Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/1A4F9134922511EF83368F9D762E951A.roa
File: 1A4F9134922511EF83368F9D762E951A.roa (raw, json)
Hash identifier: anCBfgZHtzniM7dP4vfF3lMI+1CdF2Ions9Nt8kdpN4=
Subject key identifier: D2:94:46:FD:D7:CD:23:D5:1E:E2:80:9A:60:6A:9F:7D:D8:F2:86:49
Certificate issuer: /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial: 0260
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/1A4F9134922511EF83368F9D762E951A.roa
Signing time: Thu 24 Oct 2024 16:29:12 +0000
ROA not before: Thu 24 Oct 2024 16:29:09 +0000
ROA not after: Tue 24 Oct 2034 16:29:09 +0000
asID: 37105
IP address blocks: 197.185.0.0/18 maxlen: 18
197.185.64.0/18 maxlen: 18
197.185.128.0/18 maxlen: 18
197.185.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 608 (0x260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Validity
Not Before: Oct 24 16:29:09 2024 GMT
Not After : Oct 24 16:29:09 2034 GMT
Subject: CN=671a75d8-940a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:3e:41:d9:52:3c:57:12:50:24:dc:8d:f8:
a0:9a:29:58:dd:7c:b5:26:48:a4:91:35:2c:c0:7c:
76:3c:b4:1d:1d:e5:8a:c3:b8:d0:fc:2d:54:b8:cd:
7d:06:2d:34:91:ac:5c:52:36:d6:23:a5:92:09:7e:
75:b7:96:05:1e:d2:6e:2e:11:3b:44:ec:aa:76:64:
9c:bf:37:9f:79:2b:08:83:93:94:d2:f3:a5:b9:7e:
40:c2:11:f8:94:e4:a0:42:47:51:64:04:9f:69:94:
dd:77:40:72:c6:42:83:10:e6:c8:12:dd:dd:ff:2a:
d7:d5:14:49:1a:66:37:ac:6f:92:f8:2d:7a:36:64:
85:e4:f8:58:9a:4e:21:6f:16:e3:4d:a0:55:4e:6f:
9c:32:0f:85:3b:32:5c:73:bc:29:8b:6d:77:ef:3d:
ed:7c:28:fe:a0:8e:0c:6b:fc:96:6b:d0:30:15:21:
7b:0a:5b:d9:48:42:9d:4c:b9:38:2b:77:2b:f2:68:
e3:94:21:6a:57:4c:a2:2e:fa:5e:4b:3a:eb:43:d8:
16:b0:ae:59:c9:06:e1:13:df:45:d1:ef:90:56:87:
ae:9c:fb:05:0d:b2:1b:a2:b3:7f:03:49:47:0b:fb:
81:e9:42:8e:f1:d4:25:f6:a9:35:05:02:9e:a1:6e:
05:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:94:46:FD:D7:CD:23:D5:1E:E2:80:9A:60:6A:9F:7D:D8:F2:86:49
X509v3 Authority Key Identifier:
keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/1A4F9134922511EF83368F9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.185.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:aa:bf:13:f9:d4:10:3f:2e:6e:a3:2d:61:18:c2:a6:d4:bc:
b1:db:27:a5:af:7a:2c:6a:71:fb:3a:89:1a:2a:91:73:03:68:
38:fc:da:10:1e:69:7d:69:e5:ed:11:b2:98:f7:4f:c3:60:98:
b5:f7:c7:98:b8:d5:9d:fc:76:e4:cf:fe:d4:b8:20:a4:9d:80:
ce:ef:ab:95:e1:77:84:6f:65:e4:ee:38:55:f7:2a:4f:1a:17:
a0:b0:cc:f6:00:47:ba:d2:93:a2:73:e7:bd:ec:44:2f:a9:c5:
15:4c:99:e3:98:77:32:29:f3:a4:d4:56:93:08:73:79:03:9f:
92:d0:ac:f5:3c:2e:61:24:74:e4:ca:d5:e1:a8:5d:38:45:1f:
c0:12:33:c6:be:9e:3e:0a:58:66:9f:5a:46:e8:7b:a3:c2:a2:
68:93:fb:3a:ea:2a:7c:71:0c:d6:a4:4c:35:95:d3:ef:c9:8c:
ec:43:df:00:ac:7e:88:d1:8e:15:e2:be:d9:db:ad:a1:a8:7e:
e9:29:92:3e:fd:c8:c1:be:8e:d7:45:70:8d:13:b4:b0:f9:bb:
49:bf:8e:2b:e0:f7:6f:51:8c:70:9e:2e:25:da:67:1a:05:92:
88:8b:0d:d4:b0:de:a0:23:c2:01:ef:07:3e:d0:b3:12:5d:05:
7b:bc:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:22 2024 by rpki-client on console-ams.rpki-client.org