Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/19DBEAFC864C11EF91E74660762E951A.roa
File: 19DBEAFC864C11EF91E74660762E951A.roa (raw, json)
Hash identifier: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=
Subject key identifier: B7:02:B9:C9:0F:B4:9F:DF:DA:8D:A0:8B:38:FC:E3:11:11:3E:DF:2B
Certificate issuer: /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial: 0805
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/19DBEAFC864C11EF91E74660762E951A.roa
Signing time: Wed 09 Oct 2024 14:38:08 +0000
ROA not before: Wed 09 Oct 2024 14:38:04 +0000
ROA not after: Mon 30 Oct 2034 14:38:04 +0000
asID: 8346
IP address blocks: 41.208.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Validity
Not Before: Oct 9 14:38:04 2024 GMT
Not After : Oct 30 14:38:04 2034 GMT
Subject: CN=67069550-8c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:91:23:3d:ca:f5:38:d8:6f:a9:0d:d4:88:
af:4a:19:2e:f0:f5:f9:a1:2c:43:01:a3:8d:42:83:
97:80:dd:27:3d:9a:3a:fe:aa:4d:f9:99:ca:8c:24:
95:c3:d1:a0:06:7b:1a:30:49:64:ea:ec:ff:02:c0:
6f:08:b3:e9:97:3d:4f:b5:98:84:a7:61:c8:76:97:
2a:8e:9a:1b:85:cd:ea:d1:d2:d2:05:94:a7:a4:4c:
38:77:49:7e:20:40:23:3f:d7:6c:79:91:a5:91:72:
8b:75:59:d0:78:2c:85:be:12:33:0e:ad:e2:5f:6f:
1d:52:e3:04:0d:88:e3:67:c9:51:20:46:8d:47:a2:
3e:8e:77:e0:49:7f:3c:a4:97:78:43:c4:4d:51:d1:
d6:5a:23:36:32:06:d0:b8:cf:9d:19:d9:c0:b5:76:
2c:82:c0:fa:7f:7c:59:4f:ba:e1:41:3d:93:35:11:
e7:5e:e3:47:cd:3c:bd:16:40:65:91:df:98:dc:32:
06:7a:38:54:fa:62:af:95:0b:f7:ef:91:4b:f3:96:
39:a0:a6:ed:5a:7b:dc:5a:c2:7d:2c:4e:fa:01:99:
62:b9:e9:c5:34:1c:9f:67:7e:63:95:ea:44:91:6c:
d7:cd:87:01:ff:a9:68:67:4b:76:68:a8:eb:67:c3:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:02:B9:C9:0F:B4:9F:DF:DA:8D:A0:8B:38:FC:E3:11:11:3E:DF:2B
X509v3 Authority Key Identifier:
keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/19DBEAFC864C11EF91E74660762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.208.128.0/18
Signature Algorithm: sha256WithRSAEncryption
0e:c0:53:49:8b:f2:6a:f7:2f:15:1d:f7:0d:c2:bb:55:ed:5a:
29:a4:e4:2e:d1:d1:be:69:e3:a1:7e:ba:2a:5f:e3:d4:dc:4f:
41:32:a3:a4:5e:6c:9a:11:29:98:7a:8d:f6:16:53:a6:1e:df:
37:5c:bd:cd:8a:0f:0c:02:dc:55:d8:70:29:66:49:6e:e8:3c:
44:38:d3:6b:7a:18:94:e5:a6:e2:6d:5f:c6:a6:3c:74:aa:67:
52:c4:e7:17:fa:ca:7d:81:3f:7b:d0:ae:11:9d:c3:5b:66:d1:
77:7e:b0:74:bc:7f:fd:d7:7a:92:dc:ba:c9:89:8c:1c:c3:7a:
2f:b6:6f:da:55:88:e3:6d:56:16:dc:2b:9a:11:aa:a2:b8:8d:
a3:12:68:39:80:11:90:9d:ec:bb:de:4f:1c:dd:e9:17:bb:fc:
5a:6a:da:e3:a0:18:7d:7f:71:95:ab:c4:0a:91:d0:62:2e:37:
12:f2:5f:6f:8e:6d:c5:05:90:29:67:71:f9:e3:a6:ce:8e:14:
c7:0e:99:22:5b:81:72:59:ea:fd:f0:78:85:d3:31:7f:f8:5a:
e7:c1:c7:95:87:c4:73:81:20:92:e9:7a:a1:93:da:75:51:91:
43:45:cb:00:76:fb:3a:96:d9:ec:b7:03:a4:e6:fe:43:d7:aa:
67:d9:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:21 2024 by rpki-client on console-ams.rpki-client.org