Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/76838CE4E21211EEBB0FD29E775412E6.roa
File: 76838CE4E21211EEBB0FD29E775412E6.roa (raw, json)
Hash identifier: 83ixyn1DFACr3ZBupHAVOvYjpWf5hCNkOy2h0/nKuTw=
Subject key identifier: D9:6D:E0:63:58:3F:52:27:AB:CE:4F:74:DC:77:BC:DD:83:D7:2D:33
Certificate issuer: /CN=F36D9765AF/serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
Certificate serial: 75
Authority key identifier: F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/76838CE4E21211EEBB0FD29E775412E6.roa
Signing time: Thu 14 Mar 2024 14:52:22 +0000
ROA not before: Thu 14 Mar 2024 14:52:19 +0000
ROA not after: Tue 14 Mar 2034 14:52:19 +0000
asID: 37129
IP address blocks: 197.157.228.0/23 maxlen: 23
197.157.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9765AF/serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
Validity
Not Before: Mar 14 14:52:19 2024 GMT
Not After : Mar 14 14:52:19 2034 GMT
Subject: CN=65f30f26-1315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:e5:7d:fd:0a:5e:ed:42:77:14:0b:8b:8c:
6f:52:99:52:3f:45:f4:6c:6b:82:57:42:6a:32:55:
2b:9a:d8:ed:01:37:ad:15:10:41:57:80:1f:b2:7a:
97:69:83:e0:ff:ab:09:56:98:25:f1:c8:f4:b1:74:
55:80:5c:ed:a3:6b:5a:51:ba:1c:1d:11:21:cd:94:
35:76:7a:2a:a7:78:3a:7d:e0:54:62:8c:70:65:2d:
f0:f2:be:50:23:53:c5:e8:6e:0e:1b:4a:84:d4:ee:
36:c8:c3:e5:24:3b:ec:f7:e5:bf:6f:2c:44:e2:35:
ef:64:cf:75:08:68:09:4a:e1:07:10:4a:f7:47:64:
1f:20:53:4e:1b:83:a3:82:90:32:94:d1:e7:f8:c0:
23:d7:ef:ef:23:7a:e0:14:1d:b7:ef:95:19:54:ca:
c4:a3:bf:7e:9b:6f:09:18:d4:b0:61:ba:ce:81:af:
2f:5e:47:ef:b8:da:5b:49:99:b5:cf:e6:83:cd:6f:
a2:fd:da:57:6d:86:14:2a:37:5a:c7:fe:80:3f:35:
40:c8:ef:ea:65:fe:dd:1c:a9:b2:18:99:4c:9a:75:
6a:56:af:6b:89:b4:ea:01:24:0a:37:c4:f9:db:fd:
49:8c:eb:b4:5b:a2:21:ae:6a:8f:6e:d0:41:d2:64:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6D:E0:63:58:3F:52:27:AB:CE:4F:74:DC:77:BC:DD:83:D7:2D:33
X509v3 Authority Key Identifier:
keyid:F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/76838CE4E21211EEBB0FD29E775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.157.228.0/22
Signature Algorithm: sha256WithRSAEncryption
59:63:fa:af:69:c9:da:45:a5:b7:fc:51:4f:73:4b:d8:cf:39:
9e:5c:29:52:cd:7a:6c:48:77:85:4f:3a:a9:99:60:bb:55:de:
0f:f1:5e:3c:02:6a:20:ac:d5:d1:40:e3:40:88:30:77:42:b0:
1a:d1:90:08:ca:d0:5f:f4:ef:a4:4b:29:7d:3f:0e:d7:3b:26:
dc:aa:9b:ed:90:ea:e5:3c:1f:74:38:9c:6c:ae:7c:6e:5c:1e:
10:93:11:54:98:29:4b:02:9d:fa:45:80:cf:3d:ca:d4:a5:fe:
18:bd:78:5a:aa:be:4e:a7:9e:3e:a6:7e:14:4e:fd:d2:ef:93:
f2:eb:c7:66:e6:12:9d:c2:2a:75:77:09:58:f7:a5:96:61:8d:
1d:64:69:cb:7a:3f:9c:c0:b0:fe:aa:88:33:cb:23:15:49:71:
8f:e2:66:d5:97:df:80:65:ce:a6:28:5e:19:4f:99:46:97:0c:
5d:74:07:1a:d0:69:97:ec:f3:6b:96:b1:c4:5c:f4:8e:ff:57:
4b:20:99:d3:1f:84:7d:64:24:e5:2a:76:5e:bf:dc:d7:67:f3:
21:2e:b7:88:5d:ad:15:a1:f4:02:63:76:21:be:30:fc:df:07:
c2:e2:67:73:f8:7f:73:1c:76:db:39:00:ee:f9:26:9f:a4:7c:
f1:27:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:05:28 2024 by rpki-client on console-ams.rpki-client.org