Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/41DB14B6BBA211EAA2C86114F8AEA228.roa
File: 41DB14B6BBA211EAA2C86114F8AEA228.roa (raw, json)
Hash identifier: J9kcDvlQGEub3nPiHbATXGQIyRflcAMxuLCtqS2Iu1s=
Subject key identifier: 82:84:08:A5:BE:FD:98:2B:3F:BC:A3:86:E2:9B:9F:93:AE:3F:AA:E6
Certificate issuer: /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial: BA
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/41DB14B6BBA211EAA2C86114F8AEA228.roa
Signing time: Wed 01 Jul 2020 13:53:35 +0000
ROA not before: Wed 01 Jul 2020 13:53:31 +0000
ROA not after: Sun 01 Jul 2040 13:53:31 +0000
asID: 3491
IP address blocks: 41.221.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 May 2024 00:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Validity
Not Before: Jul 1 13:53:31 2020 GMT
Not After : Jul 1 13:53:31 2040 GMT
Subject: CN=5efc955f-dcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:40:fc:0d:c2:d2:42:98:0e:18:0b:85:89:
71:67:aa:57:c0:4d:c1:7c:4a:1c:55:a7:83:15:c6:
e0:a7:8d:0d:97:0e:51:35:0a:d7:41:dc:2d:20:31:
9c:57:2f:92:12:53:a9:8a:05:60:c5:96:db:f3:3b:
5e:db:6a:46:ce:31:59:a4:2d:91:96:b8:17:d2:c9:
b7:f2:2f:29:80:5a:f2:ec:da:cf:0a:de:0b:98:42:
a5:21:4b:0b:87:6d:5f:18:7b:23:e1:00:32:6d:e9:
20:c4:17:56:d8:6e:a9:c5:24:98:bb:c7:b0:3b:0d:
68:d0:a0:2a:3a:ce:7d:49:0c:99:cc:20:94:6d:2c:
b7:18:cf:6e:8c:c2:76:3d:18:50:8e:65:c1:4e:c7:
08:c6:f2:f8:ff:d8:59:c7:6e:05:36:8e:fc:da:b2:
52:c2:eb:2c:05:d8:3c:8b:53:6b:0c:2b:23:ba:1e:
07:08:22:b6:76:35:bc:0a:c7:d1:7d:e7:c7:17:3d:
2f:72:15:68:4d:bb:f5:d4:ee:79:84:9a:13:4e:73:
b9:07:cf:28:7e:b3:ee:44:2b:36:a5:d5:1d:9d:8e:
5a:ff:cb:3a:1c:6c:05:28:f1:55:54:a2:ea:58:f0:
b5:59:fc:8d:13:1d:c3:d4:eb:3b:22:d4:f7:ab:28:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:08:A5:BE:FD:98:2B:3F:BC:A3:86:E2:9B:9F:93:AE:3F:AA:E6
X509v3 Authority Key Identifier:
keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/41DB14B6BBA211EAA2C86114F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.221.208.0/20
Signature Algorithm: sha256WithRSAEncryption
01:44:45:60:46:47:b8:ea:3b:69:b2:d3:96:de:c3:32:79:19:
df:6f:78:dc:84:9c:41:2b:cb:16:f1:30:90:0e:06:76:c6:b3:
8a:a0:9f:84:29:f0:13:ca:7e:93:10:9b:f5:11:08:9d:c1:f2:
7c:99:35:ca:28:4f:e9:da:34:5b:31:df:8b:8c:64:fa:70:a9:
55:db:8a:6c:88:81:aa:fb:c3:aa:c6:e3:6b:32:97:69:e6:a6:
ff:67:f4:27:9f:82:fa:9f:de:95:09:f8:8c:9f:f3:c2:dc:a1:
2d:1c:15:7f:3a:79:a8:f3:22:65:cd:4a:14:98:d4:a9:ee:64:
bb:9f:e4:3e:82:52:ff:20:0f:8e:65:4d:82:0d:74:07:1d:0e:
90:bc:b5:92:30:ce:c6:8b:84:c7:0a:a7:cc:ad:11:fa:74:28:
03:ca:2b:9f:87:44:eb:aa:e6:92:fb:a5:8b:bb:b1:2d:54:32:
2a:21:5b:1e:d2:0e:5f:71:7f:85:7e:9d:af:8e:27:fa:b3:f8:
53:6a:52:4b:c2:97:37:02:50:8c:85:63:27:06:7a:98:af:af:
02:47:a4:14:f6:3e:51:00:13:02:33:79:21:dd:be:83:f7:0d:
ac:80:73:33:8a:ca:a6:e9:62:90:11:11:44:26:eb:63:f2:65:
fc:af:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 01:47:16 2024 by rpki-client on console-fra.rpki-client.org