Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B7DC49C6336511EE9B54B63D4AD9E6FC.roa
File: B7DC49C6336511EE9B54B63D4AD9E6FC.roa (raw, json)
Hash identifier: B2iDbBk6LrK49+gn5SpxJ9VIulGVW9JtS43FBCJUGRQ=
Subject key identifier: A2:C9:EB:72:D5:37:CD:AE:02:AA:2F:2E:A0:F7:36:94:AC:72:5F:B9
Certificate issuer: /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial: 051D
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B7DC49C6336511EE9B54B63D4AD9E6FC.roa
Signing time: Sat 05 Aug 2023 07:57:26 +0000
ROA not before: Sat 05 Aug 2023 07:57:23 +0000
ROA not after: Sat 30 Jul 2033 07:57:23 +0000
asID: 37119
IP address blocks: 105.175.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Validity
Not Before: Aug 5 07:57:23 2023 GMT
Not After : Jul 30 07:57:23 2033 GMT
Subject: CN=64ce00e6-f28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:13:c0:58:12:19:29:2c:e7:b4:54:c5:33:
b6:a4:47:31:d7:56:e0:f1:81:ae:b7:4f:75:e5:1d:
2a:7a:9d:7f:92:4e:b7:52:29:49:44:e4:39:41:e1:
e0:ee:e6:f0:8a:33:2c:e2:0d:71:0d:73:45:c7:3d:
3e:df:5e:4b:60:d8:0f:94:0e:30:ff:3e:99:54:a4:
c1:a7:7c:b2:69:f7:22:26:f6:c0:2e:d8:d5:6a:b3:
79:85:56:9a:87:b5:fc:8b:71:b2:62:08:b1:89:82:
40:c9:a3:72:dc:01:05:79:93:cf:8c:1f:7e:e1:b3:
ae:c5:77:78:e2:b1:2e:9e:e3:43:ae:dc:5e:2a:8f:
02:35:5f:87:ac:61:86:1d:41:ab:47:39:e5:59:3f:
0e:b4:c6:51:60:8f:b2:d7:30:0b:4e:35:9a:8c:b9:
77:16:cf:7f:82:67:30:38:7f:5d:c8:10:f6:12:13:
60:43:a6:4d:bb:39:62:e6:c6:11:d7:11:09:87:f6:
d7:ef:73:4e:16:f2:2f:bd:fc:58:88:b0:6d:cc:11:
20:ee:33:f9:4a:57:a0:39:19:df:18:94:9b:cd:f2:
23:ea:6e:5d:96:df:86:8b:4d:fa:8a:07:7d:ef:d2:
e0:0f:b8:78:a2:e4:bb:47:b1:28:39:9c:23:0b:b4:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C9:EB:72:D5:37:CD:AE:02:AA:2F:2E:A0:F7:36:94:AC:72:5F:B9
X509v3 Authority Key Identifier:
keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/B7DC49C6336511EE9B54B63D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.175.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:5c:09:c1:8d:7e:9c:97:9e:c6:0a:7e:20:14:48:8e:e5:18:
21:f6:6f:c9:9f:30:ac:d3:96:42:41:e3:20:62:fe:54:23:e4:
8a:09:ec:42:5d:3c:2e:78:fe:61:99:c6:e3:af:59:bf:01:15:
74:18:f4:9a:4d:7e:d0:b9:c9:1f:b9:c8:f3:72:7c:cd:0d:c6:
20:0d:d3:fa:87:2d:91:77:d9:12:e9:8a:09:75:b0:ee:d2:35:
cc:fb:4a:5a:66:8c:ff:31:ab:42:bb:59:f9:9a:5d:ae:97:5f:
59:b5:69:42:8d:fc:c9:e5:b4:0c:cb:7f:85:5e:8f:65:4d:07:
b4:f1:0d:21:f2:9c:2f:22:71:71:4a:46:25:cd:55:ce:02:e8:
a0:b6:a4:58:c2:89:a4:ea:3b:2d:85:b4:c5:29:5f:61:1e:38:
c0:82:9b:29:e2:58:73:73:43:90:70:21:18:13:ff:f5:5f:47:
8c:1e:47:9f:f1:a4:cd:31:c5:7a:61:3c:eb:03:ae:d8:12:20:
67:03:58:37:cd:9c:99:dc:6d:6e:a7:6a:31:71:25:50:46:2c:
55:c7:87:39:58:98:91:88:da:d6:23:b7:e8:81:fe:84:17:3b:
5d:2f:50:74:70:ec:fa:d7:ea:b6:b9:94:60:09:93:03:d0:04:
a4:3a:79:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:18 2024 by rpki-client on console-fra.rpki-client.org