Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/D6CFCEFAE4E711E98D4D8510F8AEA228.roa
File: D6CFCEFAE4E711E98D4D8510F8AEA228.roa (raw, json)
Hash identifier: c7DaldmCVPjpuumPlhE9K/tUWBg94JNU91iBaGrs7WA=
Subject key identifier: 6C:CF:80:A0:51:1D:CF:3A:37:ED:CE:DF:CA:C3:29:05:7C:B9:DD:87
Certificate issuer: /CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
Certificate serial: 1F
Authority key identifier: 42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/D6CFCEFAE4E711E98D4D8510F8AEA228.roa
Signing time: Wed 02 Oct 2019 07:40:01 +0000
ROA not before: Wed 02 Oct 2019 07:39:56 +0000
ROA not after: Wed 31 Oct 2029 07:39:56 +0000
asID: 37712
IP address blocks: 41.79.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.mft
rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3643835AF/serialNumber=428A89318E5067DD9C8ECF67E77E79C5FDA3792B
Validity
Not Before: Oct 2 07:39:56 2019 GMT
Not After : Oct 31 07:39:56 2029 GMT
Subject: CN=5d945451-4c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:ac:8f:e2:79:c4:fb:a1:57:44:f5:10:33:
34:fb:9f:27:26:fc:cc:e8:7a:55:9d:06:b9:5a:77:
58:dc:93:39:9b:37:dc:1d:f1:ee:b2:03:ef:91:db:
1e:ce:93:bf:74:f3:5e:1c:39:dc:26:36:99:09:a8:
9e:2b:49:7e:32:a0:cb:cd:1c:8e:3e:dc:41:6e:4d:
2b:e7:44:59:ac:f0:9d:e9:95:c2:8d:5d:5f:6a:ad:
83:b1:dc:ef:65:c1:bf:f1:e9:b2:09:f0:5c:8f:ed:
82:63:e0:f0:5b:83:87:bb:1d:bb:3a:0e:07:b2:3c:
f4:21:d3:82:75:4e:c4:f5:d0:ed:57:18:a9:be:2a:
69:d5:5d:31:36:8d:fc:05:eb:79:b5:6d:b0:93:5f:
0e:d9:73:8b:9c:2b:c1:f1:c0:79:aa:79:7e:17:2a:
ca:0f:c6:02:d7:51:2e:9f:51:b7:18:d0:de:ba:c7:
e9:e4:c4:ba:97:b4:3f:cf:e0:2a:27:51:b8:ac:fc:
2a:c1:5d:80:67:88:dd:97:da:8a:23:56:6e:41:16:
c4:f4:e6:50:dd:e9:70:7d:f8:cc:3c:02:7a:51:43:
0d:5e:f2:00:23:11:3d:ea:fd:6b:40:e8:19:2c:f5:
e0:d7:00:8d:73:fa:d0:79:9a:29:b8:47:c3:66:2f:
2c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:80:A0:51:1D:CF:3A:37:ED:CE:DF:CA:C3:29:05:7C:B9:DD:87
X509v3 Authority Key Identifier:
keyid:42:8A:89:31:8E:50:67:DD:9C:8E:CF:67:E7:7E:79:C5:FD:A3:79:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/QoqJMY5QZ92cjs9n5355xf2jeSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QoqJMY5QZ92cjs9n5355xf2jeSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3643835/D5B994A8D55E11E9B7571043F8AEA228/D6CFCEFAE4E711E98D4D8510F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.79.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:52:e9:f2:35:54:05:be:70:ae:53:ee:be:f3:e8:ed:73:b8:
6c:f1:b2:43:19:ec:01:32:ae:b9:21:f5:4a:98:f3:bb:14:11:
9a:e7:53:54:e5:7a:a4:4d:bc:89:dd:78:89:7d:28:f6:d2:47:
16:11:9f:f1:3c:e7:5b:32:81:47:10:8b:e7:b8:a5:37:93:81:
29:12:64:68:ff:38:07:eb:dc:0c:e4:f7:63:f2:44:e8:92:56:
73:16:d1:bf:82:ec:5a:c8:ce:2f:11:44:3f:08:d0:d7:c0:11:
35:47:c3:7e:ac:52:01:89:16:41:8c:9d:9a:2b:8b:4f:e8:14:
df:fb:db:72:00:b4:12:e0:6b:46:36:41:71:2b:34:bf:92:5d:
80:84:68:70:a1:e2:48:b2:59:6f:3f:96:29:81:4b:a0:0e:98:
ff:3b:10:fb:78:b9:9b:28:60:fe:cc:65:6b:ce:d3:b6:69:94:
be:33:0f:bf:ef:ca:10:f7:b7:75:24:22:17:9b:25:66:3b:f3:
15:99:6a:af:92:62:ef:36:00:0e:bd:67:c6:ff:54:7c:50:3c:
32:fb:92:16:cd:7b:f6:07:58:0e:a6:d1:48:24:05:c7:6d:28:
8a:d0:f0:1f:90:3e:90:fd:fe:9b:35:ad:4b:66:fd:a5:84:eb:
98:83:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org