Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/663621FC6FE611ED9793E2A2F1222468.roa
File: 663621FC6FE611ED9793E2A2F1222468.roa (raw, json)
Hash identifier: pOiXMCETpHqkEhDUTKpvHVFnDi/EWrRzid1oTDEvNYI=
Subject key identifier: CE:21:F3:28:34:9C:FE:5D:F9:53:88:85:F1:49:58:6D:4F:62:65:ED
Certificate issuer: /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Certificate serial: 04
Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/663621FC6FE611ED9793E2A2F1222468.roa
Signing time: Tue 29 Nov 2022 13:04:47 +0000
ROA not before: Tue 29 Nov 2022 13:04:43 +0000
ROA not after: Fri 31 Dec 2032 13:04:43 +0000
asID: 37204
IP address blocks: 41.220.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 May 2024 00:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Validity
Not Before: Nov 29 13:04:43 2022 GMT
Not After : Dec 31 13:04:43 2032 GMT
Subject: CN=6386036f-aa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:15:ad:ca:18:31:ab:c0:09:dc:8e:94:82:da:
b4:ef:79:5d:db:31:cc:8e:14:50:db:b3:6e:9b:1a:
a3:3c:40:b0:03:fc:eb:b2:bc:7e:da:52:19:61:36:
b4:a7:ad:2e:44:49:7f:33:d3:4e:1d:40:91:e2:a5:
92:c9:d1:ba:32:91:51:1a:83:2f:82:7e:41:56:be:
e4:d3:0a:ba:2f:90:e1:d4:9b:5c:24:e6:be:e8:ea:
a7:61:9f:57:3a:0b:3f:2d:5a:f0:58:c1:9c:7a:93:
dc:1c:cb:69:28:90:b0:1e:38:e7:f3:75:17:49:e3:
e0:08:42:61:4d:e1:e7:f4:a9:66:a3:13:2a:87:19:
f6:e7:af:ae:84:a6:40:88:5b:cf:61:ab:e5:e4:bf:
e7:d5:28:12:47:e2:7b:45:16:d8:20:d0:5e:61:39:
1d:d7:c2:fe:93:bd:93:ff:c7:3e:39:fe:32:65:47:
7a:1d:f9:06:a4:4f:26:55:b9:4d:56:7b:fe:9a:32:
0e:7f:3d:61:d9:e7:ab:a9:fd:7c:26:8c:fb:9c:70:
a5:5e:c8:b1:65:59:28:91:64:80:85:58:6c:86:43:
06:47:de:94:bf:63:a5:15:71:87:21:2b:37:b5:3c:
7e:61:74:08:55:d4:db:07:35:90:4c:e5:27:e1:36:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:21:F3:28:34:9C:FE:5D:F9:53:88:85:F1:49:58:6D:4F:62:65:ED
X509v3 Authority Key Identifier:
keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/663621FC6FE611ED9793E2A2F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.220.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:ab:bd:e4:d8:d8:9b:bc:ae:67:ed:03:03:b4:2f:2c:3d:63:
7f:e2:f0:2c:d8:93:91:fb:0c:53:91:42:37:fb:d0:bd:ac:b6:
07:c3:0d:0d:e2:63:27:e2:6a:0c:2d:4c:06:e6:4e:8a:a6:6d:
42:84:ad:ba:d0:e0:6f:68:a5:7f:94:17:cc:65:e4:14:b5:2a:
b8:e6:43:1b:06:01:26:9f:3c:a8:b6:64:1c:c9:b9:c9:f5:54:
2b:c6:d8:c1:74:89:c8:ee:36:db:fe:5d:1a:4c:e4:fc:e4:fa:
04:68:e3:82:27:ae:5f:7f:5f:bd:4d:c9:bd:85:89:18:32:fd:
70:ac:3f:fb:04:f2:e7:6c:a1:45:26:5f:bb:a7:07:49:1a:8c:
dc:ce:54:4e:2a:19:bb:af:29:18:b7:61:b6:1e:1e:8a:a6:c8:
74:3b:f2:56:45:6f:0b:52:91:40:7f:55:cf:01:0a:59:7c:8e:
20:65:b6:5c:6a:e4:b2:e9:ac:40:f8:69:61:dd:74:d9:a2:3b:
57:03:81:7a:b5:b9:57:db:10:67:2a:3f:9d:b2:8b:01:e7:87:
74:1b:df:1e:a7:99:1f:17:83:4b:4a:54:e3:0e:52:44:f7:87:
0f:1f:9d:c0:85:ef:a1:91:ef:14:de:fc:6a:da:03:c5:6f:f3:
80:bb:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:29 2024 by rpki-client on console-fra.rpki-client.org