Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/F97AD886BEB411EEB991F752775412E6.roa
File: F97AD886BEB411EEB991F752775412E6.roa (raw, json)
Hash identifier: XrOk8G3LLPdrAcCIJDkR7Oh/qIv1o+Mi7UksbU+zoZc=
Subject key identifier: DD:92:05:8E:D9:3E:87:67:69:68:0F:F3:15:4E:40:91:88:6C:FE:FC
Certificate issuer: /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial: 04AC
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/F97AD886BEB411EEB991F752775412E6.roa
Signing time: Mon 29 Jan 2024 14:44:58 +0000
ROA not before: Mon 29 Jan 2024 14:44:55 +0000
ROA not after: Tue 29 Jan 2030 14:44:55 +0000
asID: 37619
IP address blocks: 41.197.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1196 (0x4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Validity
Not Before: Jan 29 14:44:55 2024 GMT
Not After : Jan 29 14:44:55 2030 GMT
Subject: CN=65b7b9ea-8e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:7e:eb:c0:5d:a6:b9:95:28:f2:20:20:ab:
7b:27:4f:8a:fc:88:af:a7:f3:d1:44:d3:c7:7c:fd:
75:f4:59:d5:3c:ca:4a:8a:8c:32:d3:f7:8c:e9:84:
ce:a5:02:90:9d:12:ea:73:e4:30:91:1f:f4:85:cd:
09:0b:e7:d3:6f:ed:b9:00:bf:68:35:8e:f3:2b:e5:
c7:56:55:1b:e6:d9:44:28:7c:56:72:35:04:71:37:
d5:3f:a7:42:85:77:fc:a9:0c:9e:56:5d:5b:04:3f:
95:4c:87:7d:ce:95:d8:94:54:48:cc:df:8f:dc:e1:
ed:94:5d:0d:f0:63:77:d6:11:90:8a:46:31:e6:15:
b9:34:0a:ac:40:c2:8c:ff:5c:58:b8:e8:f8:a5:fc:
10:e2:38:df:ce:50:cc:b0:eb:d9:8c:52:ed:bb:ca:
42:56:23:6c:e8:5d:c5:3d:3c:ae:01:aa:df:58:90:
66:8d:6b:57:0d:f3:13:de:a2:7a:1d:55:9b:42:8c:
f9:26:8a:45:9d:df:ce:4e:08:03:28:d3:4c:04:ec:
c7:18:a2:08:1e:70:a3:cc:d5:3d:0e:bd:96:97:51:
39:85:11:94:4a:ad:c8:1c:9f:cd:c8:15:44:52:a9:
8c:c9:6d:12:e3:b6:05:a7:ee:c4:6c:f3:78:c3:60:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:92:05:8E:D9:3E:87:67:69:68:0F:F3:15:4E:40:91:88:6C:FE:FC
X509v3 Authority Key Identifier:
keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/F97AD886BEB411EEB991F752775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.197.240.0/20
Signature Algorithm: sha256WithRSAEncryption
70:0b:c6:f9:a8:e7:9c:66:b2:fe:66:d7:65:a1:04:d6:93:b8:
91:bc:4b:15:44:e0:37:e9:3e:44:50:47:cd:85:51:c1:d8:07:
0b:0e:00:33:52:dc:a1:af:aa:df:7c:3b:53:62:68:12:14:37:
a2:1e:d2:b7:ca:02:8e:9d:3c:95:d8:29:cc:26:a4:72:80:bf:
12:29:41:ba:50:75:09:b7:18:68:1f:93:0a:f3:9e:99:1e:7d:
a2:7b:9d:87:33:3a:b9:96:8d:5b:ce:56:2c:12:db:1f:64:a6:
bb:6a:e8:27:f3:f9:53:ed:ed:9d:d6:65:28:2d:89:b8:6e:1f:
76:e4:ce:46:7f:2f:cb:c0:ed:64:eb:6a:84:65:9a:1f:ee:17:
f5:1b:9f:cd:0a:2d:20:0f:83:fc:7e:4d:93:7b:74:54:13:7e:
d8:ac:18:b0:37:23:f4:e3:d8:f0:7e:e0:65:e0:fc:13:9f:a0:
59:cf:5c:3a:4c:1f:77:48:b8:20:97:a1:dd:6f:83:c2:b2:79:
62:30:f1:ee:68:a4:e6:a0:7a:b0:b3:5d:14:e0:1c:0a:58:08:
b8:02:ff:9a:8f:d0:1b:73:53:76:0a:bc:76:81:92:6b:8f:8d:
d6:fb:48:c5:12:fd:6a:d2:27:fb:58:b2:d2:a0:61:24:6b:16:
0b:58:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org