Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/690DD9C8E84A11EEB0FC67B5775412E6.roa
File: 690DD9C8E84A11EEB0FC67B5775412E6.roa (raw, json)
Hash identifier: BOEswrNvQVRFXu1J2qfwBlvLQco5nmsVYIe2Uo7ZUeA=
Subject key identifier: 6E:1C:3A:E3:89:38:8A:55:90:5A:B3:42:5E:E5:24:72:10:F1:41:8F
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: A8
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/690DD9C8E84A11EEB0FC67B5775412E6.roa
Signing time: Fri 22 Mar 2024 12:47:58 +0000
ROA not before: Fri 22 Mar 2024 12:47:55 +0000
ROA not after: Sat 22 Mar 2025 12:47:55 +0000
asID: 37073
IP address blocks: 41.216.144.0/24 maxlen: 24
41.216.145.0/24 maxlen: 24
41.216.146.0/24 maxlen: 24
41.216.147.0/24 maxlen: 24
41.216.148.0/24 maxlen: 24
41.216.149.0/24 maxlen: 24
41.216.150.0/24 maxlen: 24
41.216.151.0/24 maxlen: 24
41.216.152.0/24 maxlen: 24
41.216.153.0/24 maxlen: 24
41.216.154.0/24 maxlen: 24
41.216.155.0/24 maxlen: 24
41.216.156.0/24 maxlen: 24
41.216.157.0/24 maxlen: 24
41.216.158.0/24 maxlen: 24
41.216.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 04 Jun 2024 00:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Mar 22 12:47:55 2024 GMT
Not After : Mar 22 12:47:55 2025 GMT
Subject: CN=65fd7dfe-710e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:a2:8f:7b:42:cf:20:9d:32:01:98:e4:ee:
ac:94:ff:a6:38:eb:82:4f:e2:08:79:3d:6d:b8:86:
93:cf:f0:15:a5:f7:0a:75:af:28:d6:3d:fe:d8:d8:
62:3b:59:30:3d:63:95:d5:78:5a:e0:d0:60:68:3e:
85:d3:a9:48:45:dc:26:de:66:c0:0f:74:a7:e4:30:
2c:ce:1c:73:65:c1:ee:32:12:f6:61:2a:f0:e5:cd:
f0:f7:d0:8b:b2:f0:8e:1d:b9:95:3c:34:e7:c7:ad:
68:17:26:42:6c:12:2e:92:b9:69:f2:dc:b0:9a:eb:
da:5f:be:f4:b4:8a:44:d8:e8:8f:0f:eb:28:be:85:
9b:d5:f5:4d:b5:b5:55:f8:f7:e3:21:b6:86:72:51:
e9:a7:19:01:36:35:0e:a4:a4:11:b5:5f:a9:d3:39:
9e:f9:2f:7c:6d:6c:d2:4e:fe:da:a4:93:0f:9c:db:
b4:f9:af:95:22:b2:3d:ba:18:33:3e:d5:05:b3:3b:
f0:e6:59:33:96:af:3b:d9:9f:96:c2:42:a5:51:60:
78:b7:76:64:bc:2f:b4:d0:dd:e4:83:00:3b:2d:85:
85:f1:bd:60:47:90:91:a5:a9:02:f6:6a:e7:8e:a7:
0f:6b:ed:ed:1f:f6:e7:db:95:b7:79:74:c5:2b:ac:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1C:3A:E3:89:38:8A:55:90:5A:B3:42:5E:E5:24:72:10:F1:41:8F
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/690DD9C8E84A11EEB0FC67B5775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:31:0e:89:70:e4:7e:bb:07:2a:c6:ea:3e:dc:94:64:14:2f:
75:bc:c7:72:5e:e7:e4:e0:01:4a:a6:b3:3a:6a:82:b2:8d:76:
a0:73:78:66:53:86:b8:d8:57:88:b3:b9:29:97:22:57:c5:7a:
78:c8:f2:35:ca:f2:36:26:e2:62:9c:c9:9c:f5:30:46:1b:2e:
c9:af:26:af:cc:9c:83:f6:61:c7:b2:dc:2c:27:cd:17:8a:e7:
cc:62:ca:15:14:8f:d1:cb:16:62:47:ed:35:96:b1:52:9a:e8:
20:e1:a7:2a:71:9e:c5:89:43:f4:cb:6e:9a:49:5a:9d:e1:8f:
5d:48:52:15:74:fc:37:64:97:b3:59:8e:75:6c:ae:d0:d0:97:
45:92:eb:fe:f8:01:03:81:5d:59:e0:f3:5d:7a:34:36:e5:c1:
11:8b:f5:c1:50:75:9a:74:5c:6d:a8:11:1b:80:54:6b:93:b6:
ef:a3:7c:62:3f:4f:09:2b:21:57:89:71:e5:63:da:f6:e3:fd:
99:0c:74:cd:54:f6:5f:c1:ba:d9:e5:b2:c3:fd:9d:86:56:e3:
9d:45:38:e2:ec:47:55:bc:54:19:18:18:d5:49:e6:b2:ad:83:
3c:21:4d:65:98:87:0b:a5:0e:7b:09:72:46:43:df:64:c5:cc:
10:c1:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:38 2024 by rpki-client on console-ams.rpki-client.org