Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/8CF03678F8AE11EE98AC573C017001B1.roa
File: 8CF03678F8AE11EE98AC573C017001B1.roa (raw, json)
Hash identifier: YeuDBEnXXfZpv1sszpiTDxgxCopG1pL2znsEhxiG8xw=
Subject key identifier: AD:2C:22:F6:EA:75:57:12:32:7B:C1:B5:D3:1B:FD:5C:9A:53:6B:2D
Certificate issuer: /CN=F36DBC4BAF/serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
Certificate serial: 07
Authority key identifier: FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/8CF03678F8AE11EE98AC573C017001B1.roa
Signing time: Fri 12 Apr 2024 09:25:07 +0000
ROA not before: Fri 12 Apr 2024 09:25:03 +0000
ROA not after: Mon 31 Mar 2025 09:25:03 +0000
asID: 33567
IP address blocks: 41.203.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.mft
rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAF/serialNumber=FE7FFA7B06D37351DB92D6B9D3B0AD10307B5A21
Validity
Not Before: Apr 12 09:25:03 2024 GMT
Not After : Mar 31 09:25:03 2025 GMT
Subject: CN=6618fdf3-61ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c3:c5:23:7c:62:8a:c6:8b:ac:68:b1:5b:2a:
6e:1f:c0:ff:60:4a:8e:f6:a2:b2:96:4e:cc:cf:b5:
84:82:45:7e:a7:12:88:65:a2:b9:38:af:86:24:7c:
f4:f9:99:e6:dd:33:e9:5e:18:18:48:cb:a4:52:5d:
24:bb:c8:48:9f:2f:1c:14:fc:43:a0:18:16:39:8a:
b5:ba:3b:95:f2:de:a7:e1:18:2e:d9:99:56:d5:3a:
fc:04:81:ad:d9:96:4d:16:19:75:af:1d:20:8f:c4:
36:fb:2e:96:98:c5:22:ce:a5:e5:1d:ae:fe:53:d6:
99:f7:49:ab:b4:8b:c7:70:74:47:3e:1d:3d:4d:e2:
01:08:7f:62:9a:4c:02:e8:b6:db:f9:8b:ee:52:1d:
a9:11:9f:53:73:83:7f:25:b5:19:95:45:de:c9:2f:
9c:fa:d6:95:fb:05:d2:29:c7:05:8f:64:ab:37:24:
aa:b8:9d:71:52:c5:ef:13:d6:21:6e:e3:39:10:4a:
b0:0a:1f:e9:45:73:2f:8d:4a:43:94:bd:91:1f:b3:
db:47:f9:43:01:4d:16:2f:18:1a:d3:55:ef:65:40:
42:f4:2c:e7:e4:d2:ae:08:3a:28:81:14:c4:38:8b:
20:8f:55:44:71:9d:60:31:cb:7f:f0:6c:f9:30:62:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:22:F6:EA:75:57:12:32:7B:C1:B5:D3:1B:FD:5C:9A:53:6B:2D
X509v3 Authority Key Identifier:
keyid:FE:7F:FA:7B:06:D3:73:51:DB:92:D6:B9:D3:B0:AD:10:30:7B:5A:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/_n_6ewbTc1Hbkta507CtEDB7WiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_n_6ewbTc1Hbkta507CtEDB7WiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/2336786EF8A911EEBCB49C0F017001B1/8CF03678F8AE11EE98AC573C017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.203.176.0/20
Signature Algorithm: sha256WithRSAEncryption
84:d6:4c:df:a4:e3:3e:f4:12:6c:9c:a9:fc:78:6f:e2:8d:e6:
ce:c2:74:0d:f9:7b:7e:c0:26:98:10:ab:78:f4:68:85:2b:43:
ee:84:3e:92:df:55:4e:f5:28:6b:ef:ad:3b:b5:e1:77:e4:04:
4a:0a:cb:cb:91:ca:6d:d3:55:9e:0e:6f:f5:1e:d3:73:c5:bc:
24:f7:14:2e:15:d0:32:a7:70:3e:a9:8d:0a:9b:c2:5a:73:ef:
0f:5f:9b:08:c1:4a:64:1e:87:09:2d:c0:07:ef:08:fc:d9:b0:
a3:e8:b9:f4:f3:7c:9d:ad:8c:32:1b:d5:43:e9:30:fa:5b:da:
05:28:19:33:b7:89:ab:b7:80:db:51:b5:a3:01:0d:d2:2b:ec:
45:c5:54:52:8e:f7:86:12:5e:70:98:5b:86:4c:a9:5e:e1:d9:
da:94:c7:d4:f9:9b:e6:34:16:fd:14:cb:af:b1:2d:c1:ae:b1:
87:be:01:ef:ed:c6:aa:c0:dc:46:b1:95:ae:16:3f:51:c3:1e:
4d:74:67:cd:fe:9a:4f:58:52:e1:db:67:fd:40:c1:d5:af:4b:
75:69:9a:4b:08:d5:37:43:0c:51:e6:c9:a4:e5:eb:98:b1:ea:
9c:f8:d5:5c:4f:47:55:cb:a2:5e:79:6a:0c:37:5e:55:99:ff:
28:12:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:59 2024 by rpki-client on console-fra.rpki-client.org