Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/4CEBC92C0AA511EE95ED414A4AD9E6FC.roa
File: 4CEBC92C0AA511EE95ED414A4AD9E6FC.roa (raw, json)
Hash identifier: 7eghvKdg2LV6CLosDrX6AumHK0Pv4rX/TjFIdYh9Z1Q=
Subject key identifier: 70:E8:B0:74:12:8D:9B:A3:F7:AC:4F:26:C6:B3:75:27:71:67:6A:89
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 02
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/4CEBC92C0AA511EE95ED414A4AD9E6FC.roa
Signing time: Wed 14 Jun 2023 11:19:17 +0000
ROA not before: Wed 14 Jun 2023 11:19:14 +0000
ROA not after: Fri 14 Jun 2024 11:19:14 +0000
asID: 37496
IP address blocks: 196.216.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Validity
Not Before: Jun 14 11:19:14 2023 GMT
Not After : Jun 14 11:19:14 2024 GMT
Subject: CN=6489a235-2f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:c8:cf:cf:6e:74:11:2c:bf:03:d8:1b:ad:
c2:01:fd:29:4a:e1:55:72:0e:15:b8:eb:e7:19:f3:
9a:06:ac:52:23:69:dd:a8:5f:b3:a0:36:ca:6a:e9:
62:c9:9a:ec:e2:8d:2e:4a:e9:35:57:bb:d2:5e:99:
d1:9c:e9:0c:b7:90:ff:ab:42:3e:b2:6b:4f:f6:44:
8f:84:52:03:1a:0d:03:a1:5b:cc:79:f3:6c:20:0e:
30:4d:f5:8d:78:be:d7:8d:cf:73:bb:dd:b4:31:db:
8c:46:bd:85:f4:9d:b3:7f:51:ce:a3:36:c3:a2:17:
03:b3:7c:d6:ed:89:de:38:4d:d6:83:46:7e:21:98:
b3:f9:42:99:53:ba:7f:87:9d:c0:01:0b:23:de:5f:
fb:ca:1c:43:0c:05:c3:8b:07:c8:c9:7d:74:b4:6d:
2d:77:f7:fe:df:59:de:1a:f9:47:59:65:0e:64:6b:
16:85:d8:8f:b1:e4:2a:5c:07:4b:86:9d:66:ee:f6:
85:c8:91:a2:5a:78:24:cc:78:40:02:f2:b0:38:c7:
d6:50:a3:68:49:89:96:52:a3:5d:88:48:b2:42:c6:
3d:a5:8c:2d:40:ca:3d:b2:b9:ef:4f:f5:48:85:46:
ed:89:f4:7e:8a:1b:de:f0:9c:11:00:71:d3:1d:bf:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E8:B0:74:12:8D:9B:A3:F7:AC:4F:26:C6:B3:75:27:71:67:6A:89
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/4CEBC92C0AA511EE95ED414A4AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.216.234.0/23
Signature Algorithm: sha256WithRSAEncryption
28:b1:02:d0:bf:89:46:bb:20:33:d5:cf:9f:0a:e0:d2:b5:93:
4f:4b:82:f3:c2:93:5f:59:40:7a:f2:0b:64:23:2c:52:d3:b0:
ce:69:97:29:8f:b6:ee:40:df:9a:4c:4d:77:ae:6e:6b:a5:31:
53:77:aa:83:6c:e2:0a:8a:c2:a0:d4:01:cc:58:55:1f:97:74:
10:05:ea:47:49:74:12:b9:e3:a0:46:86:0b:93:b9:80:a2:37:
84:f1:e9:c3:ef:da:1b:86:4a:f4:c9:96:1f:ea:e7:2d:62:53:
92:87:e7:c3:1a:9d:71:2c:97:8f:07:67:4e:76:c6:0e:10:17:
ed:59:2f:54:83:e4:49:ca:84:48:26:aa:6a:ca:4b:5d:d2:47:
2a:1a:3c:77:70:06:8a:86:de:e7:93:40:79:b0:1d:bb:19:79:
65:c5:92:a7:cf:10:e6:75:33:41:83:8a:c4:11:71:00:66:bf:
e5:b8:54:12:8b:6d:68:63:4b:2e:25:8f:5c:59:e8:5c:a1:a4:
32:d1:58:30:ab:45:4d:82:02:bd:a1:6b:7a:54:90:8b:2f:9d:
b6:e4:1a:94:6d:3c:c2:99:a9:91:94:74:f8:ed:3d:d0:16:5d:
5c:8c:43:99:d7:55:c9:9c:73:8c:d2:81:02:d1:0d:df:82:2c:
bd:cd:0e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:40:57 2024 by rpki-client on console-ams.rpki-client.org