Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9595D8C256E811EE86F456584AD9E6FC.roa
File: 9595D8C256E811EE86F456584AD9E6FC.roa (raw, json)
Hash identifier: L+332kY9QHFNeJED0XeMUAmVjZkvNiD/iuUhIHrTsJo=
Subject key identifier: 22:BB:D2:D4:03:0E:49:BC:2F:C0:DA:7C:3C:0C:B6:39:FC:2A:6D:97
Certificate issuer: /CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Certificate serial: 050A
Authority key identifier: 2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9595D8C256E811EE86F456584AD9E6FC.roa
Signing time: Tue 19 Sep 2023 12:32:24 +0000
ROA not before: Tue 19 Sep 2023 12:32:19 +0000
ROA not after: Fri 30 Sep 2033 12:32:19 +0000
asID: 3741
IP address blocks: 196.1.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.mft
rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1290 (0x50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B216AF/serialNumber=2F407FECD8B7DDDCA5D5B90A5E19589D06C101DC
Validity
Not Before: Sep 19 12:32:19 2023 GMT
Not After : Sep 30 12:32:19 2033 GMT
Subject: CN=650994d8-0afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:61:29:ae:bf:91:71:d8:fe:d3:aa:ba:5e:
f5:b5:68:2e:45:e0:8b:80:b5:da:ee:e2:cc:58:fd:
27:f4:99:8b:3d:7f:5e:cb:9b:e6:c1:df:50:a3:63:
54:aa:e2:60:7a:6a:f6:df:ee:37:91:3a:0e:6d:93:
29:44:ea:8d:a7:d8:dd:ef:02:c7:52:a5:a2:b1:4d:
ae:71:5c:cb:95:d1:d8:43:75:a5:5c:b4:ed:38:1d:
c2:e5:02:b1:ed:ef:e2:aa:48:9e:f0:22:20:e3:4d:
8c:74:8f:89:64:14:e6:fa:7e:e1:99:5c:34:05:01:
fd:e0:89:88:cb:da:0b:64:6d:58:30:54:97:88:35:
ba:1b:8e:fc:5c:94:87:21:47:35:98:a2:ed:2b:1b:
46:6e:4c:ce:41:60:8a:51:1b:3e:2e:57:97:41:1c:
d5:4e:9e:39:2d:a7:2d:43:fd:74:66:2f:86:88:a3:
fc:9f:d4:a1:e7:43:08:18:af:c8:b4:dc:ff:de:24:
aa:d7:86:15:c7:0f:b8:8d:6e:6f:79:46:8c:65:93:
ce:b5:db:c5:7d:de:57:d7:08:4c:f7:c4:64:40:a1:
41:d9:c6:1d:0f:a6:8f:b0:e8:7a:fe:23:3a:67:77:
bb:f3:9e:de:3f:59:29:c3:76:8b:ee:73:17:f1:46:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BB:D2:D4:03:0E:49:BC:2F:C0:DA:7C:3C:0C:B6:39:FC:2A:6D:97
X509v3 Authority Key Identifier:
keyid:2F:40:7F:EC:D8:B7:DD:DC:A5:D5:B9:0A:5E:19:58:9D:06:C1:01:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/L0B_7Ni33dyl1bkKXhlYnQbBAdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L0B_7Ni33dyl1bkKXhlYnQbBAdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/36AC0F9687D511EBAAFF3447F8AEA228/9595D8C256E811EE86F456584AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.1.75.0/24
Signature Algorithm: sha256WithRSAEncryption
34:dd:e2:04:aa:56:96:5e:e2:dc:a7:b6:fc:e0:4b:f4:f8:ac:
65:a6:a1:08:74:ac:c0:7f:38:35:af:db:03:7e:f4:28:a9:e4:
46:36:20:7c:33:08:b6:01:f0:67:4f:ff:28:25:9f:26:60:3a:
06:5a:a2:a3:53:c1:8b:07:20:b2:a3:75:15:7a:f8:a1:47:06:
ad:4e:4e:ef:e3:f2:21:51:be:75:97:05:eb:ba:d1:d4:07:f4:
a6:bc:81:53:eb:06:d3:39:14:9a:7c:34:ad:e0:73:ab:6a:0c:
3c:bf:47:a9:66:8e:18:7b:e1:a8:4e:b0:05:8e:83:f9:18:8d:
ad:00:11:1d:af:2f:9b:85:51:72:4e:e1:cf:6c:bc:da:f2:4b:
a7:8f:5c:7b:08:64:9b:96:5d:0b:69:a9:a1:19:7b:c0:36:84:
43:eb:58:31:af:56:71:15:2c:77:d4:8a:f8:2c:61:d9:d5:44:
bc:f4:66:62:28:2d:99:2f:ef:ba:60:b7:ab:89:86:1d:58:ed:
74:ff:ad:b8:94:30:f1:c9:da:6e:ab:86:fa:64:44:4f:02:8a:
95:c0:6b:cc:40:8f:c2:24:5e:c4:c8:5a:97:bb:2d:a9:ef:79:
a2:76:af:7b:71:c2:49:82:4e:30:24:16:a1:49:a5:49:c9:48:
a4:38:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:03:53 2024 by rpki-client on console-fra.rpki-client.org