Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/F3466CD22EEE11EFAB930A67762E951A.roa
File: F3466CD22EEE11EFAB930A67762E951A.roa (raw, json)
Hash identifier: +dYtbycLkkem/RCdq5G5Tibdi9nPBFznIh17vDpR0yI=
Subject key identifier: 16:4D:ED:D8:6E:B1:65:0E:13:9C:C8:76:32:DC:4D:67:C0:41:E5:C2
Certificate issuer: /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial: 08
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/F3466CD22EEE11EFAB930A67762E951A.roa
Signing time: Thu 20 Jun 2024 10:22:09 +0000
ROA not before: Thu 20 Jun 2024 10:22:06 +0000
ROA not after: Tue 23 Jun 2026 10:22:06 +0000
asID: 198394
IP address blocks: 41.221.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jul 2024 00:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Validity
Not Before: Jun 20 10:22:06 2024 GMT
Not After : Jun 23 10:22:06 2026 GMT
Subject: CN=667402d1-07b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:af:92:21:92:63:39:42:61:d3:b9:c8:e2:2d:
fb:8f:00:cb:0e:f2:f0:d8:48:6c:ad:a2:27:8d:06:
04:3a:27:c6:4e:2f:fd:aa:05:26:31:4a:dd:47:13:
e0:6f:c0:da:f6:94:f6:53:7f:00:97:03:e5:cd:3a:
b6:0f:a9:2d:ee:2a:da:1d:f4:25:a2:3e:3e:80:2f:
85:05:d3:8e:28:5f:31:01:12:7a:75:bc:e7:a0:18:
f7:1e:b9:bb:d6:6a:91:aa:26:d0:90:87:46:c0:d0:
e8:5e:15:df:e0:e4:b7:a0:a8:25:99:a5:6d:2d:eb:
84:a6:67:98:6b:75:93:77:a2:2d:11:a9:44:d5:61:
2c:a1:4a:3b:cb:be:0d:38:86:1a:bb:db:ba:03:fb:
d2:9c:ce:f0:a0:dd:c1:43:df:c2:16:4e:b9:ba:1d:
72:f2:ea:b0:d9:08:eb:5a:83:25:6c:7a:ed:2b:07:
12:ea:43:58:97:16:97:7c:15:13:1b:ae:1f:46:70:
97:2c:8c:4d:2f:08:08:ec:8e:e5:6a:2b:0e:43:20:
9b:2d:b2:78:a3:a4:30:f0:32:c2:ad:2b:a0:43:b4:
8d:08:e5:7d:9c:da:6e:11:f4:3e:e4:ef:9a:88:89:
45:a4:c3:78:09:a6:a7:47:24:d4:47:61:1a:79:49:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4D:ED:D8:6E:B1:65:0E:13:9C:C8:76:32:DC:4D:67:C0:41:E5:C2
X509v3 Authority Key Identifier:
keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/F3466CD22EEE11EFAB930A67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ab:9a:68:15:b8:06:18:ce:2c:9c:dd:c6:8f:ad:a5:77:3d:
f2:e4:44:c0:e0:f2:00:77:fe:1d:38:f8:60:7a:63:ea:56:8d:
3e:d5:24:eb:51:66:9b:41:4f:b2:43:ec:81:5c:24:47:03:6d:
c7:09:c6:00:b9:dc:66:8b:d4:1b:82:9e:c5:13:c7:b5:7e:15:
6a:98:88:62:87:50:c3:ee:43:6e:24:34:3c:ba:14:94:2c:cc:
ed:91:e2:0b:28:e6:94:15:eb:32:6a:e6:1b:86:e1:20:70:92:
26:40:f7:c2:45:54:70:5a:0d:42:6d:72:cd:d1:e6:5b:f9:75:
cb:53:3f:e1:4b:e5:69:d6:f1:87:c7:47:59:cc:cb:e4:35:71:
38:ad:37:c2:2d:26:e6:6b:71:4e:22:02:01:50:c7:73:65:e2:
c8:89:e1:ad:20:a2:13:74:a0:b1:58:57:b0:80:6e:5e:7c:84:
09:53:bd:74:3b:12:5e:4c:4b:e2:c8:7d:1b:23:77:9c:52:33:
76:19:fe:06:50:ba:ef:7c:6d:81:73:aa:9d:52:20:1f:cc:86:
39:98:e6:e7:7b:55:21:b1:76:b1:5f:03:43:81:5b:b8:bc:36:
6c:17:56:bf:68:7b:4e:85:0e:27:a8:c0:27:a6:71:12:56:2d:
25:d7:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 03:54:54 2024 by rpki-client on console-fra.rpki-client.org