Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/341444A4EE0611ECA47D4F8CF1222468.roa
File: 341444A4EE0611ECA47D4F8CF1222468.roa (raw, json)
Hash identifier: 5YbdNBfbmz1C6LgL/EGyM06dpl98H6mogKseSBeoHI4=
Subject key identifier: 6E:FA:7A:DC:1A:A0:7A:B3:25:BF:54:EC:91:76:E7:DA:83:A9:EB:F2
Certificate issuer: /CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Certificate serial: 02
Authority key identifier: 21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/341444A4EE0611ECA47D4F8CF1222468.roa
Signing time: Fri 17 Jun 2022 06:24:55 +0000
ROA not before: Fri 17 Jun 2022 06:24:51 +0000
ROA not after: Sat 30 Jun 2040 06:24:51 +0000
asID: 37035
IP address blocks: 41.222.176.0/21 maxlen: 24
154.74.0.0/15 maxlen: 24
2c0f:f0c0::/31 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.mft
rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364386BAF/serialNumber=211E5B988632F53D4CC1220CE2930FED82D04C9C
Validity
Not Before: Jun 17 06:24:51 2022 GMT
Not After : Jun 30 06:24:51 2040 GMT
Subject: CN=62ac1e37-1b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:9b:2f:53:40:f1:d3:c4:63:97:3d:9b:52:
c9:83:eb:82:0d:94:fc:4f:46:b1:94:dd:aa:98:08:
fa:c1:92:81:5d:53:03:02:9d:3e:e8:ad:1c:43:53:
66:95:c8:a1:fe:92:b8:80:d2:63:c3:07:40:14:bc:
4a:a7:9e:9b:29:d9:b2:d4:49:c0:bb:31:e7:5f:fb:
be:18:a4:78:65:10:33:6e:03:38:08:92:5a:c7:ad:
74:20:6b:be:d5:39:db:46:db:bf:47:76:a4:3c:07:
33:86:d8:6f:05:d4:ee:d0:d0:61:a5:99:cf:b1:89:
c0:fa:88:1b:29:94:e0:1f:d3:59:54:32:4f:b9:3e:
08:17:49:cd:6a:19:7c:06:73:cf:4e:41:8e:63:92:
13:58:7c:ad:ce:40:25:87:d4:95:e0:38:4f:2a:40:
26:84:e9:1a:61:5e:fa:9e:1d:61:e0:7c:32:73:95:
c7:6a:a1:f2:c5:21:69:d8:53:6d:8c:61:35:98:25:
45:08:bb:0c:ec:a3:d7:1e:27:9e:5f:d2:7b:73:ce:
1f:ff:c9:ab:d8:b0:a2:0a:6e:29:ff:a6:e0:f5:d3:
2e:32:d3:f6:76:d4:0c:65:84:f2:a2:88:10:38:d4:
d2:a2:ac:4d:80:ce:8b:84:42:86:9b:34:e1:c8:f6:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FA:7A:DC:1A:A0:7A:B3:25:BF:54:EC:91:76:E7:DA:83:A9:EB:F2
X509v3 Authority Key Identifier:
keyid:21:1E:5B:98:86:32:F5:3D:4C:C1:22:0C:E2:93:0F:ED:82:D0:4C:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/IR5bmIYy9T1MwSIM4pMP7YLQTJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IR5bmIYy9T1MwSIM4pMP7YLQTJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364386B/58D5B756EE0511EC98EDA389F1222468/341444A4EE0611ECA47D4F8CF1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.176.0/21
154.74.0.0/15
IPv6:
2c0f:f0c0::/31
Signature Algorithm: sha256WithRSAEncryption
26:4e:3e:ef:eb:ff:73:34:aa:c5:45:bd:18:bf:4f:bc:56:6a:
86:c3:9d:72:2c:5f:66:38:86:6c:93:20:ac:6c:4d:d6:fe:4f:
18:c0:6d:be:a5:52:64:b7:6e:09:2e:33:b6:0e:0a:ce:ab:77:
36:d5:16:c8:55:8e:c1:ab:3f:95:04:3d:12:96:9e:b6:ee:da:
5b:57:ea:d8:30:8f:10:a6:1c:77:67:43:bc:72:ef:dd:bc:a8:
80:b4:f2:bd:49:d1:fb:61:5e:c8:42:cb:7c:0f:6b:4f:c1:37:
2f:49:54:71:d6:c9:e1:54:25:eb:1b:25:ae:f8:83:1d:17:fc:
29:06:5d:0b:44:7a:32:cf:39:82:f4:66:a8:98:50:94:21:b0:
f8:00:ee:ef:a6:61:23:dc:73:f5:74:a7:a6:67:22:5c:a6:0d:
c9:f7:dc:53:99:c9:55:e9:2f:9f:64:bb:93:51:b1:a8:5f:1e:
d0:e5:c8:1c:f0:53:af:23:ca:23:55:04:5b:37:35:62:c1:29:
b2:5a:27:47:3e:cd:4c:23:24:b2:ef:48:03:77:80:5a:10:aa:
4e:a6:46:48:27:3e:56:86:a0:68:9e:71:bf:8e:d7:87:81:07:
90:1e:a5:a5:68:32:1c:60:30:4a:d4:5c:ba:74:b7:8c:d0:be:
fe:13:63:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:33 2024 by rpki-client on console-ams.rpki-client.org