Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/3475B4CE715911EDBD845FA1F1222468.roa
File: 3475B4CE715911EDBD845FA1F1222468.roa (raw, json)
Hash identifier: rSpN0CttBvt3yWiQBik8rA8aXwaKt3ZQO71pJB6oxWU=
Subject key identifier: 36:98:AC:FC:2C:66:2C:F9:DF:50:9F:3B:11:16:9A:B1:23:0B:15:D0
Certificate issuer: /CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Certificate serial: 02
Authority key identifier: E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/3475B4CE715911EDBD845FA1F1222468.roa
Signing time: Thu 01 Dec 2022 09:19:06 +0000
ROA not before: Thu 01 Dec 2022 09:19:01 +0000
ROA not after: Wed 01 Dec 2032 09:19:01 +0000
asID: 37009
IP address blocks: 105.232.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.mft
rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CC035AF/serialNumber=E3B07BB9D0957749FFE48C7E7325A9E11B416AB9
Validity
Not Before: Dec 1 09:19:01 2022 GMT
Not After : Dec 1 09:19:01 2032 GMT
Subject: CN=6388718a-2b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:3e:25:7b:14:d9:9d:58:3d:c0:a2:64:79:
4f:44:13:a6:70:2f:31:73:48:b7:e3:69:de:8c:ff:
b9:50:d9:49:82:bf:a9:f5:16:7b:33:ca:8b:b3:fa:
62:db:4f:cd:fc:39:dc:ee:9e:2c:07:be:ca:ae:2a:
df:85:b8:4b:bd:b4:e6:1f:c8:48:f9:ca:c9:ac:88:
23:74:31:09:e6:87:a1:b5:d1:ef:2d:3a:c1:47:9f:
12:fe:02:16:a2:54:9d:12:1c:53:8f:39:7f:ba:66:
f0:9e:2f:17:43:3d:bc:f1:45:c5:11:82:ad:67:3a:
62:64:8b:29:d0:03:b2:d5:a7:5f:f6:5b:c1:56:b3:
d0:4c:71:2d:d4:70:c1:e1:13:03:28:6d:c6:99:8d:
2b:3d:2b:33:2f:5e:79:54:f1:72:d1:a0:07:c7:c9:
b3:b6:94:88:9f:54:de:00:09:de:f1:50:e5:b6:0b:
d1:a9:67:8d:ca:f9:bc:8d:aa:c0:62:a0:44:1d:93:
b7:6f:f5:bc:0b:b7:ec:26:4c:4c:7b:9a:30:91:e6:
73:8f:71:be:93:df:e8:b4:64:83:b1:f5:b7:fd:2f:
98:f7:bf:3c:a4:46:77:78:ab:c7:d2:63:96:1a:c7:
85:2c:c8:db:8e:0a:91:63:ee:dd:0d:b7:1b:69:b1:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:98:AC:FC:2C:66:2C:F9:DF:50:9F:3B:11:16:9A:B1:23:0B:15:D0
X509v3 Authority Key Identifier:
keyid:E3:B0:7B:B9:D0:95:77:49:FF:E4:8C:7E:73:25:A9:E1:1B:41:6A:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/47B7udCVd0n_5Ix-cyWp4RtBark.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/47B7udCVd0n_5Ix-cyWp4RtBark.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC035/71F69968715811ED8B19339FF1222468/3475B4CE715911EDBD845FA1F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:57:b5:43:4b:15:fb:64:a7:d3:dd:37:f8:72:0e:7b:67:20:
98:fd:db:2e:1f:52:ed:88:ae:9e:1a:04:0e:96:0c:97:a5:ee:
a5:01:51:54:d6:74:16:f9:ba:4b:9d:8c:62:6f:6a:46:1d:21:
fd:b4:98:19:a4:cf:00:21:2a:54:3e:92:85:62:97:79:f7:e4:
a8:12:03:23:1b:99:fe:8f:75:de:0f:4c:a8:f6:ef:07:35:68:
0e:51:06:d2:67:81:18:97:84:f2:73:2c:5d:f7:14:8f:81:5f:
96:d0:dc:fc:73:5b:58:da:19:01:8d:b0:14:e8:38:23:a2:5f:
35:d6:d2:c7:63:88:13:23:ae:47:46:9f:46:5e:6b:89:0f:31:
2e:50:98:cd:8d:91:7c:81:31:1a:db:46:92:ea:43:92:d9:44:
7b:02:2b:32:2b:10:a0:fb:5d:c3:b1:79:18:1e:8c:7e:d4:31:
ef:b2:d0:70:8b:2d:37:71:fb:b9:98:26:60:94:4c:aa:42:63:
08:5d:5f:9e:ca:c3:20:c3:1d:83:c9:a8:7e:47:a4:b2:f2:cb:
06:80:6f:30:f5:b7:62:9e:48:8d:58:64:4f:c8:12:c9:a2:02:
51:df:24:0a:de:d4:e9:ed:2b:51:d7:6b:24:64:1e:32:83:2a:
11:2d:92:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:27 2024 by rpki-client on console-ams.rpki-client.org