Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/5452C2DA495911EFB60F9885762E951A.roa
File: 5452C2DA495911EFB60F9885762E951A.roa (raw, json)
Hash identifier: jm5I0TsEDHwv7ouFvepzTDlWJcMqPxPV2YIxH7RtI10=
Subject key identifier: D9:76:40:05:B2:EC:AC:60:B6:00:4F:05:1E:3C:06:2A:93:C7:B5:6A
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 34
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/5452C2DA495911EFB60F9885762E951A.roa
Signing time: Wed 24 Jul 2024 01:09:09 +0000
ROA not before: Wed 24 Jul 2024 01:09:05 +0000
ROA not after: Mon 14 Dec 2026 01:09:05 +0000
asID: 37030
IP address blocks: 41.215.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Sep 2024 00:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Validity
Not Before: Jul 24 01:09:05 2024 GMT
Not After : Dec 14 01:09:05 2026 GMT
Subject: CN=66a05435-f307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:53:32:f7:03:c8:e6:f9:d6:35:49:00:b8:
4f:74:33:63:34:41:64:5f:ef:1f:60:f2:47:81:c1:
75:95:c5:0d:b7:1a:11:89:b8:77:26:9d:d2:81:ed:
07:f6:34:1e:63:10:e9:cb:21:89:8b:63:3b:e9:d0:
dd:88:dd:2d:9b:c9:c0:35:9d:df:ac:a1:a4:6b:eb:
25:39:e2:9b:50:09:e2:4b:65:3c:87:28:c1:3a:a3:
81:a7:6d:51:99:10:6e:1a:8e:ef:67:4e:c2:28:df:
a1:01:7f:58:e3:ce:4e:c8:cc:88:f1:e3:5d:08:54:
de:48:1c:a6:c0:5e:cb:0e:14:21:74:5b:6e:1a:9d:
e0:7c:0d:85:a2:e5:52:b1:3c:de:cc:03:14:39:df:
ca:c4:00:2d:00:ef:9b:78:80:aa:2d:26:ef:77:b5:
f6:f3:1c:28:0e:ac:fe:07:a6:20:28:12:cb:b8:99:
ec:7e:9d:a3:84:c3:76:56:bc:ac:b5:cd:25:33:55:
ad:3d:5a:30:52:fe:8e:6e:8e:0e:bc:81:fc:d8:4d:
3b:50:67:ec:06:c2:33:0b:bf:8b:13:4b:5a:4d:e9:
26:76:6e:4c:da:bd:cd:97:e1:37:c0:d1:b7:77:47:
e6:1c:91:23:8c:d3:b0:7c:14:80:1c:8a:b5:21:be:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:76:40:05:B2:EC:AC:60:B6:00:4F:05:1E:3C:06:2A:93:C7:B5:6A
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/5452C2DA495911EFB60F9885762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.171.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bc:0c:d5:69:c6:6d:bb:c8:c5:00:6b:1c:04:36:ad:4a:8f:
15:09:e5:24:44:e8:89:d7:2e:c9:57:aa:ef:6c:0f:be:3d:bc:
88:85:a2:0c:ba:d7:e9:2c:9f:85:c5:b3:84:3b:d9:ef:95:e6:
22:51:29:57:80:09:a7:10:e6:97:ba:8d:fc:63:85:1e:ae:51:
87:93:29:e3:bd:ec:01:0f:b8:85:e5:2d:d0:9c:a9:2f:77:14:
18:0b:fb:87:dd:9c:dd:b3:73:df:cb:0e:63:46:44:bb:ed:d3:
e6:e7:53:35:62:7a:59:99:7d:16:09:5a:66:c1:79:cc:2d:4b:
65:fc:58:7e:20:9d:6d:b4:0f:ae:36:1d:44:27:f1:97:1d:4f:
59:79:a9:22:2a:29:98:c6:a7:10:62:07:ac:a4:02:62:f3:87:
1d:9c:9d:a5:65:13:ca:18:a1:22:c5:cb:d6:44:0c:c3:2e:48:
cd:0e:ab:2c:b1:f4:0d:ab:11:90:98:29:0d:a7:7a:f6:20:5c:
77:4d:2c:ae:2d:de:df:74:12:eb:01:b1:aa:55:01:a3:e6:a8:
82:23:7f:91:97:66:8a:d1:66:45:07:c9:3a:7a:2b:94:73:c3:
ef:69:76:0b:3d:62:56:93:ca:5d:d4:c4:3b:57:bd:f6:b4:37:
87:61:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 03:58:06 2024 by rpki-client on console-fra.rpki-client.org