Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/010D6112B48411EE99E05BC0775412E6.roa
File: 010D6112B48411EE99E05BC0775412E6.roa (raw, json)
Hash identifier: QVLnCJrG0ItmCVhEtO7ezPcfhn1Hez5cLONInjvLtkM=
Subject key identifier: 65:36:D6:C0:F0:86:50:79:BC:CD:19:90:79:C0:17:43:41:32:99:02
Certificate issuer: /CN=F3663C93AF/serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
Certificate serial: 04
Authority key identifier: 13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/010D6112B48411EE99E05BC0775412E6.roa
Signing time: Tue 16 Jan 2024 15:29:14 +0000
ROA not before: Tue 16 Jan 2024 15:29:11 +0000
ROA not after: Wed 15 Jan 2025 15:29:11 +0000
asID: 328446
IP address blocks: 41.222.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663C93AF/serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
Validity
Not Before: Jan 16 15:29:11 2024 GMT
Not After : Jan 15 15:29:11 2025 GMT
Subject: CN=65a6a0ca-997b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4d:9e:0c:00:aa:3f:f4:6e:d9:8e:05:7b:30:
d7:24:a0:66:2d:60:db:73:95:ce:f2:55:68:eb:ce:
dc:a1:97:da:b8:23:25:91:5a:bf:33:f8:5f:fa:d7:
49:35:50:11:a1:94:0e:eb:20:42:c4:c5:3f:9c:37:
1f:b9:bc:23:ef:35:aa:cd:23:9b:4e:cd:ef:7b:cf:
9b:cc:23:34:c3:0b:65:17:7c:2b:ee:3a:96:42:e8:
f6:d4:11:42:bb:10:9f:7c:b6:ea:7e:dc:1c:f6:ac:
5b:0b:15:73:2f:9d:a2:83:da:f7:a0:98:7f:65:fe:
1a:e9:86:ad:3b:fe:c4:36:68:3d:34:07:3d:6c:d7:
c9:9f:5e:2b:f0:68:45:36:1f:8d:95:79:1a:2d:d0:
cb:a8:82:f0:62:3a:b6:95:2b:c0:2d:02:69:42:47:
d4:8a:46:9e:43:34:d0:b1:cb:91:db:e1:ad:a0:b7:
f3:68:c5:51:18:4f:2b:32:4b:f7:e1:d0:b4:45:fd:
57:40:68:9c:7f:ec:da:98:32:a7:34:0f:17:d5:99:
61:44:96:33:9c:0d:e8:16:c4:75:1b:57:87:46:ce:
a3:23:d2:8a:b5:f9:f9:cd:ee:01:7a:7c:ef:36:a4:
c8:52:6c:f6:cd:d7:a0:72:fe:c1:2a:48:35:29:ed:
2e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:36:D6:C0:F0:86:50:79:BC:CD:19:90:79:C0:17:43:41:32:99:02
X509v3 Authority Key Identifier:
keyid:13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/010D6112B48411EE99E05BC0775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.121.0/24
Signature Algorithm: sha256WithRSAEncryption
02:48:30:70:14:5a:8f:d1:fa:e9:2c:88:3e:e3:ed:ae:c1:13:
de:35:d4:1f:87:4a:9d:ea:5a:3c:e1:c3:df:94:42:47:4f:78:
d9:c5:c8:20:ff:05:87:a2:04:50:6f:bf:ae:2a:ad:03:59:1f:
cd:47:f7:0b:dd:45:84:de:6e:72:2f:6d:94:13:02:a7:41:ef:
11:5a:09:5a:cd:56:60:d8:bb:13:15:e5:c0:9e:f7:84:32:3f:
83:03:28:d2:7d:b8:31:82:d9:d3:2e:17:05:b9:05:51:6e:19:
57:7d:1e:7e:cc:5a:86:c7:ce:c5:26:58:c3:fe:57:42:2c:4d:
81:2b:71:b0:f5:a5:e4:5a:08:36:a3:76:78:d1:34:e3:41:13:
55:6c:36:77:fd:20:f7:53:30:ad:03:8b:ee:e9:d3:2f:86:ff:
77:00:61:97:a4:75:32:54:79:4c:07:1b:2a:0c:aa:3c:9b:75:
eb:79:d8:6a:7f:e7:ba:3d:d5:2d:2f:72:2c:71:29:a1:c6:0a:
09:89:db:59:8b:2c:f6:1f:fc:8e:4e:4a:02:fa:1a:ea:37:ae:
a8:ab:d0:a5:2f:3f:d7:dc:ae:45:ae:8c:2b:d1:55:9b:81:71:
d5:2f:ae:c3:97:0d:ce:08:84:b5:7d:63:94:8f:d1:3d:a6:c0:
e8:4f:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:54:23 2024 by rpki-client on console-fra.rpki-client.org