Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/A775C5D83C6311EEA094166D4AD9E6FC.roa
File: A775C5D83C6311EEA094166D4AD9E6FC.roa (raw, json)
Hash identifier: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=
Subject key identifier: 91:6C:DF:C8:D9:37:30:BD:8D:34:B2:3C:6A:2D:14:99:A9:D3:D4:67
Certificate issuer: /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial: 0167
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/A775C5D83C6311EEA094166D4AD9E6FC.roa
Signing time: Wed 16 Aug 2023 18:35:20 +0000
ROA not before: Wed 16 Aug 2023 18:35:17 +0000
ROA not after: Wed 22 Aug 2029 18:35:17 +0000
asID: 23764
IP address blocks: 154.72.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 May 2024 00:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Validity
Not Before: Aug 16 18:35:17 2023 GMT
Not After : Aug 22 18:35:17 2029 GMT
Subject: CN=64dd16e8-e84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:75:01:25:0a:e8:96:57:9b:88:7f:55:63:
32:41:41:a4:43:41:d3:e4:06:cb:94:ee:1e:ee:8a:
e6:4c:b4:03:72:74:43:75:f1:2d:99:db:66:44:25:
5f:66:68:8d:7d:00:f3:71:14:13:f8:a0:14:69:be:
53:7c:51:51:ec:3c:c3:65:15:9b:15:94:92:5c:7d:
15:2a:8e:ab:ee:87:b9:af:90:fa:b8:0a:9a:88:17:
b8:9d:05:80:86:34:2d:f4:f1:39:f8:aa:c4:c8:71:
fb:54:0f:1f:7a:d0:a0:fc:73:1b:c0:50:c5:eb:44:
74:1e:e7:64:fe:fe:b4:7d:42:ac:14:2e:3a:b4:df:
35:07:e7:43:cc:77:b6:61:0a:30:fb:43:ac:86:97:
c2:59:48:53:cd:4e:ca:cb:da:83:97:5b:86:16:c1:
5f:1b:0b:9d:35:9c:11:8c:5a:7a:6a:5d:8d:61:75:
26:8f:22:33:d9:63:b4:3b:54:47:1c:b8:f7:7f:74:
5a:3f:7c:47:d0:c4:cc:60:1c:34:61:43:cd:cb:ee:
40:3a:11:20:90:4a:cd:0f:01:1d:be:8f:27:bd:6f:
98:12:39:ef:ca:6f:82:b2:82:1c:35:e1:38:9f:65:
3e:08:be:3f:04:7b:d8:63:14:96:30:6d:63:87:02:
c3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:DF:C8:D9:37:30:BD:8D:34:B2:3C:6A:2D:14:99:A9:D3:D4:67
X509v3 Authority Key Identifier:
keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/A775C5D83C6311EEA094166D4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.72.47.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f6:22:af:f7:df:f6:ab:2b:22:d5:b3:38:a2:84:52:b8:1f:
91:31:02:8d:6f:d4:b8:af:ee:83:2e:df:9e:62:36:e3:5b:1e:
6d:71:7d:65:c0:34:2b:f9:db:af:80:65:16:d8:3a:19:69:e1:
af:c4:66:fe:47:6e:25:0a:a7:f9:af:30:35:21:b4:2f:1f:79:
4e:e9:5c:c1:ba:c5:89:fd:0e:0c:2c:f3:32:60:33:de:da:6c:
d7:b7:68:ba:99:f7:ec:1c:65:da:0e:29:56:88:98:23:f3:cc:
3e:e0:c4:c5:4c:02:05:7c:1c:f1:6c:55:ac:82:0c:ad:ac:6b:
02:4d:b0:86:19:0d:16:95:24:0c:15:92:b0:82:08:0d:c0:bc:
cb:04:d6:c8:58:e2:47:d3:a9:55:e2:5d:dc:25:44:b6:a6:71:
7e:59:b8:6b:5d:dd:bf:0a:41:21:79:ab:16:5c:7e:38:1a:e8:
9f:2f:80:db:f6:1c:ae:af:32:2c:fd:64:fe:85:8f:6b:b7:bf:
a5:e5:89:58:25:ee:d5:83:23:1c:a9:6d:04:b2:10:e8:25:80:
b9:b3:12:9f:51:98:74:52:fa:63:08:e6:f8:31:d8:4d:cb:40:
ac:2e:5d:3a:33:45:8b:87:2b:52:8b:3b:90:7e:90:b7:67:46:
14:06:45:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:39:16 2024 by rpki-client on console-fra.rpki-client.org