Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/9474CF86ED9E11EA9B405A41F8AEA228.roa
File: 9474CF86ED9E11EA9B405A41F8AEA228.roa (raw, json)
Hash identifier: 1ODaBYEbZc5lz2DA8RW3VSuCv0cfBzMfZN9Q4vPucaM=
Subject key identifier: 94:A4:48:F6:C7:A5:42:93:E1:16:09:21:20:E7:78:F3:2D:32:64:BD
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 05EE
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/9474CF86ED9E11EA9B405A41F8AEA228.roa
Signing time: Thu 03 Sep 2020 04:33:14 +0000
ROA not before: Thu 03 Sep 2020 04:33:08 +0000
ROA not after: Fri 26 Sep 2025 04:33:08 +0000
asID: 206283
IP address blocks: 41.193.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 00:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1518 (0x5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Sep 3 04:33:08 2020 GMT
Not After : Sep 26 04:33:08 2025 GMT
Subject: CN=5f50720a-ca3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:3d:0e:49:d6:a9:2e:a3:65:1c:99:20:64:
8b:a9:07:6a:e5:30:96:2d:cc:e6:15:d1:d9:9c:ef:
0c:d5:41:e2:f0:48:77:0a:fb:b3:e5:d0:05:c7:74:
d2:6f:14:6f:07:d4:be:a7:4a:64:47:60:30:d5:2c:
3a:0d:64:0a:94:dc:9c:e7:28:ed:4e:35:70:c0:4f:
5f:66:ff:91:1b:fc:c2:ad:72:6c:fd:c0:be:c3:b6:
64:0e:7d:ce:2a:a8:d8:14:6a:36:fa:31:f6:58:9c:
4c:e6:87:7e:2a:97:4d:07:9e:3c:b6:51:b8:b2:51:
69:d3:f6:e7:06:28:ec:51:3a:b9:c6:5d:26:ef:7e:
da:d0:2f:a6:37:5d:11:0f:97:4b:f8:55:aa:c4:4c:
80:82:12:43:4e:03:81:5c:5f:af:c0:1d:f4:e9:aa:
cb:38:60:21:58:4d:7e:1c:6a:4c:82:63:96:53:af:
92:88:df:16:7f:96:2b:fc:07:f6:46:f7:15:bb:33:
7d:c0:98:8e:c5:2c:f5:d9:77:7a:78:ce:45:a8:75:
e1:fc:11:d7:5c:fc:29:2f:f5:c8:75:16:ae:60:43:
68:78:3d:0b:3a:87:ab:2e:c7:f8:6c:6b:52:a6:f4:
7d:18:8c:e7:a4:ba:33:6e:51:5f:be:82:a9:16:b4:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:48:F6:C7:A5:42:93:E1:16:09:21:20:E7:78:F3:2D:32:64:BD
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/9474CF86ED9E11EA9B405A41F8AEA228.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.193.254.0/23
Signature Algorithm: sha256WithRSAEncryption
49:b9:3e:8a:64:16:5e:d0:0a:cf:e9:5b:a7:39:4c:72:ca:49:
ed:ed:76:93:9b:7a:f5:69:28:21:67:65:aa:41:bb:9c:45:4c:
49:80:12:3f:c2:ef:35:aa:a5:c4:dc:0e:fb:42:ff:f5:b0:9c:
6a:af:32:f5:8b:0a:32:f4:60:91:9e:26:9a:b6:29:ea:53:7b:
a6:1a:0f:c5:28:6e:ee:9e:b9:c9:71:ad:e6:75:ea:f7:89:c0:
16:7f:90:e7:90:70:8f:26:b7:c3:4f:95:c2:35:eb:67:ec:08:
dd:cf:70:06:7d:91:20:12:34:6b:1f:de:fc:98:11:ad:9f:1b:
51:40:7c:c1:9e:52:07:f0:b4:a6:df:d2:ba:bd:bc:fa:21:43:
4f:a2:36:a4:49:b7:c3:1e:24:6d:43:e8:00:68:db:f7:e2:c1:
43:7f:e8:94:9d:3d:43:ae:50:24:be:96:f5:62:fc:8b:02:77:
54:09:e5:e5:0c:2f:bc:be:fb:d7:4c:e1:77:65:1c:42:61:e9:
4e:76:ef:e3:5f:ca:bb:25:80:fc:9a:5b:63:80:f7:01:44:7c:
36:33:47:a4:79:55:43:42:d7:a7:87:85:c4:5e:c3:fa:c3:3a:
dc:ec:20:e1:9a:5f:2e:6d:e5:f7:ab:5b:2b:d7:b4:97:16:b4:
17:a5:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:03:36 2024 by rpki-client on console-fra.rpki-client.org