Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/68864AB4C4F311EE8BF25B98775412E6.roa
File: 68864AB4C4F311EE8BF25B98775412E6.roa (raw, json)
Hash identifier: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=
Subject key identifier: 38:81:CD:60:82:93:EF:96:42:6F:A8:58:56:EF:53:2E:A8:EB:C9:08
Certificate issuer: /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial: 44
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/68864AB4C4F311EE8BF25B98775412E6.roa
Signing time: Tue 06 Feb 2024 13:27:00 +0000
ROA not before: Tue 06 Feb 2024 13:26:57 +0000
ROA not after: Sat 06 Feb 2027 13:26:57 +0000
asID: 36905
IP address blocks: 41.205.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Validity
Not Before: Feb 6 13:26:57 2024 GMT
Not After : Feb 6 13:26:57 2027 GMT
Subject: CN=65c233a4-c112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7c:e2:14:89:1b:a3:60:a8:7a:45:75:66:2a:
95:4e:6d:2b:dd:f3:32:70:c9:73:e8:e5:de:25:70:
08:cc:a3:a3:06:b9:60:69:5d:dd:40:10:c2:6d:23:
d5:96:f2:f5:1f:63:b1:0f:c2:79:ba:d1:0f:03:97:
56:2a:13:3c:e9:5c:cf:c8:be:fb:f0:58:7f:82:7c:
1c:34:77:05:b1:55:80:54:30:da:30:53:d8:34:5f:
c6:bf:32:fb:f8:f7:73:c5:6a:7e:24:d5:3b:11:b1:
33:e6:de:14:be:ca:af:1c:62:b4:35:c6:67:e1:69:
7b:1e:e9:01:cd:99:42:37:19:08:2d:57:69:a9:09:
27:75:0d:af:c4:d6:d8:9e:cf:03:49:42:de:6f:a3:
ba:6a:c6:ed:ad:eb:b8:60:83:1d:a4:4a:8e:44:54:
3a:f8:22:47:7f:08:02:bf:ad:e1:f2:1f:08:bb:cf:
98:2f:4f:36:b9:c8:e3:8b:0a:44:90:7c:e2:88:e4:
12:e7:5b:7a:e8:b8:84:6c:59:6e:12:4f:bc:6e:b3:
fb:55:bd:ec:a0:42:4a:c7:8a:7a:28:1b:e4:dd:1b:
04:94:6e:aa:8f:67:97:25:8c:b9:70:be:6c:8f:b6:
19:b5:0d:6b:c0:31:8e:80:47:39:a0:33:90:46:d7:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:81:CD:60:82:93:EF:96:42:6F:A8:58:56:EF:53:2E:A8:EB:C9:08
X509v3 Authority Key Identifier:
keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/68864AB4C4F311EE8BF25B98775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.205.64.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:32:a6:b1:80:a3:e9:a8:cb:f8:7e:6f:db:3f:05:71:b5:f0:
34:b5:6e:6c:41:3f:99:3e:a4:2e:63:bd:13:a1:6a:b4:d5:27:
b7:1c:78:b7:70:1c:fd:ae:c4:fe:c2:e7:69:0c:47:40:0d:05:
84:bc:00:a5:3c:f4:c6:96:2e:3b:b8:71:c0:bb:32:74:31:2d:
2c:93:f6:e5:fd:bc:ad:83:ff:f0:42:d0:39:c8:56:32:de:3f:
dc:d4:f1:7f:46:9a:7c:ba:11:4f:21:48:d5:68:e8:e9:83:06:
2a:0b:75:bf:e2:7c:dd:b4:1f:99:49:79:08:5d:ab:89:8e:01:
30:ab:7f:28:22:b2:80:f8:6b:d9:61:a6:ba:e6:6a:b0:fc:81:
49:cd:02:8b:62:8f:7d:8d:27:6b:00:a0:68:2d:bb:25:44:cc:
e6:d3:5d:02:c7:84:93:26:0d:4e:c3:a7:07:e7:03:75:fd:a9:
ed:28:1f:2a:e4:8d:6e:92:e6:22:de:88:00:84:4e:17:be:5b:
6c:5a:98:e6:3a:e4:3a:53:61:be:9a:0a:fe:b0:bc:8c:94:94:
bb:66:b8:43:c7:86:9e:47:da:49:49:81:8b:8a:5c:d3:75:24:
47:a4:79:84:32:13:c6:c4:3b:fb:41:d2:09:6f:af:e3:d6:ea:
07:89:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org