Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/0A4B00081CD111EF94E777357DDC24C2.roa
File: 0A4B00081CD111EF94E777357DDC24C2.roa (raw, json)
Hash identifier: YV3we6ifMf6AEHa5YK4mZmGbxkI7hDlUCEBy1d1c1UQ=
Subject key identifier: BC:5C:61:9C:88:5D:B9:F1:09:BB:FB:52:14:07:DF:93:3E:01:0A:2B
Certificate issuer: /CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Certificate serial: 03AF
Authority key identifier: BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/0A4B00081CD111EF94E777357DDC24C2.roa
Signing time: Tue 28 May 2024 09:02:42 +0000
ROA not before: Tue 28 May 2024 09:02:38 +0000
ROA not after: Tue 31 Dec 2024 09:02:38 +0000
asID: 29286
IP address blocks: 197.214.100.0/24 maxlen: 30
197.214.101.0/24 maxlen: 30
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Validity
Not Before: May 28 09:02:38 2024 GMT
Not After : Dec 31 09:02:38 2024 GMT
Subject: CN=66559db2-bdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:00:df:e4:80:d3:88:77:a8:31:6b:ab:84:
ea:78:af:13:1e:fb:59:25:c4:25:4d:88:d2:f4:26:
90:e9:7a:d4:8a:6e:e4:2a:0e:da:89:63:f0:12:65:
69:95:9e:8b:9d:0f:44:ed:6e:09:89:1e:29:53:2e:
83:98:96:34:26:82:99:19:0c:11:b3:97:1d:8a:27:
12:ad:55:7a:ef:62:ba:b4:79:79:fe:20:4f:89:65:
29:6e:fc:ed:72:5b:d0:54:c6:56:6e:4f:1f:71:c8:
29:4c:5e:f1:73:05:2d:93:af:17:85:ca:38:27:d2:
91:0f:0e:e2:2e:ca:eb:13:c0:81:69:2a:20:5e:20:
d7:7a:66:98:d3:03:bd:f9:a5:e3:ae:e4:28:e6:73:
21:51:19:55:ee:b7:d5:23:e7:cc:73:4a:eb:b8:10:
27:f1:c0:c2:b4:3a:35:f8:c6:2f:9a:8b:1b:69:61:
cb:62:43:13:45:ab:6e:f3:77:7b:c1:00:ac:85:e0:
0d:a9:2d:57:e9:ea:98:21:81:35:b8:9c:d7:14:70:
4e:d7:bf:ce:31:d8:ca:af:52:4e:0a:56:ba:cc:b5:
a5:00:73:4a:21:ba:03:e7:fc:2d:69:fe:fb:0f:92:
39:8a:63:fb:cb:d1:0c:8e:b9:df:63:05:6c:64:e3:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:61:9C:88:5D:B9:F1:09:BB:FB:52:14:07:DF:93:3E:01:0A:2B
X509v3 Authority Key Identifier:
keyid:BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/0A4B00081CD111EF94E777357DDC24C2.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.214.100.0/23
Signature Algorithm: sha256WithRSAEncryption
93:ec:f0:b4:e5:30:1a:8c:27:16:b9:bf:00:2e:cf:32:2a:d3:
a4:aa:e6:2b:9d:6c:cd:79:c5:d6:e4:af:54:0d:62:34:9e:98:
f8:9a:44:b6:ab:56:32:dd:13:be:8e:cc:94:c7:66:9d:d4:df:
08:14:cb:5d:8d:7b:4d:6a:05:1a:82:64:39:4a:b3:44:af:1e:
00:15:10:18:9a:ed:b4:1d:af:bd:3f:95:ae:75:b8:05:e3:e1:
65:06:a4:c2:94:59:70:53:f4:eb:f3:7d:79:6a:d8:74:bc:1a:
6e:44:2c:0f:57:1c:72:37:6e:b1:e0:24:4c:7d:6a:ff:b5:74:
ee:9f:1c:d9:b9:6d:9c:af:27:48:e8:b2:83:5f:9a:7a:e5:e4:
98:af:c3:3d:de:15:f2:97:f5:9b:46:75:74:03:b3:54:44:9f:
4a:4f:ab:85:c1:f1:1f:10:d7:c6:34:68:02:08:51:78:ff:10:
8e:e7:9f:f5:ef:73:aa:a0:05:76:83:29:37:64:54:52:e9:8d:
5f:af:8d:da:41:cc:94:f9:50:23:31:a8:be:52:4b:34:15:ef:
27:99:13:4b:ce:d9:99:55:e3:51:06:94:66:2a:10:ea:1c:b9:
b3:c9:c0:2a:aa:b4:3b:3b:c9:5e:25:99:27:fd:cc:79:c1:23:
71:2a:2e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:53:01 2024 by rpki-client on console-fra.rpki-client.org