Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/AB5A31B645AE11EF8C2C90A6762E951A.roa
File: AB5A31B645AE11EF8C2C90A6762E951A.roa (raw, json)
Hash identifier: Ck19B6WRJjiqRudcI9+7kuwLbdQsGgIfEPLBW28X9YQ=
Subject key identifier: 84:50:39:E3:48:9D:2B:06:CE:DC:40:6E:5A:C7:0E:25:94:30:9E:0F
Certificate issuer: /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial: 16
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/AB5A31B645AE11EF8C2C90A6762E951A.roa
Signing time: Fri 19 Jul 2024 09:09:57 +0000
ROA not before: Fri 19 Jul 2024 09:09:54 +0000
ROA not after: Thu 17 Jul 2025 09:09:54 +0000
asID: 37225
IP address blocks: 41.85.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Validity
Not Before: Jul 19 09:09:54 2024 GMT
Not After : Jul 17 09:09:54 2025 GMT
Subject: CN=669a2d65-7e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:17:b2:fb:f4:30:b0:b7:6d:47:90:5d:ca:
47:ea:df:01:02:0e:52:49:db:31:11:c7:8a:66:d8:
12:a2:7f:52:1f:cf:89:68:c3:15:e9:9d:bd:75:dc:
2e:ed:aa:2a:f8:d2:9f:62:1c:57:52:cd:9e:ad:9f:
cc:fe:98:02:88:91:f4:41:e8:9a:b7:f4:5b:2f:67:
3b:6e:54:1a:eb:ad:d4:6e:8f:eb:74:7b:45:8f:bc:
36:cf:8f:2c:fe:2d:b8:fa:55:44:4e:e6:f2:49:1d:
a1:09:ee:06:e3:ca:e9:0f:0a:ad:02:fe:22:c3:e6:
9f:05:83:26:7c:39:3f:55:a5:85:27:c2:26:7a:fb:
3c:59:e7:e5:38:88:aa:28:ac:10:58:6c:d6:e3:cb:
99:17:13:83:92:a0:5c:f5:82:c5:f8:e6:3d:01:c2:
65:ee:0f:8d:c2:f5:9b:cb:b7:97:df:e0:40:7d:82:
4f:5b:67:9f:85:4b:17:da:57:3e:31:5b:3f:d4:5b:
f0:1a:c7:06:82:55:c3:5f:b2:67:fd:e8:95:ba:09:
0c:07:66:f9:82:ec:48:28:5f:23:1b:d1:f9:81:27:
7a:8c:fd:87:c6:5f:ba:e2:b9:34:ee:64:d0:db:75:
1c:08:2f:3f:ad:d4:b9:48:73:40:38:ae:4e:ef:6b:
59:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:39:E3:48:9D:2B:06:CE:DC:40:6E:5A:C7:0E:25:94:30:9E:0F
X509v3 Authority Key Identifier:
keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/AB5A31B645AE11EF8C2C90A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4c:98:37:85:b6:78:07:62:8e:6c:96:87:54:ed:4a:b1:b8:73:
04:28:4c:68:2a:3a:0f:04:d7:e6:4c:13:6f:12:da:d0:5e:ca:
3b:bc:6b:75:ad:f7:f6:51:0e:f1:c8:4d:c0:44:13:5a:d9:92:
37:3f:e9:6e:ce:bf:f7:cf:66:71:7b:da:b2:a3:e5:60:e0:8d:
a6:09:cc:38:49:f1:88:ae:17:8e:5b:1f:1c:0d:0b:fe:31:f4:
fe:fa:a2:30:5f:f1:9f:40:a8:a6:45:b0:0c:b1:fe:1d:58:9e:
dd:a8:2f:d2:53:44:81:db:ae:9f:40:58:33:47:6e:b3:bf:4b:
ce:af:84:c2:3c:13:d0:c0:e6:24:e1:76:c1:08:b4:22:22:56:
b6:79:01:d9:b5:40:7c:e2:02:67:2d:77:29:fa:f7:60:44:00:
cc:28:95:66:73:84:6c:32:58:f4:1a:cf:03:31:38:0a:1b:ed:
35:a8:cb:54:f6:26:5c:8e:c0:70:b8:ba:6a:76:2b:c6:ca:92:
81:82:3b:21:5b:93:05:ba:bc:fc:57:10:d0:73:c2:0d:66:29:
78:ea:26:6b:df:0e:f5:ec:15:1c:0c:cc:3f:45:d0:df:16:ef:
81:d1:42:a9:5c:d1:69:20:90:f0:cd:f9:d7:d2:1b:cd:95:99:
07:ab:74:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:45 2024 by rpki-client on console-fra.rpki-client.org