Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/0587256289A811EF93AD2A50762E951A.roa
File: 0587256289A811EF93AD2A50762E951A.roa (raw, json)
Hash identifier: 6JhA3S1UqVY6eY/SMX4lyeIJmn8FI+S8y3sFftIT63s=
Subject key identifier: 37:E1:3B:68:3B:D4:41:E9:87:61:BC:F6:96:D0:B2:22:C0:94:CC:36
Certificate issuer: /CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Certificate serial: 02
Authority key identifier: F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/0587256289A811EF93AD2A50762E951A.roa
Signing time: Sun 13 Oct 2024 21:13:41 +0000
ROA not before: Sun 13 Oct 2024 21:13:37 +0000
ROA not after: Fri 13 Oct 2034 21:13:37 +0000
asID: 37164
IP address blocks: 41.191.248.0/22 maxlen: 24
197.215.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Validity
Not Before: Oct 13 21:13:37 2024 GMT
Not After : Oct 13 21:13:37 2034 GMT
Subject: CN=670c3805-b92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ed:22:06:b2:25:53:b0:a8:28:ed:af:fb:03:
99:d4:3c:20:4d:0c:a5:81:94:eb:18:75:34:76:b4:
12:29:61:ac:0b:ef:07:91:42:27:8c:e4:3e:f1:c4:
b7:b8:cd:86:9c:d1:86:ae:cb:74:95:40:49:50:72:
5f:e7:de:b6:63:d3:63:03:94:92:73:37:49:06:86:
ac:e7:2c:b6:32:cd:9f:6c:d4:5c:d3:25:c6:aa:4c:
24:d4:43:60:00:4a:eb:bb:a8:ff:b6:17:26:bd:ac:
a1:01:9e:f1:ec:fc:62:5d:75:24:a9:fc:7e:6c:96:
29:b2:5a:cf:95:af:2a:01:a9:e6:ca:33:e2:35:9e:
c3:03:8d:c1:8e:2e:2a:e3:ef:bd:76:e5:f0:e9:75:
7e:de:b1:45:da:b6:11:ca:5a:c7:be:a1:85:e9:02:
32:81:61:86:63:67:0e:0d:05:85:f2:e1:be:76:39:
70:be:f4:69:42:85:67:0c:c3:2a:70:8f:26:89:1b:
16:c6:04:0c:23:e3:97:27:ac:45:13:87:8e:ab:ae:
94:e4:8d:34:0c:6a:ea:9a:94:85:cc:7c:77:ad:d0:
11:87:23:57:e8:a2:cf:cc:6a:af:76:af:de:28:50:
5b:29:86:6e:1d:9d:5b:32:30:bd:75:7c:d1:7b:14:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:3B:68:3B:D4:41:E9:87:61:BC:F6:96:D0:B2:22:C0:94:CC:36
X509v3 Authority Key Identifier:
keyid:F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/0587256289A811EF93AD2A50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.191.248.0/22
197.215.0.0/17
Signature Algorithm: sha256WithRSAEncryption
c5:75:8a:5f:67:d5:fb:e9:5c:10:21:44:4c:c3:2e:fe:eb:ab:
c2:a7:2e:84:88:bf:a3:15:31:a0:6a:12:0b:3b:99:3b:b5:4b:
87:3a:85:44:a5:75:67:33:91:a8:da:06:c6:ad:62:f2:64:4e:
1d:78:f2:85:9d:c6:98:d2:f2:0e:57:d2:bb:5a:69:a0:6b:08:
d1:05:ee:aa:31:89:89:fd:7f:2e:21:1f:d3:6f:5a:a2:5a:71:
c6:5d:cc:e6:51:e4:62:0c:de:46:7c:8a:7f:ae:98:42:49:0b:
84:58:44:f7:51:80:92:3d:ad:57:6b:73:7f:5b:03:dc:8a:ee:
be:e4:5f:b0:04:7b:b5:c5:be:0d:03:aa:d2:71:e9:7a:a8:3f:
3e:f0:2d:89:16:e9:a1:35:95:6b:70:08:9b:68:93:db:c7:23:
4f:cd:fe:33:63:eb:dc:5d:75:c6:33:8e:91:d7:93:9e:f9:1a:
19:eb:3b:8d:64:d9:07:f3:ac:4b:40:71:ad:2c:9e:29:a8:86:
04:55:00:66:5d:f5:81:ee:c9:ac:58:3b:89:48:fb:c8:c3:28:
6c:9d:cc:d2:89:03:4a:b6:e2:6a:1a:a3:99:71:49:bd:21:84:
56:c1:14:ea:29:09:72:f0:a3:eb:38:98:f2:65:87:05:fd:78:
da:0c:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:49 2024 by rpki-client on console-fra.rpki-client.org