Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/64A09974347711EFA9B42AA9762E951A.roa
File: 64A09974347711EFA9B42AA9762E951A.roa (raw, json)
Hash identifier: 7QRL+/LLHrXFZ+BNij6Z7lQkhgTfVm5ODR1UR0YRX/s=
Subject key identifier: E3:4A:5A:40:E3:E3:EF:86:34:8F:37:20:89:B2:E5:D6:62:F3:0E:14
Certificate issuer: /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial: 04
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/64A09974347711EFA9B42AA9762E951A.roa
Signing time: Thu 27 Jun 2024 11:21:27 +0000
ROA not before: Thu 27 Jun 2024 11:21:23 +0000
ROA not after: Tue 27 Jun 2034 11:21:23 +0000
asID: 37183
IP address blocks: 41.85.192.0/19 maxlen: 19
41.85.192.0/23 maxlen: 23
41.85.192.0/24 maxlen: 24
41.85.193.0/24 maxlen: 24
41.85.194.0/23 maxlen: 23
41.85.194.0/24 maxlen: 24
41.85.195.0/24 maxlen: 24
41.85.196.0/23 maxlen: 23
41.85.196.0/24 maxlen: 24
41.85.197.0/24 maxlen: 24
41.85.198.0/23 maxlen: 23
41.85.198.0/24 maxlen: 24
41.85.199.0/24 maxlen: 24
41.85.200.0/23 maxlen: 23
41.85.200.0/24 maxlen: 24
41.85.201.0/24 maxlen: 24
41.85.202.0/23 maxlen: 23
41.85.202.0/24 maxlen: 24
41.85.203.0/24 maxlen: 24
41.85.210.0/23 maxlen: 23
41.85.210.0/24 maxlen: 24
41.85.211.0/24 maxlen: 24
41.85.212.0/23 maxlen: 23
41.85.212.0/24 maxlen: 24
41.85.213.0/24 maxlen: 24
41.85.214.0/23 maxlen: 23
41.85.214.0/24 maxlen: 24
41.85.215.0/24 maxlen: 24
41.85.216.0/23 maxlen: 23
41.85.216.0/24 maxlen: 24
41.85.217.0/24 maxlen: 24
41.85.218.0/23 maxlen: 23
41.85.218.0/24 maxlen: 24
41.85.219.0/24 maxlen: 24
41.85.220.0/23 maxlen: 23
41.85.220.0/24 maxlen: 24
41.85.221.0/24 maxlen: 24
41.85.222.0/23 maxlen: 23
41.85.222.0/24 maxlen: 24
41.85.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Validity
Not Before: Jun 27 11:21:23 2024 GMT
Not After : Jun 27 11:21:23 2034 GMT
Subject: CN=667d4b37-4845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:55:04:2e:c4:c4:fa:8e:a9:d2:9c:8a:e7:
a1:17:72:3d:84:3b:21:35:40:45:06:9d:b4:f3:fc:
8c:65:5b:df:be:ee:c5:ce:a2:ee:0e:de:6a:f7:ff:
f6:42:30:54:72:b0:cc:23:9c:a3:8f:88:8a:87:ea:
28:bc:41:89:a8:27:52:4c:b7:4f:28:10:f4:93:a6:
3d:0a:69:10:d1:b5:dc:36:85:09:67:4b:d2:23:28:
85:9a:36:cd:4d:81:20:97:de:37:20:79:2f:2c:c4:
cb:f5:3b:e7:11:a6:56:2a:0b:11:e2:a8:ed:76:0f:
6e:09:01:91:cd:7a:1d:75:82:ac:c0:46:40:4c:5b:
f2:44:30:02:85:cd:0c:4e:97:04:0a:50:59:53:ce:
96:9e:17:81:12:dd:2a:56:47:af:63:1d:ad:6c:c9:
c2:39:26:07:ab:cd:47:e3:09:ef:09:f9:18:7d:d4:
9a:eb:a3:1b:00:6d:ac:91:70:59:ee:76:4d:10:c9:
4c:82:70:b1:43:29:2c:11:a5:6d:a4:f7:65:83:01:
cf:cd:fa:f9:fb:b7:75:1a:8e:83:ea:c8:b8:f7:a2:
7d:64:d1:fe:eb:ee:d6:f6:a9:b9:38:36:18:2f:82:
41:52:cd:fe:e3:50:c3:23:38:1c:e3:80:3c:de:51:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:5A:40:E3:E3:EF:86:34:8F:37:20:89:B2:E5:D6:62:F3:0E:14
X509v3 Authority Key Identifier:
keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/64A09974347711EFA9B42AA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.85.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:16:ba:2f:db:ae:d1:fc:a0:ba:7b:93:06:32:b8:f1:48:ca:
17:5d:28:ad:b6:14:10:0a:15:69:07:58:c9:34:78:cd:95:81:
77:08:d4:01:81:c6:83:c9:57:86:2e:69:79:1f:1c:9a:b5:d0:
54:e8:99:a8:68:ad:e1:2d:2f:fd:69:a2:80:85:75:e3:ca:b9:
72:e6:6a:af:d6:3d:52:52:d2:b9:2e:61:e6:9f:bf:03:dc:2f:
7c:ff:f9:4f:5a:3e:b3:00:2b:1d:79:ea:28:0c:b6:ef:7e:80:
ba:21:4f:c6:31:08:44:04:fa:88:f8:ed:a4:84:b8:fa:07:c0:
05:2f:65:f2:fe:f4:67:f5:1c:22:9e:27:60:ab:4f:2c:70:47:
a3:24:2e:ab:7b:ec:00:c2:08:7f:5d:b3:d2:81:12:fb:0d:6b:
25:d2:fe:ba:0d:37:3e:13:d8:64:e4:28:f1:6e:db:a1:e2:7d:
3d:c7:d9:12:6a:03:6a:6f:e2:6b:1a:74:90:ea:b1:91:49:91:
64:6e:80:60:fe:5b:a4:2c:79:f9:76:52:e8:bd:ba:c3:61:cd:
2c:63:16:03:72:e9:88:21:4b:8d:b6:e7:c2:4c:63:38:80:37:
0d:03:e5:d1:8a:5f:79:26:e0:15:86:c3:3c:21:e8:13:49:e4:
72:5b:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org