Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/620994148C5011EF94268569762E951A.roa
File: 620994148C5011EF94268569762E951A.roa (raw, json)
Hash identifier: 9V4bZYCHudK+iK9UuvGM5Ummg+j57Il9EjuvcaUWhiI=
Subject key identifier: 12:A6:86:92:BE:5F:F7:7B:A4:7C:72:61:C8:33:36:AA:4A:EE:C1:97
Certificate issuer: /CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Certificate serial: 10
Authority key identifier: BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/620994148C5011EF94268569762E951A.roa
Signing time: Thu 17 Oct 2024 06:23:54 +0000
ROA not before: Thu 17 Oct 2024 06:23:50 +0000
ROA not after: Thu 16 Oct 2025 06:23:50 +0000
asID: 37368
IP address blocks: 41.79.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 26 Oct 2024 00:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Validity
Not Before: Oct 17 06:23:50 2024 GMT
Not After : Oct 16 06:23:50 2025 GMT
Subject: CN=6710ad7a-9432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:50:08:fe:c6:03:5a:a0:ef:d3:9a:78:3c:
b2:57:de:48:50:c4:b8:6d:90:20:7f:06:4f:6c:26:
9d:32:52:f5:b0:a7:e1:ba:ce:76:7c:9f:aa:e1:d1:
35:2c:ef:2a:98:e3:fb:2a:65:c9:1f:72:f6:20:cb:
5a:ea:7d:14:fc:61:c1:3c:be:57:c1:10:10:a1:f6:
36:de:c6:f0:a4:76:8c:eb:7b:f2:28:78:0d:1e:4c:
83:e8:7b:f3:df:e2:91:61:95:21:3d:1f:43:2e:7e:
11:73:5c:d6:da:ea:e3:f7:25:a8:fc:d3:ea:28:5b:
d3:6e:b5:fc:ac:a9:24:42:b0:e6:19:85:5e:cb:24:
aa:40:db:d8:33:45:5b:59:7b:6a:a9:69:01:df:bd:
b8:46:db:e7:1b:e4:20:e0:33:8d:65:53:95:ec:99:
51:d4:03:74:35:39:98:ff:e7:98:ed:4c:9d:8a:dd:
8e:cb:be:96:6c:5b:38:0f:3f:24:e0:00:36:5e:ec:
cb:ff:13:78:58:05:d5:0d:37:a0:8e:14:23:a0:88:
6e:e4:bc:db:d6:d2:a4:83:e8:31:32:be:da:ed:7b:
6b:80:f8:ff:52:5e:6d:94:09:a2:23:92:3e:4e:e1:
1d:c5:af:ed:01:71:6e:ba:13:c5:cb:d4:03:b4:f9:
8a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:86:92:BE:5F:F7:7B:A4:7C:72:61:C8:33:36:AA:4A:EE:C1:97
X509v3 Authority Key Identifier:
keyid:BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/620994148C5011EF94268569762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.104.0/22
Signature Algorithm: sha256WithRSAEncryption
24:d2:a0:01:88:e8:0e:e7:e8:a7:86:b7:26:d5:7b:d6:36:c3:
8f:9e:89:7d:76:4b:c8:22:fc:d2:de:0f:33:b6:3c:a7:28:df:
bc:30:65:5c:12:cf:15:46:48:db:d0:77:56:2f:6f:09:64:b4:
2b:5c:f0:c9:94:4b:19:83:9a:0c:98:74:73:90:b2:66:e1:bc:
4d:7a:b5:00:fd:99:64:43:95:ca:9f:21:b6:08:db:b4:53:e9:
c5:2b:7c:91:6c:1f:14:48:45:93:f3:94:e8:ef:00:c3:24:72:
1e:cb:c1:16:40:f2:45:33:b0:fe:26:90:35:29:cf:18:f8:31:
1c:a4:a0:96:0a:69:71:91:8e:6b:3e:aa:4e:dd:72:b7:a4:3a:
89:10:76:84:ae:04:74:86:c4:25:73:7a:6c:0a:0c:c2:29:eb:
2b:21:50:1a:6e:34:d0:5a:a8:cc:68:d0:3b:f1:f8:f2:6d:6b:
20:18:0c:75:3c:1c:79:f4:1d:3d:71:fc:59:35:46:33:5e:86:
63:9a:d1:7f:cb:3e:4b:c1:4a:36:55:56:eb:95:c8:7f:15:1c:
24:d6:b6:d1:ed:f0:33:36:4f:08:58:d4:97:dc:db:fc:77:5c:
a1:bb:cd:f4:e9:8f:dc:ed:b0:8b:a4:ab:d1:5d:e9:a2:08:33:
59:f0:d3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:16 2024 by rpki-client on console-ams.rpki-client.org