Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/E629FC705A9D11ED9E8165A4F1222468.roa
File: E629FC705A9D11ED9E8165A4F1222468.roa (raw, json)
Hash identifier: FdBzJ4DH+raX3+Nu8eEo0Sgj1PkLnuw6fp6KZCgOSs8=
Subject key identifier: 36:79:8E:C2:D8:F1:84:96:39:AA:27:C7:41:C3:B4:E2:98:E9:C1:2F
Certificate issuer: /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial: 0945
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/E629FC705A9D11ED9E8165A4F1222468.roa
Signing time: Wed 02 Nov 2022 11:02:54 +0000
ROA not before: Wed 02 Nov 2022 11:02:50 +0000
ROA not after: Wed 26 Mar 2025 11:02:50 +0000
asID: 29286
IP address blocks: 196.41.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2373 (0x945)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Validity
Not Before: Nov 2 11:02:50 2022 GMT
Not After : Mar 26 11:02:50 2025 GMT
Subject: CN=63624e5e-3e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:46:37:02:74:d1:d0:71:4c:6b:a3:11:f2:
7b:a5:18:ed:ac:cc:a4:90:82:74:34:ac:25:70:47:
0c:9d:eb:f2:c1:b0:f2:3f:ae:c2:35:b0:a6:fa:0f:
2d:f9:9a:de:8e:51:52:06:ed:84:07:9f:a9:5b:47:
ca:21:16:0a:3e:21:63:dc:47:33:8a:b9:80:1a:83:
fa:45:0e:6b:2b:2d:7e:26:cf:47:4c:61:b1:c4:62:
b3:94:a7:2e:12:f8:ba:2d:48:21:4c:b1:aa:c4:2a:
3a:8d:fa:10:eb:0f:6a:03:2b:f0:b8:50:3c:82:28:
95:bf:b0:d8:87:36:8e:25:73:4a:77:64:73:1c:82:
4b:28:4d:fe:21:d1:23:c8:3f:ad:ab:62:40:fe:74:
ef:fa:59:25:d1:ca:e4:23:d6:b8:26:24:44:d6:8f:
6a:fb:47:7a:f3:46:2d:0b:b0:4e:70:90:a1:ab:5a:
2e:a7:28:84:0b:c4:eb:45:e2:c7:ab:75:ac:23:c6:
11:f6:17:70:43:0d:86:3f:df:85:75:40:95:1d:24:
cb:3d:6a:7e:97:0d:92:41:c6:c4:d3:00:e9:00:a0:
03:86:74:ae:bb:7c:d8:1f:e1:b0:3e:c9:0b:59:6f:
7e:75:5c:03:9f:8f:62:ce:3f:ab:0e:9e:4c:a9:d7:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:79:8E:C2:D8:F1:84:96:39:AA:27:C7:41:C3:B4:E2:98:E9:C1:2F
X509v3 Authority Key Identifier:
keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/E629FC705A9D11ED9E8165A4F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.41.5.0/24
Signature Algorithm: sha256WithRSAEncryption
60:03:d2:b6:4f:aa:a2:46:08:5d:44:2e:69:b2:b4:6c:f5:ff:
cc:cb:02:e2:c3:19:b6:b7:ee:08:76:0d:50:12:ee:83:71:b0:
a0:7e:e3:40:9e:33:e5:d1:f0:6c:04:a6:2d:6c:ca:d3:75:2e:
fa:38:dc:77:84:b1:98:e7:05:b2:be:46:85:38:c4:d4:0a:9a:
be:58:07:ee:8e:ac:32:55:15:42:ac:9f:62:5f:8d:7d:f0:27:
b5:a7:d6:9c:ac:a1:16:1e:da:0c:ad:a4:21:71:b4:88:43:6f:
fd:c9:8c:47:e2:a7:46:31:71:7c:04:86:72:b5:cb:b7:38:02:
39:d2:7c:4a:17:98:5a:ab:5f:5d:38:ed:ac:05:b7:a8:e7:60:
54:23:55:7e:25:e9:36:dc:02:dd:84:9b:d1:e3:a1:05:cc:ed:
70:cb:64:e3:ea:fa:63:66:d7:3f:87:cc:6d:87:3a:43:5d:89:
03:c4:13:61:3c:7a:9b:e3:30:d4:04:a7:78:7b:e9:6a:32:c2:
6d:ed:85:9d:d4:40:cc:c3:e5:da:4c:f9:61:6d:95:44:f5:64:
3c:82:b2:e2:25:b3:41:6b:99:bb:2b:6a:9a:7e:51:23:5d:ae:
2a:5a:7e:d9:02:bc:09:7a:74:ce:16:6b:b3:55:a0:92:90:bf:
bb:e6:c2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org