Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/47FF373C78F311E6ABE5CF6EF8AEA228.roa
File: 47FF373C78F311E6ABE5CF6EF8AEA228.roa (raw, json)
Hash identifier: PMUGcMSEGkK5VwbD/ElC2WVLlNF/LkvKddQXhWr3/S0=
Subject key identifier: C1:27:AE:F1:F5:6D:6C:9F:61:77:F5:B8:05:EB:9F:CF:2D:5A:DC:15
Certificate issuer: /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial: A7
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/47FF373C78F311E6ABE5CF6EF8AEA228.roa
Signing time: Mon 12 Sep 2016 14:14:56 +0000
ROA not before: Mon 12 Sep 2016 14:14:52 +0000
ROA not after: Wed 30 Sep 2026 14:14:52 +0000
asID: 37670
IP address blocks: 41.77.48.0/21 maxlen: 24
41.77.48.0/24 maxlen: 24
41.77.49.0/24 maxlen: 24
41.77.50.0/24 maxlen: 24
41.77.51.0/24 maxlen: 24
41.77.52.0/24 maxlen: 24
41.77.53.0/24 maxlen: 24
41.77.54.0/24 maxlen: 24
41.77.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 May 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167 (0xa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Validity
Not Before: Sep 12 14:14:52 2016 GMT
Not After : Sep 30 14:14:52 2026 GMT
Subject: CN=57d6b860-eeae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:78:1c:af:5b:ae:12:f3:e9:81:fa:76:f1:
eb:71:71:97:c7:3a:8a:b6:b8:48:fc:d0:e8:15:19:
ab:5e:59:6e:15:57:29:d1:8a:a6:83:2a:cf:8d:d7:
3a:47:f6:60:9f:2a:df:f9:1b:48:2b:45:12:c3:6b:
2d:30:30:25:7c:b7:e4:41:12:d0:8e:a7:d0:d4:4c:
47:a8:49:f8:17:78:b7:3d:0c:62:4c:ee:f9:6a:6c:
71:9d:ee:53:a2:19:d1:d0:bd:43:94:f6:14:66:29:
be:8c:6a:ca:ff:86:0f:82:e1:8d:53:4e:be:8a:e1:
de:72:f1:42:d2:02:b6:a3:d6:92:db:7e:c3:76:9c:
8a:02:91:fe:77:49:81:d3:19:15:6c:06:0e:9f:98:
1e:b6:72:75:02:e2:61:66:08:d5:cb:b8:e5:92:4e:
37:dd:87:6a:6a:18:b4:24:70:50:f0:12:49:01:5f:
4b:50:cd:f4:37:0a:2b:59:ff:e5:f2:6e:a9:9b:e6:
6e:9f:9e:41:7b:6c:9a:1d:b6:88:37:e1:b3:3f:89:
b8:f5:8c:af:f2:bb:56:3e:0c:64:9c:41:55:66:54:
cd:a4:68:0e:51:4c:d3:c2:e5:3c:d9:8a:63:5a:30:
2f:6c:3d:0b:a9:6b:fa:8d:8a:0f:b6:6a:3a:f8:b5:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:27:AE:F1:F5:6D:6C:9F:61:77:F5:B8:05:EB:9F:CF:2D:5A:DC:15
X509v3 Authority Key Identifier:
keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/47FF373C78F311E6ABE5CF6EF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.77.48.0/21
Signature Algorithm: sha256WithRSAEncryption
04:f2:7d:f0:82:e8:58:f9:18:1d:a1:d1:b3:70:0b:69:b5:34:
92:75:03:91:11:8c:88:4d:e3:96:c4:9a:fd:ad:3c:9e:c4:39:
10:d4:1a:5f:ba:1d:07:56:c7:e3:78:96:19:be:0a:76:ec:8f:
22:21:f8:49:e7:82:29:95:30:79:90:5b:39:09:ae:5e:03:ae:
b4:c2:da:2a:0b:af:13:bb:33:3c:ce:14:38:a9:ff:6a:42:d0:
92:62:17:e2:c9:77:ae:2c:97:8a:2a:d4:47:73:6a:1f:eb:99:
4a:00:69:49:da:d9:0f:4b:fc:68:d3:e1:41:4e:b5:e6:50:00:
df:01:d3:70:0f:6f:39:a5:f7:3e:16:33:83:1b:cb:74:37:4c:
23:68:3d:fc:9c:e3:79:b3:4e:07:0e:43:2a:a2:7e:c2:d8:cf:
10:b9:76:47:cf:59:9a:27:4f:b2:6b:1f:8e:38:9b:6f:f8:89:
9e:c3:c1:b3:01:d3:00:a6:5a:93:e3:19:2e:48:1a:45:df:f0:
a1:a6:47:36:16:4a:54:55:2b:85:dd:c0:2a:06:26:8c:ca:49:
01:c4:a1:9c:79:af:39:da:73:57:38:1e:fd:1a:c2:5a:6e:76:
5e:30:a9:8a:8d:09:f7:49:00:e2:b2:70:d8:4f:e7:48:bb:9c:
26:c6:9e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 02:03:49 2024 by rpki-client on console-fra.rpki-client.org