Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/44B6BBCA3C2F11EE828F83524AD9E6FC.roa
File: 44B6BBCA3C2F11EE828F83524AD9E6FC.roa (raw, json)
Hash identifier: KBkFV6KhcBCrxzqWrsJlJzC0Smcm+dsmEDXDCESEL9Q=
Subject key identifier: A6:78:14:48:EF:6D:54:16:B1:7C:BA:51:00:6F:9A:58:66:65:0A:D0
Certificate issuer: /CN=F3620624AF/serialNumber=EC6C0DDE2B7E81B3A4E6CC46C9EF0EC556FED33A
Certificate serial: 05
Authority key identifier: EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/44B6BBCA3C2F11EE828F83524AD9E6FC.roa
Signing time: Wed 16 Aug 2023 12:20:21 +0000
ROA not before: Wed 16 Aug 2023 12:20:18 +0000
ROA not after: Wed 31 Aug 2033 12:20:18 +0000
asID: 37157
IP address blocks: 41.78.36.0/22 maxlen: 24
102.128.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
rsync://rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620624AF/serialNumber=EC6C0DDE2B7E81B3A4E6CC46C9EF0EC556FED33A
Validity
Not Before: Aug 16 12:20:18 2023 GMT
Not After : Aug 31 12:20:18 2033 GMT
Subject: CN=64dcbf05-0d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8c:b1:00:a3:12:00:e5:81:03:93:8b:4c:4f:
0c:5b:84:38:a5:26:42:13:b6:9a:43:7e:f8:b8:b5:
4a:b3:e8:f5:5d:e1:6b:15:55:a7:b3:3e:75:02:05:
4c:e7:60:21:cd:b1:7b:27:0d:f9:69:82:1a:d3:36:
c6:dc:15:79:8c:25:a9:f8:2f:55:d1:02:20:fb:e2:
e1:21:ea:4b:91:07:0e:6d:00:93:47:0d:43:72:06:
ea:c5:a4:82:b2:b9:bb:0a:53:14:75:52:45:47:d9:
17:6b:a6:8d:7e:01:81:d9:46:24:7d:95:0a:7c:48:
36:32:6f:94:48:10:45:f9:5c:0d:6a:0d:ac:da:6b:
09:24:54:52:5b:03:c9:0f:5d:8e:4a:98:80:3f:69:
fc:2b:e9:49:3b:ef:7b:95:a5:7e:bb:33:f0:7d:0f:
1f:20:8f:a3:01:bd:61:59:a4:3e:e5:1a:64:cf:da:
df:63:4c:c0:9f:f9:2f:66:01:a1:65:cc:23:23:3e:
48:e7:07:b3:ce:d5:de:6e:99:90:6e:cf:6c:6b:e2:
ac:a8:4c:80:80:fa:9d:d0:c5:d2:e8:83:16:f0:80:
a0:1f:78:eb:2a:82:f6:9f:fd:5a:a5:84:f2:31:a0:
df:1a:73:04:98:27:f8:2a:b1:a0:13:70:7a:22:d1:
e9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:14:48:EF:6D:54:16:B1:7C:BA:51:00:6F:9A:58:66:65:0A:D0
X509v3 Authority Key Identifier:
keyid:EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/44B6BBCA3C2F11EE828F83524AD9E6FC.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.36.0/22
102.128.136.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:81:f7:70:64:93:5c:5f:0f:50:f1:5a:cb:f4:36:ec:1e:b2:
7b:9e:32:d5:57:e2:2b:96:b2:5f:a2:e7:fc:da:4a:42:49:b8:
26:b6:d5:c9:b3:64:70:01:0b:cb:12:3b:bd:90:5b:0b:7c:8d:
27:26:69:7b:42:02:09:42:f1:6a:0a:04:0d:ee:29:9d:52:bd:
4d:d5:63:08:39:cf:9c:dc:7a:4b:7d:17:7b:df:2c:72:7d:f7:
6c:08:64:66:5a:94:15:5d:d1:cb:c2:02:22:dd:59:00:7d:84:
ec:7c:29:ad:5b:09:6b:3b:a1:14:66:d4:fe:af:80:5a:c3:fe:
54:3f:f7:73:9b:0b:89:50:dc:05:c2:87:2a:7f:c3:fb:15:c8:
60:63:2e:42:1a:08:3c:18:b6:5f:4c:4c:26:c3:fc:08:f4:e2:
2b:82:8a:7e:55:22:4b:08:d9:a2:e1:4d:03:36:73:2e:a0:69:
82:49:2d:6e:72:29:a2:c0:be:38:57:d0:03:9a:b7:5d:60:78:
37:7a:80:5b:02:f4:38:43:c0:41:e2:79:3f:7a:3a:b9:b9:a8:
c3:4a:fb:38:20:79:bf:ad:7f:bd:fe:e9:fc:11:d7:a2:9c:5a:
e1:ff:a2:5d:4a:91:e2:25:d5:b3:2a:2d:96:c5:39:b1:1b:ea:
4f:8c:1c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:31 2024 by rpki-client on console-ams.rpki-client.org