:44:fb:59:f4:60:17:4e:f9:90:
a8:10:cc:35:0f:57:6d:43:61:6d:e1:4f:3a:59:0a:39:8a:f3:
39:26:43:15:c2:83:0c:db:a1:ed:1e:d1:fe:81:ae:80:01:2a:
ed:62:83:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:36:08 2024 by rpki-client on console-ams.rpki-client.org