Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/7812D96CBE8F11EEB3FB0491775412E6.roa
File: 7812D96CBE8F11EEB3FB0491775412E6.roa (raw, json)
Hash identifier: FPHVgrbfsrOt+ow0TZ6G1tCosW0HnXgVaFwFojSrRkk=
Subject key identifier: 71:60:D0:A7:23:A1:33:5B:A2:84:8B:17:18:F2:F5:61:D9:2A:79:E1
Certificate issuer: /CN=F36479AFAF/serialNumber=07BAD6177458B648409D07F59A9910A5D3403D0C
Certificate serial: 0687
Authority key identifier: 07:BA:D6:17:74:58:B6:48:40:9D:07:F5:9A:99:10:A5:D3:40:3D:0C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B7rWF3RYtkhAnQf1mpkQpdNAPQw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/7812D96CBE8F11EEB3FB0491775412E6.roa
Signing time: Mon 29 Jan 2024 10:16:30 +0000
ROA not before: Mon 29 Jan 2024 10:16:26 +0000
ROA not after: Fri 29 Jan 2027 10:16:26 +0000
asID: 37308
IP address blocks: 41.78.208.0/24 maxlen: 24
41.78.209.0/24 maxlen: 24
41.78.210.0/24 maxlen: 24
41.78.211.0/24 maxlen: 24
197.234.32.0/24 maxlen: 24
197.234.33.0/24 maxlen: 24
197.234.34.0/24 maxlen: 24
197.234.35.0/24 maxlen: 24
197.234.36.0/24 maxlen: 24
197.234.37.0/24 maxlen: 24
197.234.38.0/24 maxlen: 24
197.234.39.0/24 maxlen: 24
197.234.48.0/24 maxlen: 24
197.234.49.0/24 maxlen: 24
197.234.50.0/24 maxlen: 24
197.234.51.0/24 maxlen: 24
197.234.52.0/24 maxlen: 24
197.234.57.0/24 maxlen: 24
197.234.58.0/24 maxlen: 24
197.242.240.0/24 maxlen: 24
197.242.241.0/24 maxlen: 24
197.242.242.0/24 maxlen: 24
197.242.243.0/24 maxlen: 24
197.242.244.0/24 maxlen: 24
197.242.245.0/24 maxlen: 24
197.242.250.0/24 maxlen: 24
197.242.251.0/24 maxlen: 24
197.242.252.0/24 maxlen: 24
2c0f:f3a8::/32 maxlen: 40
2c0f:f3a8::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.mft
rsync://rpki.afrinic.net/repository/afrinic/B7rWF3RYtkhAnQf1mpkQpdNAPQw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1671 (0x687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36479AFAF/serialNumber=07BAD6177458B648409D07F59A9910A5D3403D0C
Validity
Not Before: Jan 29 10:16:26 2024 GMT
Not After : Jan 29 10:16:26 2027 GMT
Subject: CN=65b77afe-938a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:01:bd:e0:56:43:98:48:d2:1a:8a:52:af:
09:b6:6a:a3:0f:51:2c:a8:88:19:5c:ac:29:64:61:
98:98:e3:94:36:75:a8:fa:99:19:cf:14:5a:f8:72:
49:b5:e1:e5:36:1c:62:5f:83:9f:b8:14:b8:74:c4:
91:89:f0:c7:c2:6a:ac:56:3f:ba:15:ed:e9:b5:61:
46:97:93:10:32:1e:74:de:a7:ff:9e:d4:6f:99:98:
fb:d7:b6:94:0e:d7:bf:20:42:7a:aa:95:23:a5:f6:
db:11:93:3b:26:37:cc:2b:43:f2:03:0e:b2:48:d7:
8a:81:12:b8:80:4a:82:ee:5a:82:1b:9f:6d:7c:2c:
f8:d0:25:fd:ee:12:be:bf:de:db:f9:00:77:90:68:
3f:b7:7d:3e:9e:39:cf:3c:64:e8:2d:26:57:11:ae:
46:c7:58:c3:1f:ee:83:c9:1f:2b:e3:bd:69:4a:12:
03:36:4a:1b:11:30:4a:7d:db:60:43:5e:e4:e0:16:
16:08:94:4b:b6:1e:81:3c:d3:68:8a:7a:23:a3:63:
87:fd:06:86:f1:d5:59:46:4c:64:e0:6a:62:37:53:
fb:5f:12:9e:cf:a4:4f:3d:04:eb:5e:e4:81:c4:d2:
b4:0b:ac:da:55:e7:29:94:3d:26:47:e3:f0:29:80:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:D0:A7:23:A1:33:5B:A2:84:8B:17:18:F2:F5:61:D9:2A:79:E1
X509v3 Authority Key Identifier:
keyid:07:BA:D6:17:74:58:B6:48:40:9D:07:F5:9A:99:10:A5:D3:40:3D:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B7rWF3RYtkhAnQf1mpkQpdNAPQw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/7812D96CBE8F11EEB3FB0491775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.78.208.0/22
197.234.32.0/21
197.234.48.0-197.234.52.255
197.234.57.0-197.234.58.255
197.242.240.0-197.242.245.255
197.242.250.0-197.242.252.255
IPv6:
2c0f:f3a8::/32
Signature Algorithm: sha256WithRSAEncryption
6a:02:a2:95:88:a4:00:40:92:7f:1a:47:37:6b:5c:d7:33:84:
00:58:21:0d:d0:14:03:e4:8e:68:46:01:e0:61:62:95:ce:cc:
0c:c2:8e:ab:21:35:bf:de:7d:b8:a5:d0:a1:b5:3f:40:02:86:
36:8f:b6:a9:ee:4c:2f:98:aa:79:47:4b:37:70:e8:63:a0:e6:
b5:c7:74:9f:68:6a:22:38:27:c2:5b:74:52:69:dc:57:a4:b1:
d5:ce:48:ac:a6:a0:e8:55:7a:16:a7:0b:89:7d:bd:e8:ae:2c:
3a:1a:03:ca:5b:a8:0a:d7:23:8f:14:05:94:80:47:d6:13:28:
20:30:e8:89:87:83:9e:72:29:14:0d:b1:f1:3e:f4:76:7c:17:
2e:71:bb:f1:e6:47:82:58:79:02:68:78:44:b9:02:92:d8:d6:
9b:c4:7d:01:4e:6b:34:c3:b7:1c:c2:3b:a6:17:5c:af:c4:72:
44:00:20:7a:ee:30:15:af:16:0d:f7:24:c1:70:55:d7:36:97:
7a:e8:e8:fd:75:fd:27:16:e1:56:39:a8:b0:81:76:53:d2:91:
7a:e4:f7:3b:d9:59:72:68:93:cc:2c:a9:b4:c7:de:f8:42:5d:
97:6b:33:ba:bc:ba:0c:18:60:61:b8:8d:6b:a5:e0:0f:e3:91:
3e:bd:5f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org