Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/71049C4A4FFE11EFB49E615C762E951A.roa
File: 71049C4A4FFE11EFB49E615C762E951A.roa (raw, json)
Hash identifier: jbW+6AKtEoSOyZoaKGmM/zW6o3okDriAIOGo+daJIco=
Subject key identifier: 77:55:8C:E9:29:E9:79:17:AB:27:05:CE:38:CD:C2:19:8D:1A:5C:F0
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: 06C0
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/71049C4A4FFE11EFB49E615C762E951A.roa
Signing time: Thu 01 Aug 2024 12:06:11 +0000
ROA not before: Thu 01 Aug 2024 12:06:07 +0000
ROA not after: Fri 31 Aug 2040 12:06:07 +0000
asID: 3491
IP address blocks: 196.251.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1728 (0x6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Aug 1 12:06:07 2024 GMT
Not After : Aug 31 12:06:07 2040 GMT
Subject: CN=66ab7a33-4d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:e9:59:c7:28:73:b7:04:b6:db:77:db:73:
a1:28:d3:0a:1a:e1:bf:22:0f:b3:4d:f1:dd:68:b6:
3c:7a:9c:1c:03:2d:cb:3a:f5:00:8f:73:85:80:d0:
e6:2e:e5:72:1b:ce:35:af:6b:85:4a:a5:c2:c1:a2:
88:76:d3:2d:ff:02:4e:35:ff:98:c6:55:da:e2:8c:
7d:4e:f1:e2:6e:23:3b:72:cd:c0:be:48:21:e2:c8:
9d:f3:89:c6:cf:ff:81:9e:d5:33:de:55:0e:c8:b8:
07:84:09:69:4b:60:40:95:43:cc:0b:a0:17:c6:95:
db:6a:99:b2:e2:7e:ff:fc:bc:62:fe:49:84:ce:c4:
eb:32:f2:2c:78:a7:2f:7a:a8:42:53:71:a1:ce:cc:
34:6c:71:64:88:99:65:f6:ac:5d:d6:f0:92:39:12:
f0:c8:ec:64:69:fa:88:7f:64:2f:f9:fc:07:b8:d7:
90:1a:6c:f9:d7:93:8d:3d:57:ca:ec:c9:5a:d5:35:
cf:3c:98:34:d7:2a:b6:76:5f:c9:f0:96:d4:a3:07:
64:f4:ba:c7:41:6c:e8:b2:41:2b:ee:18:c3:9c:ed:
33:1d:91:78:fe:67:fb:44:b6:d5:20:4b:ca:3f:cd:
11:37:cf:78:8d:be:18:14:36:c0:f3:34:0e:e6:bd:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:55:8C:E9:29:E9:79:17:AB:27:05:CE:38:CD:C2:19:8D:1A:5C:F0
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/71049C4A4FFE11EFB49E615C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.251.160.0/19
Signature Algorithm: sha256WithRSAEncryption
cf:c4:99:4d:b5:ab:e0:42:43:fe:de:bd:b7:00:13:c1:63:a2:
58:6c:c1:1c:63:82:23:80:b3:dd:bd:d3:96:97:e6:89:73:e0:
6b:61:b4:1a:e5:d1:54:4b:2f:8f:ef:50:ef:17:22:ac:61:e2:
e3:36:6e:2c:01:66:c7:58:35:23:dc:2e:b2:f7:94:ea:51:62:
d6:8c:c4:2b:cd:e8:a4:e0:4f:95:70:0f:99:d4:f2:a8:2c:85:
77:e2:86:b0:85:b2:2d:57:a8:0e:5a:15:16:27:98:e4:58:08:
ff:e6:7b:6d:40:f6:e9:d7:32:55:74:48:a7:af:6f:63:b4:db:
56:d9:63:a0:b1:0f:b9:06:17:72:79:f2:ac:80:29:f2:d0:85:
85:7a:40:ac:28:33:12:48:4e:36:0d:b9:c3:cb:28:43:4f:a1:
d5:86:ad:68:30:28:97:b8:25:83:1b:1a:ea:ef:59:4f:d6:2e:
bf:7c:aa:14:4a:34:6d:23:18:25:38:c6:ac:bf:25:5b:89:b2:
52:d3:fb:00:32:08:e5:c5:e4:f4:9d:2a:5d:d7:2b:d8:b4:ae:
10:8d:35:3a:9a:a5:2e:2b:c3:9d:90:29:ff:12:01:56:48:78:
2f:d4:e0:ef:f7:d1:53:c0:8a:7d:c8:dd:db:57:3d:b4:cf:4b:
46:81:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:19 2024 by rpki-client on console-fra.rpki-client.org