Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/7A3144EE4A2211EFB67B7D60762E951A.roa
File: 7A3144EE4A2211EFB67B7D60762E951A.roa (raw, json)
Hash identifier: j3JAykS4OQX/hDoFdEl316HNecziqAF0XC9NdGRUFKs=
Subject key identifier: 18:2F:00:2B:42:B4:CE:EF:16:17:7E:BB:0F:68:F4:8B:45:83:E9:EF
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 3D
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/7A3144EE4A2211EFB67B7D60762E951A.roa
Signing time: Thu 25 Jul 2024 01:09:01 +0000
ROA not before: Thu 25 Jul 2024 01:08:57 +0000
ROA not after: Mon 14 Dec 2026 01:08:57 +0000
asID: 37030
IP address blocks: 41.215.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61 (0x3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Validity
Not Before: Jul 25 01:08:57 2024 GMT
Not After : Dec 14 01:08:57 2026 GMT
Subject: CN=66a1a5ad-e8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:41:bf:6f:5f:c6:20:28:7e:41:07:0e:7e:29:
fe:6c:3d:27:1c:da:5e:8a:0e:84:20:a0:8c:f6:83:
79:8e:20:5e:dc:bd:0a:4b:98:77:76:9d:cf:7f:93:
cc:fd:0e:73:e7:7e:fa:a8:70:7a:dc:cb:ed:2c:6e:
a9:0f:1b:60:d0:23:66:51:60:3b:5b:fb:07:ab:58:
07:64:6d:ba:27:36:ae:7f:c6:21:14:c3:51:3f:66:
0e:2b:9c:03:22:7b:6a:78:2f:7f:38:d3:99:1b:11:
36:18:b6:c7:96:ae:a0:cd:bf:d5:2d:b5:c0:49:13:
6a:b4:4d:f1:0e:9c:8c:06:93:35:66:84:d5:f1:2a:
50:7d:8f:3a:eb:25:46:59:6d:d3:25:ae:bb:1e:23:
7e:1c:a1:be:42:35:b2:80:17:ad:35:a0:76:b6:6c:
1f:b8:ed:98:10:0b:d1:d1:46:2c:b9:3c:95:fe:55:
1f:63:c9:f0:3d:8a:39:d7:af:b1:29:fe:0c:be:a8:
49:e1:b6:66:d3:a9:a2:d0:70:7d:ff:b2:a9:67:aa:
a5:fd:d3:18:71:c4:6e:b3:8a:df:02:cf:f0:ed:1c:
99:26:49:b0:44:88:17:d0:7a:f3:78:88:1e:10:5d:
6b:ee:ad:92:15:8c:c4:a5:29:3f:37:43:c4:8d:fb:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:00:2B:42:B4:CE:EF:16:17:7E:BB:0F:68:F4:8B:45:83:E9:EF
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/7A3144EE4A2211EFB67B7D60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:35:79:9f:21:56:90:a7:0a:df:37:0f:0a:a7:f6:2d:c1:36:
12:7f:d8:57:cb:39:52:d6:08:5f:33:ad:0c:d8:87:66:57:80:
d1:9d:89:18:bd:17:95:de:bb:95:3b:f0:20:4a:91:38:f2:4d:
a5:50:87:95:ce:91:77:85:47:41:74:d1:bd:f9:ad:ed:82:66:
78:c1:bd:b6:6e:2e:fb:80:47:60:58:a1:98:5d:79:5e:29:fa:
2e:bb:56:64:0f:2b:84:67:2c:8a:a2:23:af:60:5d:64:fb:18:
5e:ec:88:c0:e9:ac:ac:67:68:6f:9f:fa:37:23:81:a7:0d:3a:
b4:6b:3b:92:3c:73:e3:e7:04:a8:8d:9c:9c:b7:c2:66:64:a2:
75:bc:be:3f:53:ef:96:b6:a4:bb:3a:da:f3:5f:56:24:0b:b9:
e2:0e:b7:67:79:53:16:5b:26:c3:f7:fa:1a:90:57:f5:d3:a0:
7b:34:ea:7c:43:45:47:79:d0:e5:67:13:21:90:37:24:85:f0:
df:99:0f:92:98:93:a0:fc:4b:0c:0c:52:1e:da:bd:06:95:60:
59:83:8c:5d:8b:cc:57:28:64:6b:ef:c2:16:8c:4b:37:6e:02:
08:2d:9b:29:6b:8e:42:6c:98:35:5a:60:0a:fd:54:4d:df:ec:
ee:c8:8f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:53 2024 by rpki-client on console-fra.rpki-client.org