Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/DC0C04BE8B0A11EFB54E4F5D762E951A.roa
File: DC0C04BE8B0A11EFB54E4F5D762E951A.roa (raw, json)
Hash identifier: 0gnOKw2+mTkWxgOLvtsIMggu6Ze48xgwwDEchAXSPdk=
Subject key identifier: 24:A9:F7:35:C4:6C:6E:7D:F4:53:4C:52:5D:1B:E5:A3:1E:DB:BA:77
Certificate issuer: /CN=F36B1D7CAF/serialNumber=0A748532E881D6C9E79DCF24D2B855B74217BB27
Certificate serial: 0157
Authority key identifier: 0A:74:85:32:E8:81:D6:C9:E7:9D:CF:24:D2:B8:55:B7:42:17:BB:27
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/DC0C04BE8B0A11EFB54E4F5D762E951A.roa
Signing time: Tue 15 Oct 2024 15:33:43 +0000
ROA not before: Tue 15 Oct 2024 15:33:39 +0000
ROA not after: Sun 15 Oct 2034 15:33:39 +0000
asID: 800
IP address blocks: 196.200.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.mft
rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 Nov 2024 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1D7CAF/serialNumber=0A748532E881D6C9E79DCF24D2B855B74217BB27
Validity
Not Before: Oct 15 15:33:39 2024 GMT
Not After : Oct 15 15:33:39 2034 GMT
Subject: CN=670e8b57-8143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:e0:7a:e6:71:74:6d:97:cb:be:ec:b0:80:
41:40:46:d1:dc:b5:b7:75:97:3b:be:43:59:48:fb:
92:91:f5:1b:76:28:50:e8:3c:b8:73:a8:5e:0b:b1:
27:33:d1:23:12:f7:e6:72:20:0b:69:20:97:05:72:
04:92:d5:d0:43:93:25:eb:8f:dd:70:3b:5f:cd:3e:
4d:e9:96:b8:a5:f3:12:d7:0b:52:a7:70:17:32:c7:
7a:45:3f:0d:f3:79:df:64:93:ca:fa:e7:c9:ba:10:
33:b1:4c:ab:07:ee:e9:cd:e1:20:b9:aa:42:85:b8:
ed:bb:4c:f4:ae:63:61:07:6d:3e:d2:f9:3b:82:c8:
11:f3:20:d5:75:f4:ea:88:50:25:3e:5c:f4:46:a5:
d5:ae:0e:5e:88:f3:d8:03:3b:fc:0b:94:7b:cb:29:
4f:f3:82:46:f3:53:10:57:00:ef:c6:b6:b3:d3:5e:
0c:4b:15:0d:1e:cc:68:d7:53:4e:a1:c4:0a:6a:ca:
c8:1e:9b:84:dc:bb:a6:57:39:da:dc:96:b2:55:32:
c7:75:f6:09:29:03:45:3d:2c:f7:f5:c3:14:0e:2d:
c1:04:b3:12:73:5a:d0:dd:ec:07:08:9c:a9:7a:ef:
42:7e:5a:eb:e0:c4:a4:2b:22:1e:b4:81:ca:a2:19:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A9:F7:35:C4:6C:6E:7D:F4:53:4C:52:5D:1B:E5:A3:1E:DB:BA:77
X509v3 Authority Key Identifier:
keyid:0A:74:85:32:E8:81:D6:C9:E7:9D:CF:24:D2:B8:55:B7:42:17:BB:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/CnSFMuiB1snnnc8k0rhVt0IXuyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CnSFMuiB1snnnc8k0rhVt0IXuyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1D7C/ED1B1958886C11EE9B69322E4AD9E6FC/DC0C04BE8B0A11EFB54E4F5D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.200.8.0/21
Signature Algorithm: sha256WithRSAEncryption
09:bb:34:4c:5a:dd:7a:f7:b5:f0:7a:cb:6f:24:e0:8b:2f:05:
93:ff:b9:9c:8a:8f:d1:d1:8d:9f:c0:4a:b9:17:bb:14:73:f7:
cb:80:13:18:66:f3:69:1c:7a:3c:30:e9:c3:78:6c:c1:d8:43:
c1:58:13:bf:54:82:06:ff:fa:f3:ee:84:c2:eb:6c:09:34:fa:
20:ce:5a:23:62:c8:51:f9:4a:c1:44:65:60:44:2d:ad:ab:74:
96:fc:7a:dc:f2:45:ec:d1:65:d9:0e:b3:70:a6:2b:85:e8:70:
5d:e4:0a:9b:a3:cf:86:b5:de:91:3c:d9:78:8f:ee:b5:dc:6d:
47:f4:b9:23:9b:a3:8f:46:b9:ba:04:3e:1c:84:a2:f2:fb:85:
6d:8b:28:2e:5f:97:18:52:b7:d5:2a:36:96:c7:77:4a:ee:38:
9a:12:70:bf:be:4b:53:bd:5d:29:c9:3d:aa:a8:28:4d:ee:03:
e1:c2:26:1b:49:fd:1d:55:97:74:66:d9:8f:1f:f4:12:be:cd:
e0:c5:0a:c2:5d:3e:ea:05:09:ee:7b:4c:a0:e3:00:af:36:d9:
4b:1f:cc:cd:27:f2:32:08:0e:81:de:73:38:7b:db:fc:45:d9:
4e:a7:29:14:8b:c9:14:01:d4:4b:07:cb:26:fd:5d:e9:d5:60:
e8:64:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:51 2024 by rpki-client on console-fra.rpki-client.org