Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/0331A55AC88711EDA1B9D1A6F1222468.roa
File: 0331A55AC88711EDA1B9D1A6F1222468.roa (raw, json)
Hash identifier: Z5DAUvIjXoBx4GGCuvXKQGLH4Jh9pFC0RHSj+G6qEeM=
Subject key identifier: D9:8B:0B:D8:E8:23:BD:91:7F:16:AF:B5:5F:F1:BD:C6:D0:50:49:25
Certificate issuer: /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Certificate serial: 040A
Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/0331A55AC88711EDA1B9D1A6F1222468.roa
Signing time: Wed 22 Mar 2023 07:56:12 +0000
ROA not before: Wed 22 Mar 2023 07:56:08 +0000
ROA not after: Tue 22 Mar 2033 07:56:08 +0000
asID: 37337
IP address blocks: 41.79.48.0/24 maxlen: 24
41.79.49.0/24 maxlen: 24
41.79.50.0/24 maxlen: 24
41.79.51.0/24 maxlen: 24
102.223.24.0/24 maxlen: 24
102.223.25.0/24 maxlen: 24
102.223.26.0/24 maxlen: 24
102.223.27.0/24 maxlen: 24
2c0f:f840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Validity
Not Before: Mar 22 07:56:08 2023 GMT
Not After : Mar 22 07:56:08 2033 GMT
Subject: CN=641ab49c-e54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:b3:d8:30:0c:5a:c7:8b:92:ea:4a:ea:cc:
a8:bd:3f:77:3f:bc:4d:53:d3:f7:57:60:36:54:23:
08:a8:e8:33:b1:4b:a3:e7:87:e2:96:b4:8c:b8:de:
d6:e6:38:9b:a3:a5:90:e5:58:b7:0c:96:70:8e:5a:
59:e2:ed:00:94:a6:d9:31:97:eb:33:7a:74:26:9d:
b6:ef:94:df:17:ed:c1:87:6b:43:83:ec:cc:d2:36:
26:78:17:74:1c:22:ae:32:8a:7b:94:4e:b8:41:16:
fd:fe:3b:7f:3f:94:d4:4c:89:d3:f4:fd:36:f4:92:
ee:f5:b8:dc:65:0b:44:f1:f3:11:5c:e0:d4:7f:3a:
fe:7e:0b:c8:35:b3:f8:83:82:2d:7c:52:92:f6:1d:
02:ba:54:90:f0:f4:6f:96:1c:f0:35:59:b7:07:6c:
dd:ed:54:5e:88:0d:c0:e0:85:cd:5c:54:e3:38:09:
25:ec:68:83:b6:0c:05:31:0f:bc:49:50:8c:9a:27:
ea:ba:d1:aa:38:f5:7b:fb:a6:5c:9c:41:3c:1f:4e:
8e:52:c4:24:27:e3:e1:ef:13:5e:46:76:b5:73:ff:
e1:39:c5:8e:cd:e7:39:d6:79:72:56:2c:e8:d5:1b:
c7:2e:17:0c:a4:e3:2f:c2:1d:9b:ec:08:c4:81:99:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8B:0B:D8:E8:23:BD:91:7F:16:AF:B5:5F:F1:BD:C6:D0:50:49:25
X509v3 Authority Key Identifier:
keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/0331A55AC88711EDA1B9D1A6F1222468.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.79.48.0/22
102.223.24.0/22
IPv6:
2c0f:f840::/32
Signature Algorithm: sha256WithRSAEncryption
18:3f:12:e1:d0:2a:0e:28:7e:66:e0:79:55:fc:4d:04:d5:1e:
e7:bf:22:0d:1d:c3:83:7f:93:db:f9:42:47:5c:cc:66:84:f3:
20:66:25:3a:35:7f:70:48:16:40:63:0e:1f:1f:d2:e0:21:5a:
8b:be:1b:66:56:5f:ed:63:af:c6:1b:0b:71:75:e6:88:3d:3f:
63:b2:c7:5d:4b:3f:b5:ab:05:09:1f:9e:5b:b3:13:db:7f:08:
51:d8:4b:a6:01:d3:91:77:c6:25:6d:e3:36:f7:e9:72:3b:78:
56:90:6f:17:eb:f6:5b:93:48:0f:2d:be:fd:17:1b:00:ab:7c:
70:1d:06:e8:0e:f5:33:03:87:69:8e:94:74:57:eb:bd:33:7c:
65:fe:83:02:30:e2:b6:16:11:d0:ff:a1:f8:d5:bf:28:01:b7:
d1:ce:f8:6e:b0:67:6c:41:e6:cf:93:28:a7:8b:92:96:ba:ab:
00:4a:e0:e4:f0:2b:9e:29:e9:31:6d:84:c5:cb:b2:b2:51:c4:
ac:f4:2c:64:78:d4:40:36:67:3d:39:70:4d:2e:da:a4:93:a4:
d4:e6:5e:1b:b4:12:9c:bf:bd:c2:87:5b:49:06:97:0a:3c:ff:
dc:64:2d:75:58:d9:65:e2:90:49:17:b9:52:a3:1c:f6:53:2b:
cf:30:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org