Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/ACA70A7E4A1F11EFB750724B762E951A.roa
File: ACA70A7E4A1F11EFB750724B762E951A.roa (raw, json)
Hash identifier: jJTJnCCr3s4j/KC7iphB3k6ogrQ8G2LscLSFEQgVdg0=
Subject key identifier: A5:21:FB:9C:21:4C:9C:71:80:A9:E8:71:28:EC:97:68:55:4D:CF:5D
Certificate issuer: /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial: 3B
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/ACA70A7E4A1F11EFB750724B762E951A.roa
Signing time: Thu 25 Jul 2024 00:48:57 +0000
ROA not before: Thu 25 Jul 2024 00:00:53 +0000
ROA not after: Mon 14 Dec 2026 00:00:53 +0000
asID: 37030
IP address blocks: 41.215.160.0/24 maxlen: 24
41.215.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Sep 2024 00:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Validity
Not Before: Jul 25 00:00:53 2024 GMT
Not After : Dec 14 00:00:53 2026 GMT
Subject: CN=66a1a0f9-d42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:af:16:ba:1e:b6:32:c9:61:c1:31:9a:cf:
51:4b:66:f2:8d:0c:d4:e2:d8:df:fa:7b:b3:b9:2d:
84:ca:31:71:75:b4:ba:d1:9d:62:72:94:81:30:9d:
2c:1b:f5:74:f4:bc:a9:e4:8f:d5:4b:ff:02:65:0e:
e0:38:ac:cb:9c:d7:57:96:d8:0a:12:c8:01:b1:d7:
5f:d3:7a:1e:57:fd:51:2b:64:20:db:72:bf:bc:60:
eb:79:24:b2:1d:19:44:a9:a7:c2:8f:bf:9f:2d:e8:
49:a4:10:6f:02:71:00:06:02:dd:e5:57:13:2e:25:
a4:9c:55:78:0f:26:86:7c:9d:a6:c4:04:e6:36:11:
0a:07:80:ad:c2:a5:53:19:54:f2:26:0e:b4:3c:b4:
f2:e6:3e:e2:55:4f:c4:dc:b7:b9:e0:89:64:9c:35:
02:64:9d:2f:f4:88:51:01:9e:7f:7f:b2:a4:9a:e0:
6a:67:3f:e9:4d:ee:bb:bb:49:5e:4b:76:c7:e5:81:
cb:77:a1:c9:92:87:a3:cb:98:ea:26:e8:9b:63:a7:
f4:0b:82:24:fd:5b:df:d1:05:95:04:3a:c6:34:0e:
02:d0:54:ea:b2:bb:2e:12:ad:67:27:4d:2b:8d:fd:
05:a8:93:c0:2f:b7:7e:a7:2b:fb:f0:af:a4:fd:ba:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:21:FB:9C:21:4C:9C:71:80:A9:E8:71:28:EC:97:68:55:4D:CF:5D
X509v3 Authority Key Identifier:
keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/ACA70A7E4A1F11EFB750724B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.215.160.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:82:79:09:af:8a:4e:46:e2:40:59:33:97:07:51:6e:c9:76:
9e:bc:84:70:59:05:1f:0c:da:2d:98:02:cf:a0:e3:fe:b3:70:
7a:68:80:71:86:e2:ad:e1:c5:1e:34:ca:ea:13:f4:b9:70:60:
80:d8:b5:a6:79:07:7e:53:2d:39:4f:5e:6f:fa:8f:4e:08:db:
a1:93:b6:c9:99:77:a4:81:08:09:b8:75:ff:2b:11:73:a2:ca:
44:8b:94:9c:64:39:90:e5:0f:b9:53:4c:90:53:2e:52:b1:48:
d7:2d:4a:52:df:36:a6:f5:aa:61:1d:0b:1e:90:38:a0:98:d1:
b7:bd:01:f4:09:8f:66:67:1b:be:30:a9:2f:7f:99:92:f0:3b:
a2:0a:09:51:df:5b:a0:cb:7b:49:24:98:a5:4c:73:a9:4c:43:
4d:0c:03:08:8f:ad:81:d5:90:ac:45:74:7f:69:24:96:03:cf:
bf:c6:e4:2a:7d:62:97:0b:95:52:2f:69:23:4b:65:79:bf:ce:
0d:46:8e:bf:fa:13:5a:2f:3e:d2:53:96:47:ca:0d:95:1d:05:
36:64:cb:4f:a4:ab:a9:d4:99:ef:27:66:da:bd:72:8d:1e:0b:
b6:e7:1a:63:06:ca:5d:33:21:85:f1:c9:a1:a7:1f:2c:14:ad:
34:04:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 05:01:54 2024 by rpki-client on console-ams.rpki-client.org