Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/A7408026C09311EE8AB05AB4775412E6.roa
File: A7408026C09311EE8AB05AB4775412E6.roa (raw, json)
Hash identifier: kQaIIUytQg6HwRLvbfsqiwa0mQhtFpbPcLNYzRGCaPQ=
Subject key identifier: 54:D9:BF:D7:6F:86:89:2A:15:7B:53:51:6F:F2:7E:38:5C:F8:03:9B
Certificate issuer: /CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Certificate serial: 037D
Authority key identifier: EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/A7408026C09311EE8AB05AB4775412E6.roa
Signing time: Wed 31 Jan 2024 23:51:29 +0000
ROA not before: Wed 31 Jan 2024 23:51:26 +0000
ROA not after: Sun 31 Jan 2027 23:51:26 +0000
asID: 37277
IP address blocks: 41.63.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.mft
rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893 (0x37d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636185AF/serialNumber=EF8798989E4B8FB35946574F7BC7F08E2CF7FE4B
Validity
Not Before: Jan 31 23:51:26 2024 GMT
Not After : Jan 31 23:51:26 2027 GMT
Subject: CN=65badd01-3ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:dd:ab:d8:bd:eb:0d:81:24:39:f9:6a:ba:
c3:f3:49:55:2c:58:b8:fd:16:53:ae:4d:4e:0a:9c:
f8:95:08:79:02:76:6d:fa:6c:6e:bc:9a:81:36:31:
d0:32:3c:95:1d:b7:91:7f:14:41:d5:99:f0:3e:66:
c0:8f:c3:26:47:1d:b6:2d:28:31:e4:f9:7f:c2:81:
ce:2e:26:22:47:e8:b0:ad:61:83:a5:c7:cf:a2:76:
ed:0b:98:61:2e:0e:90:f1:aa:e7:d9:f4:a2:b3:ee:
00:82:35:d1:3e:c3:c8:66:06:c9:37:af:d1:80:b8:
d1:60:f2:37:ad:4e:84:55:71:12:2e:37:55:5e:e0:
b0:57:92:a1:7a:66:4e:96:ab:0b:76:89:f7:03:a8:
15:6a:91:96:60:65:e1:91:7d:57:32:e0:17:1d:7e:
0f:97:9d:2b:10:f5:88:1b:50:cf:80:47:cd:26:06:
33:62:f5:37:7e:b4:88:30:ea:87:40:84:e6:7b:82:
b1:94:57:4f:17:1d:5a:4c:17:5c:03:f0:08:24:8a:
9f:71:37:6b:37:3e:a9:bb:57:04:26:31:d3:ea:63:
47:18:47:2a:27:83:9b:ae:96:75:32:82:b1:88:c8:
9e:45:4f:bc:ae:97:c8:5e:60:1b:9a:ce:3f:3a:84:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D9:BF:D7:6F:86:89:2A:15:7B:53:51:6F:F2:7E:38:5C:F8:03:9B
X509v3 Authority Key Identifier:
keyid:EF:87:98:98:9E:4B:8F:B3:59:46:57:4F:7B:C7:F0:8E:2C:F7:FE:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/74eYmJ5Lj7NZRldPe8fwjiz3_ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/74eYmJ5Lj7NZRldPe8fwjiz3_ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636185/6EFD78B6270911ECAF80DC7BD8A014CE/A7408026C09311EE8AB05AB4775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.63.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:7b:e8:08:35:ac:6b:73:4d:c2:43:9c:28:1e:dd:52:6e:7e:
64:ad:f8:61:93:ab:f1:d0:17:b7:26:6f:1e:15:22:17:3b:0d:
c1:6b:1f:ca:cb:15:4a:29:8b:a0:d2:38:c8:9d:45:6d:f4:f6:
10:fc:71:14:f7:dc:f0:a8:15:c6:c9:b0:6f:44:8a:58:ab:c0:
aa:a1:dc:e9:75:eb:13:fc:73:d7:5c:f5:0a:da:b0:26:4f:ce:
b0:22:72:a4:54:ca:59:fa:1d:15:52:09:e9:fe:3a:55:f5:30:
96:f2:f2:33:16:9d:98:08:e5:0c:52:00:b0:16:c7:43:12:5b:
95:a0:d7:85:4b:a5:34:b4:dd:68:43:99:c8:32:e1:bc:06:67:
c5:a8:58:04:4b:dd:76:0c:13:fb:5e:e3:01:be:aa:0b:72:b2:
21:ec:7f:2a:7d:c3:63:47:e5:fe:f3:5a:c5:2c:23:f1:a0:09:
7a:68:40:69:0a:84:12:72:e4:7f:91:69:fd:d0:12:18:86:ef:
0e:a6:3b:77:fc:f9:0c:44:8c:ac:83:13:74:cc:5e:af:00:27:
66:eb:7c:28:d9:97:47:52:9b:fa:e9:ac:1b:84:93:d0:a2:e1:
a7:d7:ca:73:a4:5b:2c:9f:35:fa:bd:1d:86:bb:ef:90:36:2a:
94:97:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org