Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/91225D20B48411EE952769C1775412E6.roa
File: 91225D20B48411EE952769C1775412E6.roa (raw, json)
Hash identifier: mhVeeizhtixCVX6BqOJHleQFTIpO0BzvG9yU4TMR2p0=
Subject key identifier: C7:90:F9:FF:B4:86:3D:67:39:9E:C8:AC:D3:85:C4:81:6B:E9:B8:CD
Certificate issuer: /CN=F3663C93AF/serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
Certificate serial: 08
Authority key identifier: 13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/91225D20B48411EE952769C1775412E6.roa
Signing time: Tue 16 Jan 2024 15:33:16 +0000
ROA not before: Tue 16 Jan 2024 15:33:12 +0000
ROA not after: Wed 15 Jan 2025 15:33:12 +0000
asID: 328446
IP address blocks: 41.222.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.mft
rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 Nov 2024 00:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3663C93AF/serialNumber=139653264E61F8C30D4F304F4E004D4A4AF70DDD
Validity
Not Before: Jan 16 15:33:12 2024 GMT
Not After : Jan 15 15:33:12 2025 GMT
Subject: CN=65a6a1bc-7147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e1:82:53:62:b0:bb:db:6d:6d:02:94:74:b3:
f4:8e:eb:d6:c6:ac:d0:3e:82:07:98:bc:01:6f:9a:
9e:d6:c2:9c:1f:0f:23:bc:66:d5:01:63:f3:b3:77:
15:79:83:89:dc:72:0c:5c:34:0b:fd:1d:5c:f9:4d:
c9:00:97:07:bc:43:9a:d5:db:3e:01:cb:b0:c8:28:
97:15:7a:d8:a1:e4:4e:70:07:2d:27:4c:05:55:14:
37:36:c0:0a:fa:9b:ae:d6:6e:26:eb:9b:8f:7e:0e:
db:f4:fe:83:aa:1f:c6:7a:d2:1e:1c:ac:6b:e8:97:
d8:38:02:7a:0b:3e:71:30:7f:e0:87:cd:60:cd:c6:
9b:f1:b3:aa:5e:99:98:07:26:33:93:a1:1e:7f:02:
67:23:64:f3:13:fe:e9:fe:9f:5d:98:7a:85:2c:34:
44:92:17:2f:0f:7f:15:5d:74:70:aa:88:2f:2c:bf:
0c:3a:2e:bb:1e:38:d3:b9:5d:72:19:dd:89:1a:9a:
72:61:89:e3:86:f0:28:08:7c:5c:82:37:c6:3b:de:
8b:3d:c2:15:c4:e9:22:ed:c9:f5:d4:13:39:dd:5a:
7b:09:d4:a8:b7:6b:8f:ee:23:75:19:4c:51:a3:8d:
af:e8:5a:93:72:26:43:5a:11:e4:49:8c:6b:d9:32:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:F9:FF:B4:86:3D:67:39:9E:C8:AC:D3:85:C4:81:6B:E9:B8:CD
X509v3 Authority Key Identifier:
keyid:13:96:53:26:4E:61:F8:C3:0D:4F:30:4F:4E:00:4D:4A:4A:F7:0D:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E5ZTJk5h-MMNTzBPTgBNSkr3Dd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663C93/6244699AB48311EE8AD30EBF775412E6/91225D20B48411EE952769C1775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.222.123.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5e:f6:44:38:72:c3:02:16:91:3d:1d:e2:fd:79:85:93:56:
4b:c2:92:fe:ff:a7:a2:95:6f:c3:7d:ec:20:34:40:91:59:27:
61:8d:38:30:02:2c:44:2c:dd:94:1a:78:46:d4:23:ca:d8:08:
af:27:75:e2:42:ce:6e:01:bd:a2:e4:aa:b6:b0:11:37:0b:e0:
a8:b3:31:e5:b9:3b:d1:4d:b3:82:4c:fd:6e:45:07:a9:ac:d4:
70:d0:88:dd:70:e9:63:05:39:c1:c4:9b:82:66:38:e4:7d:f4:
99:bb:93:09:8a:a5:ef:b6:33:1a:55:8d:d7:16:cd:4f:f8:56:
37:ea:8d:b6:1f:d9:25:21:c6:54:85:a9:0f:ef:68:85:81:7c:
e7:ee:2f:b8:7d:cf:3f:f6:f7:73:7b:67:29:46:52:84:c1:87:
94:f6:42:76:24:a2:74:e3:f5:48:1e:7b:51:e1:e3:b3:72:99:
19:10:a9:d2:79:e5:22:25:ed:9a:46:ba:ca:10:1b:e6:55:48:
32:55:b6:eb:69:a3:47:a9:91:f1:88:1c:87:79:81:59:b4:02:
67:d5:40:80:cd:46:d5:1a:e8:58:98:7c:ad:f3:2c:64:eb:96:
0a:26:59:49:fa:2c:42:a5:07:63:43:c8:ff:49:25:e3:0f:92:
51:c6:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:43:45 2024 by rpki-client on console-ams.rpki-client.org