Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/B3968148BF7811EEB0ABC6B6775412E6.roa
File: B3968148BF7811EEB0ABC6B6775412E6.roa (raw, json)
Hash identifier: nQGeEEKitg0zBrxMzLb+bML7Bdg6QLf+TUFkV5DPzoE=
Subject key identifier: 8A:2D:C2:CA:D5:DB:82:A1:CC:C6:E5:2A:F3:F3:69:06:BB:10:18:EB
Certificate issuer: /CN=F365FB04AF/serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
Certificate serial: 07
Authority key identifier: 93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/B3968148BF7811EEB0ABC6B6775412E6.roa
Signing time: Tue 30 Jan 2024 14:06:02 +0000
ROA not before: Tue 30 Jan 2024 14:05:59 +0000
ROA not after: Wed 31 Jan 2029 14:05:59 +0000
asID: 37482
IP address blocks: 41.217.240.0/24 maxlen: 24
41.217.241.0/24 maxlen: 24
41.217.242.0/24 maxlen: 24
41.217.243.0/24 maxlen: 24
41.217.244.0/24 maxlen: 24
41.217.245.0/24 maxlen: 24
41.217.246.0/24 maxlen: 24
41.217.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl
rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 30 Jun 2024 00:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365FB04AF/serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
Validity
Not Before: Jan 30 14:05:59 2024 GMT
Not After : Jan 31 14:05:59 2029 GMT
Subject: CN=65b9024a-756b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:fb:c6:1d:3c:53:ae:88:1f:46:8a:32:5e:
a2:be:a2:a9:20:15:0c:9f:ac:0d:44:0e:c8:e9:22:
b5:83:97:4d:6c:f4:40:55:78:c0:3b:f2:40:ff:14:
fb:e4:97:16:5f:a5:d4:0f:75:21:e0:c2:70:b3:74:
29:93:e9:31:6b:e8:10:12:ca:b5:a2:52:39:d9:d2:
4d:69:30:f4:fd:fe:2a:1d:3f:8f:35:a6:60:cf:89:
9a:32:f0:e7:94:2f:cf:c8:12:4c:76:6b:a5:81:cb:
23:f4:dd:7c:82:7a:67:fa:9d:8a:34:95:a9:1e:6a:
96:a5:1f:58:ac:88:7b:26:97:77:2e:e5:6e:dc:6c:
75:17:fc:ca:20:be:fb:fd:44:8a:35:19:3b:45:21:
fb:08:54:0c:82:ed:b5:60:71:ca:9f:34:9c:39:b6:
c3:65:3b:df:3c:e2:77:68:27:29:00:c3:fb:05:3d:
13:6a:41:81:66:cf:8e:2e:d3:a0:5f:95:9c:1c:1f:
4b:a3:03:d1:7e:8f:30:79:bc:43:f1:cf:cd:76:95:
f1:b2:42:49:28:5f:c1:0c:ac:cb:04:48:52:fe:52:
76:0f:6d:ca:9a:44:72:34:4b:5f:35:ad:de:60:80:
17:26:7e:81:4e:64:82:eb:d8:e4:78:c2:a5:b2:bd:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:C2:CA:D5:DB:82:A1:CC:C6:E5:2A:F3:F3:69:06:BB:10:18:EB
X509v3 Authority Key Identifier:
keyid:93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/B3968148BF7811EEB0ABC6B6775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.217.240.0/21
Signature Algorithm: sha256WithRSAEncryption
31:91:3e:ad:12:38:e7:b2:57:ad:13:5d:8b:71:b5:cd:a1:c8:
b0:3a:43:e7:2a:3c:ab:01:4b:99:bc:15:a9:97:a3:e7:5b:ea:
18:89:92:2f:13:d3:12:9c:48:a3:21:38:2a:02:7f:48:14:11:
23:3a:1a:65:24:ec:63:8b:ca:51:c6:60:f2:25:71:bf:46:b9:
cd:6c:38:70:21:66:df:d6:77:bd:ec:e5:67:67:c3:df:f4:69:
b2:6e:17:0d:7f:0c:a9:86:8b:21:c4:44:d5:f7:aa:70:56:8f:
25:4c:e6:ae:3e:56:a4:99:39:3d:b8:59:2b:f8:4c:78:c0:57:
2d:92:56:3d:bb:5c:c2:83:c3:7c:c1:5a:e7:6d:01:45:0f:53:
4f:c8:cb:33:69:c8:4d:87:24:a7:48:18:c5:04:74:e1:07:77:
83:3f:d0:8a:ad:19:3c:f2:79:3e:17:eb:a8:e1:5e:0d:3f:08:
d1:4d:5e:ba:ef:b4:1a:23:94:0b:82:b4:27:1c:66:b3:5c:35:
6b:6f:7c:19:6c:c6:ab:82:4c:75:a3:68:26:60:2f:51:ee:39:
b8:87:71:85:35:62:cb:68:14:24:b6:a8:d0:43:b6:56:bb:8d:
75:4e:2a:14:de:cf:c8:c1:bf:b9:7d:8d:82:03:68:fa:89:8d:
7c:61:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 03:24:41 2024 by rpki-client on console-ams.rpki-client.org